Tag: www.infosecurity-magazine.com

Stripe API Skimming Campaign Unveils New Techniques for Theft

A novel skimming attack has been observed by Jscramber, using the Stripe API to steal payment information by injecting malicious scripts into pages This article has been indexed from www.infosecurity-magazine.com Read the original article: Stripe API Skimming Campaign Unveils New…

Gray Bots Surge as Generative AI Scraper Activity Increases

Gray bots surge as generative AI scraper activity increases, impacting web applications with millions of requests daily This article has been indexed from www.infosecurity-magazine.com Read the original article: Gray Bots Surge as Generative AI Scraper Activity Increases

North Korea’s Fake IT Worker Scheme Sets Sights on Europe

Google has found a significant increase in North Korean actors attempting to gain employment as IT workers in European companies, leading to data theft and extortion This article has been indexed from www.infosecurity-magazine.com Read the original article: North Korea’s Fake…

Steam Surges to Top of Most Spoofed Brands List in Q1

Gaming community Steam appeared most often in phishing emails and texts detected by Guardio in Q1 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: Steam Surges to Top of Most Spoofed Brands List in Q1

ICO Apologizes After Data Protection Response Snafu

The UK’s data protection regulator says it is overwhelmed with complaints from the public This article has been indexed from www.infosecurity-magazine.com Read the original article: ICO Apologizes After Data Protection Response Snafu

Google to Switch on E2EE for All Gmail Users

Google is set to roll out end-to-end encryption for all Gmail users, boosting security, compliance and data sovereignty efforts This article has been indexed from www.infosecurity-magazine.com Read the original article: Google to Switch on E2EE for All Gmail Users

Cybercriminals Expand Use of Lookalike Domains in Email Attacks

BlueVoyant found that the use of lookalike domains in email-based attacks is allowing actors to extend the types of individuals and organizations being targeted This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybercriminals Expand Use of Lookalike…

New Malware Variant RESURGE Exploits Ivanti Vulnerability

CISA recommends immediate action to address malware variant RESURGE exploiting Ivanti vulnerability CVE-2025-0282 This article has been indexed from www.infosecurity-magazine.com Read the original article: New Malware Variant RESURGE Exploits Ivanti Vulnerability

EU Commission to Invest €1.3bn in Cybersecurity and AI

The funding will go to several projects within the Digital Europe Programme (DIGITAL) work program for 2025 to 2027 This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Commission to Invest €1.3bn in Cybersecurity and AI

NCSC Urges Users to Patch Next.js Flaw Immediately

The UK’s National Cyber Security Agency has called on Next.js users to patch CVE-2025-29927 This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Urges Users to Patch Next.js Flaw Immediately

US Seizes $8.2m from Romance Baiting Scammers

The DoJ has managed to recoup over $8m from scammers, stolen in romance baiting schemes This article has been indexed from www.infosecurity-magazine.com Read the original article: US Seizes $8.2m from Romance Baiting Scammers

Solar Power System Vulnerabilities Could Result in Blackouts

Forescout researchers found multiple vulnerabilities in leading solar power system manufacturers, which could be exploited to cause emergencies and blackouts This article has been indexed from www.infosecurity-magazine.com Read the original article: Solar Power System Vulnerabilities Could Result in Blackouts

Trump CISA Cuts Threaten US Election Integrity, Experts Warn

Expert speakers discussed the impact of reported cutbacks to CISA on the ability of local officials to protect against surging cyber-attacks on US election infrastructure This article has been indexed from www.infosecurity-magazine.com Read the original article: Trump CISA Cuts Threaten…

Morphing Meerkat PhaaS Platform Spoofs 100+ Brands

A PhaaS platform, dubbed ‘Morphing Meerkat,’ uses DNS MX records to spoof over 100 brands and steal credentials, according to Infoblox Threat Intel This article has been indexed from www.infosecurity-magazine.com Read the original article: Morphing Meerkat PhaaS Platform Spoofs 100+…

CoffeeLoader Malware Loader Linked to SmokeLoader Operations

Newly identified CoffeeLoader uses multiple evasion techniques and persistence mechanisms to deploy payloads and bypass endpoint security This article has been indexed from www.infosecurity-magazine.com Read the original article: CoffeeLoader Malware Loader Linked to SmokeLoader Operations

