Information Security Magazine

South Korea’s People Power Party calls for new legislation after data on spy planes and tanks is hacked by North Korea

The FBI and other law enforcers claim to have disrupted the Radar/Dispossessor ransomware group

The CVE-2024-6768 flaw in the Windows CLFS.sys driver can lead to BSOD

DARPA awards $14 million to seven teams competing to develop AI systems capable of identifying and patching vulnerabilities in open-source software

Many stakeholders said the future UN convention could allow authoritarian countries to stifle political opposition and violate human rights

Microsoft claims Iran is ramping up election interference activity in the US, as Trump campaign claims it was hacked

Arthur Petrov is accused of exporting US chips for manufacturers supplying weaponry and equipment to the Russian military

CISA Director Jen Easterly calls on organizations to drive cybersecurity improvements through a 'Secure by Demand' approach

Leading AI companies have formed the Coalition for Secure AI (CoSAI) to address the growing cybersecurity risks posed by artificial intelligence

One primary concern is that the tool might turn ChatGPT users away from the product

ReliaQuest found that Rclone, WinSCP and cURL were the top three data exfiltration tools utilized by threat actors over the past year

CISA Director Jen Easterly expressed strong confidence in the integrity of US election, despite ongoing cybersecurity threats to democratic processes

A ransomware tabletop exercise was conducted against a fictious hospital, aiming to educate attendees of how to fight against such threats

After months of investigation, the SEC decided not to recommend any enforcement action against software provider Progress regarding the supply chain attack

The LOTS attack uses trusted sites like Google Drawings and WhatsApp to trick users into sharing data

Kimsuky was observed phishing university staff to steal valuable research for North Korea

CISA and FBI report claims the BlackSuit ransomware collective has extracted at least $500m from victims

Hackers stole $12m in virtual currency from Ronin Network, which has previously suffered a massive $620m heist

US cybersecurity officials warn that the recent CrowdStrike outage serves as a stark reminder of potential widespread disruptions from cyber-attacks

The Irish data protection watchdog accuses X Corp’s European subsidiary of breaching GDPR with Grok AI training