Information Security Magazine

Only 0.91% of vulnerabilities of the reported CVEs were weaponized, but represent the most severe risks

SecurityScorecard claims almost all of the world’s biggest public companies are connected to a supply chain breach

Singapore’s Ministry of Education ordered the removal of Mobile Guardian from students’ Chromebooks and iPads after a cybersecurity breach

The Grand Palais is among French museums hit by ransomware attacks as the Paris 2024 Summer Olympic Games are underway

Interpol claims intervention saved one Singapore firm $42m stolen by scammers

New report warns of escalating hardware supply chain attacks, with 19% of organizations impacted and nearly all IT leaders expecting nation-state involvement

SonicWall discovered the Apache OFBiz flaw, identifying it as a critical issue enabling unauthenticated remote code execution

50% of professionals also cited a lack of expertise as a barrier to effective cyber-risk management

TikTok has committed to permanently withdraw the Lite Rewards program from the EU, after legal proceedings were launched relating to its risks to users, particularly children

The White House and EC-Council scholarship program aims to train over 50,000 students in critical cybersecurity skills

The US government is taking TikTok to court for alleged violations of the COPPA regulation

Volexity claims the StormBamboo group compromised an ISP to push malicious software updates to customers

The UK’s ICO has identified children’s privacy concerns in 11 social media and video sharing platforms, warning of regulatory action if these issues are not addressed

The US Government Accountability Office has told the Environmental Protection Agency to urgently develop a strategy to tackle rising cyber-threats to the water industry

The UK's NCSC is launching ACD 2.0, an advanced suite of cybersecurity tools and services designed to protect businesses from evolving cyber threats

The rise in DDOS attacks against the gaming industry is accompanied by increasing bot activity

UK authorities shut down a scam platform responsible for over 1.3 million calls to 500,000 victims, resulting in millions of pounds in losses

CloudSek said the RansomEXX breach occurred via a misconfigured Jenkins server at Brontoo Technology

Pharma company Cencora confirmed in an updated SEC filing that sensitive personal and health data was exfiltrated by attackers in a February 2024 incident

The “Eriakos” info-stealing campaign is using hundreds of fake web shops to defraud victims