No MFA? Expect Hefty Fines, UK’s ICO Warns

The ICO’s Deputy Commissioner told Infosecurity that organizations that fail to implement MFA and suffer a breach can expect heavy penalties This article has been indexed from www.infosecurity-magazine.com Read the original article: No MFA? Expect Hefty Fines, UK’s ICO Warns

Chinese Spy Group FamousSparrow Back with a Vengeance, Targets US

Once considered inactive, the Chinese cyber espionage group FamousSparrow has reemerged, targeting organizations across the US, Mexico and Honduras This article has been indexed from www.infosecurity-magazine.com Read the original article: Chinese Spy Group FamousSparrow Back with a Vengeance, Targets US

NCA Warns of Sadistic Online “Com” Networks

The UK’s National Crime Agency is warning of a growing cyber and physical threat from homegrown teens This article has been indexed from www.infosecurity-magazine.com Read the original article: NCA Warns of Sadistic Online “Com” Networks

NCSC Urges Domain Registrars to Improve Security

The UK’s National Cyber Security Centre has released new guidance to help domain registrars enhance security This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Urges Domain Registrars to Improve Security

SecurityScorecard Observes Surge in Third-Party Breaches

In its 2025 Global Third-Party Breach Report, SecurityScorecard has found that 35.5% of all cyber breaches in 2024 were third-party related, up from 29% in 2023 This article has been indexed from www.infosecurity-magazine.com Read the original article: SecurityScorecard Observes Surge…

Threat Actors Abuse Trust in Cloud Collaboration Platforms

Threat actors are exploiting cloud platforms like Adobe and Dropbox to evade email gateways and steal credentials This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actors Abuse Trust in Cloud Collaboration Platforms

Malicious npm Packages Deliver Sophisticated Reverse Shells

A newly discovered malware campaign uses malicious npm packages to deploy reverse shells, compromising development environments This article has been indexed from www.infosecurity-magazine.com Read the original article: Malicious npm Packages Deliver Sophisticated Reverse Shells

ETSI Publishes New Quantum-Safe Encryption Standards

Standards body ETSI has defined a scheme for key encapsulation mechanisms with access control (KEMAC), enabling quantum-secure encryption This article has been indexed from www.infosecurity-magazine.com Read the original article: ETSI Publishes New Quantum-Safe Encryption Standards

ENISA Probes Space Threat Landscape in New Report

EU security agency ENISA has released a new report outlining the threats and potential mitigations for the space sector This article has been indexed from www.infosecurity-magazine.com Read the original article: ENISA Probes Space Threat Landscape in New Report

New Android Malware Uses .NET MAUI to Evade Detection

McAfee researchers have identified a new wave of Android malware campaigns leveraging .NET MAUI to steal sensitive user information through fake apps This article has been indexed from www.infosecurity-magazine.com Read the original article: New Android Malware Uses .NET MAUI to…

Cybercriminals Use Atlantis AIO to Target 140+ Platforms

Cybercriminals are increasingly leveraging Atlantis AIO, which automates credential stuffing attacks across more than 140 platforms This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybercriminals Use Atlantis AIO to Target 140+ Platforms

VanHelsingRaaS Expands Rapidly in Cybercrime Market

VanHelsingRaaS, a new ransomware-as-a-service program, infected three victims within two weeks of release, demanding ransoms of $500,000 This article has been indexed from www.infosecurity-magazine.com Read the original article: VanHelsingRaaS Expands Rapidly in Cybercrime Market

Ukraine Railway Systems Hit by Targeted Cyber-Attack

Ukraine’s national railway company has suffered a “large-scale” cyber-attack, disrupting online services and operations This article has been indexed from www.infosecurity-magazine.com Read the original article: Ukraine Railway Systems Hit by Targeted Cyber-Attack

Albabat Ransomware Evolves to Target Linux and macOS

Trend Micro observed a continuous development of Albabat ransomware, designed to expand attacks and streamline operations This article has been indexed from www.infosecurity-magazine.com Read the original article: Albabat Ransomware Evolves to Target Linux and macOS

Cybercriminals Exploit CheckPoint Antivirus Driver in Malicious Campaign

A security researcher has observed threat actors exploiting vulnerabilities in a driver used by CheckPoint’s ZoneAlarm antivirus to bypass Windows security measures This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybercriminals Exploit CheckPoint Antivirus Driver in Malicious…

