Information Security Magazine

CVE-2024-38173 is a medium severity RCE flaw in Microsoft Outlook, similar to CVE-2024-30103

Firms are introducing 300 services monthly, contributing to 32% of high or critical cloud exposures

Tenable detailed two privilege escalation vulnerabilities in the Azure Health Bot Service, one of which has been rated critical

A cyber-attack has hit several boroughs across Greater Manchester, England, leaving thousands of residents vulnerable to a phishing scam

The UK’s National Cyber Security Centre wants to test the effectiveness of cyber-deception tactics

Microsoft’s August Patch Tuesday saw the tech giant address nine zero-day vulnerabilities

In a Monday filing with the ASX, Evolution Mining stated that the incident was contained

NIST has formalized three post-quantum cryptographic algorithms, with organizations urged to start the transition to quantum-secure encryption immediately

The EVIT breach exposed the data of 208,717 individuals, including students, faculty and parents

CERT-UA has warned that a mass phishing campaign impersonating Ukraine’s Security Services has infected more than 100 government devices

Belarusian national Maksim Silnikau, who was operating under the ‘J.P. Morgan’ moniker, is believed to be one of the world’s most prolific Russian-speaking cybercriminals

South Korea’s People Power Party calls for new legislation after data on spy planes and tanks is hacked by North Korea

The FBI and other law enforcers claim to have disrupted the Radar/Dispossessor ransomware group

The CVE-2024-6768 flaw in the Windows CLFS.sys driver can lead to BSOD

DARPA awards $14 million to seven teams competing to develop AI systems capable of identifying and patching vulnerabilities in open-source software

Many stakeholders said the future UN convention could allow authoritarian countries to stifle political opposition and violate human rights

Microsoft claims Iran is ramping up election interference activity in the US, as Trump campaign claims it was hacked

Arthur Petrov is accused of exporting US chips for manufacturers supplying weaponry and equipment to the Russian military

CISA Director Jen Easterly calls on organizations to drive cybersecurity improvements through a 'Secure by Demand' approach

Leading AI companies have formed the Coalition for Secure AI (CoSAI) to address the growing cybersecurity risks posed by artificial intelligence