Information Security Magazine

Cybercriminals exploit government websites using open redirects and phishing tactics, bypassing secure email gateway protections

Government agencies and privacy watchdogs have started investigating the Chinese AI chatbot provider over data privacy concerns

ReliaQuest warns threat actor innovation and infostealer activity helped to accelerate breakout time by 22% in 2024

The National Audit Office warns of major gaps in cyber resilience across UK government departments

Energy contractor ENGlobal reported that sensitive personal data was stolen by threat actors, with the incident disrupting operations for six weeks

Group-IB researchers have exposed the highly organized affiliate platform and sophisticated operations of the Lynx Ransomware-as-a-Service group

A Ponemon Institute survey highlighted the growing impact of ransomware attacks on victims’ revenue and reputation

An API supply-chain attack affecting a popular online travel booking service put millions of airline users at risk

The number of data breach victims increased 312% annually to exceed 1.7 billion in 2024, according to the ITRC 2024 Annual Data Breach Report

The three Russian hackers are believed to be part of Unit 29155 of the GRU, also known as Cadet Blizzard, Ember Bear and Ruinous Ursa

Three men have been sentenced after pleading guilty to running an account hijacking service for fraudsters

A new phishing tactic has been identified by Cisco Talos, using hidden text salting to evade email security measures

Obsidian found that threat actors are focusing on SaaS applications to steal sensitive data, with most organizations' security measures not set up to deal with these attacks

A novel phishing campaign identified by Zimperium targets mobile users with malicious PDFs, impersonating USPS to steal credentials

74% of CISOs plan to increase their cyber crisis simulation budgets in 2025

A now-patched vulnerability could have enabled threat actors to remotely control Subaru cars

Change Healthcare has claimed 190 million customers were affected by a mega-breach last year

Amazon Web Services has launched its Cyber Education Grant Program in the UK

Crazy Evil, a group of crypto scammers, exploit NFTs and cryptocurrencies with malware targeting influencers and tech professionals

A new FBI advisory warned that North Korean IT worker schemes have escalated their activities in recent months to include data extortion