Information Security Magazine

Browser credential harvesting is an unusual activity for a ransomware group

YouTube’s new AI troubleshooting tool is designed to help users recover and secure their accounts after they’ve been hacked

Liverpool fans were the most frequent and highest-value targets for ticket scams last season, losing over £17,000 to fraudsters

Cthulhu Stealer targets macOS, posing a major threat by disguising as legitimate software via DMG files

The US FAA has proposed new rules for aircraft to address cyber vulnerabilities caused by the increased interconnectivity of critical systems

The United States bore most of these cyber-threats, with a 46.15% rise in attacks compared to 2023

FCC charges Lingo Telecom with $1m fine over voice deepfake during the 2024 New Hampshire primary election

The donation websites of the UK’s seven major political parties are missing critical security features to protect the accounts of donors, according to DataDome

ESET claims new NGate Android malware relays NFC data to steal card details for ATM cash-out

Quarklabs researchers claim millions of contactless key cards could be cloned via a backdoor

The MoonPeak RAT as used by UAT-5394 showed a possible connection to North Korean threat Kimsuky

The LiteSpeed Cache flaw may expose millions of WordPress sites to severe security risks

Australia’s data protection watchdog has decided to stop its investigation into US facial recognition company Clearview AI

Oregon Zoo revealed that an unauthorized actor potentially obtained payment card information used in transactions over six months

The building, located in Washington, DC, will be the new home of the US Cybersecurity and Infrastructure Security

Healthcare has been the most targeted sector according to Barracuda analysis of 200 reported ransomware incidents from August 2023 to July 2024

Malwarebytes report warns security teams to be on high alert for ransomware attacks at night

US chip firm Microchip reveals operational disruption stemming from cyber incident

ESET detected a new phishing technique using progressive web applications (PWAs) as part of a large-scale mobile financial scam

The Msupedge backdoor communicates with a command-and-control server by using DNS traffic