Information Security Magazine

Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot

The Five Eyes Alliance has published a rare call to action for organizations facing AI threats

ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates

Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices

North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to Microsoft security researchers

At least four cybersecurity firms confirmed they have been affected by a breach of business intelligence platform Klue via Salesforce integration

The UK’s data protection regulator the information commissioner has resigned after his position became “untenable”

The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign

Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities

SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing attacker focus

A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos

Hospital insider escapes criminal prosecution after attempting to sell royal’s medical records

Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them

CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs

Richard Horne, the NCSC CEO, said three-quarters of cyber-attacks targeting UK critical infrastructure came from nation-state actors

Interpol claims cybercrime accounts for third of crime in over half of Asia and South Pacific countries

Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm

GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials

The rise of AI-assistants and applications in the enterprise has seen a 93% increase in employees attempting to upload sensitive data, bringing security challenges