Information Security Magazine

Four current and former publicly trading tech companies have agreed to pay civil penalties in relation to the SEC charges

75% of US Senate campaign sites lack DMARC, risking cybersecurity and email safety

A phishing attack targeting Transak employees led to a data breach, compromising the information of 92,554 users

Meta is testing facial recognition technology to tackle celeb-bait ad scams and enable the recovery of compromised accounts

RUSI and Chatham House recommended global standards to combat commercial cyber tool abuse

AI tools are being used to launch over half a million cyber-attacks daily on retailers, according to a new report

The cryptographic vulnerabilities were found in Sync, pCloud, Icedrive and Seafile by ETH Zurich

A threat actor claimed to get hold of an exposed GitLab configuration file containing Zendesk API access tokens

The August ransomware attack stole 50,000+ documents from Nidec, leaked after ransom refusal

The malware loader taken down by Europol in May 2024 could be back with a vengeance

Businesses in Australia must update their privacy policies with clear and transparent information about their use of AI, said the regulator

Long-lived credentials in the cloud put organizations at high risk of breaches, a report from Datadog has found

Internet Archive founder confirmed the allegedly exposed data was “safe”

Microsoft urges macOS users to apply a fix for the vulnerability, which it believes may be under active exploitation by the Adload malware family

Instagram has announced new security features to protect users from sextortion scams, including hiding follower lists, preventing screenshots, and launching an awareness campaign

The Redmond-based firm was the most impersonated brand in the third quarter of 2024, while Alibaba entered the Top 10 for the first time

US authorities have charged a man for involvement in the SEC X account hack in January 2024, which falsely announced the approval of Bitcoin Exchange Traded Funds

Cicada3301 ransomware has targeted critical sectors in US/UK, leaking data from 30 firms in three months

US authorities have charged two Sudanese linked to DDoS cybercrime group, Anonymous Sudan, which caused $10m in damages

The ongoing campaign targets multiple critical infrastructure sectors, including healthcare, government, information technology, engineering, and energy