Information Security Magazine

One primary concern is that the tool might turn ChatGPT users away from the product

ReliaQuest found that Rclone, WinSCP and cURL were the top three data exfiltration tools utilized by threat actors over the past year

CISA Director Jen Easterly expressed strong confidence in the integrity of US election, despite ongoing cybersecurity threats to democratic processes

A ransomware tabletop exercise was conducted against a fictious hospital, aiming to educate attendees of how to fight against such threats

After months of investigation, the SEC decided not to recommend any enforcement action against software provider Progress regarding the supply chain attack

The LOTS attack uses trusted sites like Google Drawings and WhatsApp to trick users into sharing data

Kimsuky was observed phishing university staff to steal valuable research for North Korea

CISA and FBI report claims the BlackSuit ransomware collective has extracted at least $500m from victims

Hackers stole $12m in virtual currency from Ronin Network, which has previously suffered a massive $620m heist

US cybersecurity officials warn that the recent CrowdStrike outage serves as a stark reminder of potential widespread disruptions from cyber-attacks

The Irish data protection watchdog accuses X Corp’s European subsidiary of breaching GDPR with Grok AI training

A surge in new ransomware groups is fueling the cybercrime epidemic as financial incentives outweigh risks for attackers, despite law enforcement efforts

Microsoft 365's anti-phishing tip can be hidden via CSS, as shown by Certitude's Moody and Ettlinger

The CISA guidance prioritizes product security alongside the manufacturer's enterprise security

Boards need to understand where and why AI is being deployed within their organizations in order to mitigate risks

DARPA's AI Cyber Challenge is enlisting AI to fight software vulnerabilities, with the healthcare sector closely watching the semi-finals as a potential solution to rising cyber threats

A new study from the Chartered Management Institute finds just half of firms offer regular security training

The UK’s ICO wants to fine NHS partner Advanced £6m for failures that led to a major ransomware breach

Of the 17.8m phishing emails detected, 62% bypassed DMARC checks and 56% evaded all security layers

A new survey reveals that organizations are suffering an average of eight ransomware incidents per year and paying millions in ransom