Attackers Use Fake CAPTCHAs to Deploy Lumma Stealer RAT

Attackers are exploiting user familiarity with CAPTCHAs to distribute the Lumma Stealer RAT via malicious PowerShell commands, according to HP This article has been indexed from www.infosecurity-magazine.com Read the original article: Attackers Use Fake CAPTCHAs to Deploy Lumma Stealer RAT

FishMonger APT Group Linked to I-SOON in Espionage Campaigns

The FishMonger APT Group has been linked with I-SOON, targeting governments, NGOs and think tanks in cyber-espionage campaigns This article has been indexed from www.infosecurity-magazine.com Read the original article: FishMonger APT Group Linked to I-SOON in Espionage Campaigns

UK Police Arrest 422 in Major Fraud Crackdown

February’s Operation Henhouse resulted in hundreds of arrests and the seizure of £7.5m This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Police Arrest 422 in Major Fraud Crackdown

Over Half a Million Hit by Pennsylvania Schools Union Breach

The Pennsylvania State Education Association (PSEA) has sent breach notifications to over 500,000 current and former members This article has been indexed from www.infosecurity-magazine.com Read the original article: Over Half a Million Hit by Pennsylvania Schools Union Breach

NCSC Sets 2035 Deadline for Post-Quantum Cryptography Migration

New NCSC guidance sets out a three-phase migration to post-quantum cryptography, designed to ensure all systems are protected from quantum attacks by 2035 This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Sets 2035 Deadline for Post-Quantum…

Windows Shortcut Flaw Exploited by 11 State-Sponsored Groups

Newly discovered vulnerability ZDI-CAN-25373 takes advantage of Windows shortcuts has been exploited by 11 state-sponsored groups since 2017 This article has been indexed from www.infosecurity-magazine.com Read the original article: Windows Shortcut Flaw Exploited by 11 State-Sponsored Groups

752,000 Browser Phishing Attacks Mark 140% Increase YoY

A surge in browser-based phishing attacks has been recorded over the past year, with a 140% increase compared to 2023 according to Menlo Security This article has been indexed from www.infosecurity-magazine.com Read the original article: 752,000 Browser Phishing Attacks Mark…

Fortinet Vulnerability Exploited in Ransomware Attack, CISA Warns

The US Cybersecurity and Infrastructure Security Agency added flaws in Fortinet and a popular GitHub Action to its Known Exploited Vulnerabilities catalog This article has been indexed from www.infosecurity-magazine.com Read the original article: Fortinet Vulnerability Exploited in Ransomware Attack, CISA…

New Report Highlights Common Passwords in RDP Attacks

Report reveals common password use in RDP attacks, highlighting weak credentials remain a major security flaw This article has been indexed from www.infosecurity-magazine.com Read the original article: New Report Highlights Common Passwords in RDP Attacks

Google Buys Wiz in $32bn Cloud Security Push

Google is set to acquire Wiz, a cloud security platform founded in 2020, for $32bn in an all-cash deal This article has been indexed from www.infosecurity-magazine.com Read the original article: Google Buys Wiz in $32bn Cloud Security Push

BlackBasta Ransomware Ties to Russian Authorities Uncovered

Leaked chat logs have exposed connections between the BlackBasta ransomware group and Russian authorities, according to new analysis by Trellix This article has been indexed from www.infosecurity-magazine.com Read the original article: BlackBasta Ransomware Ties to Russian Authorities Uncovered

Large-Scale Malicious App Campaign Bypassing Android Security

Bitdefender said the malicious app campaign has resulted in more than 60 million downloads of malicious apps from the Google Play Store This article has been indexed from www.infosecurity-magazine.com Read the original article: Large-Scale Malicious App Campaign Bypassing Android Security

UK’s Online Safety Act: Ofcom Can Now Issue Sanctions

From March 17, Ofcom will enforce rules requiring tech platforms operating in the UK to remove illegal content, including child abuse material This article has been indexed from www.infosecurity-magazine.com Read the original article: UK’s Online Safety Act: Ofcom Can Now…

Researchers Confirm BlackLock as Eldorado Rebrand

DarkAtlas researchers have uncovered a direct link between BlackLock and the Eldorado ransomware group, confirming a rebranded identity of the notorious threat actor This article has been indexed from www.infosecurity-magazine.com Read the original article: Researchers Confirm BlackLock as Eldorado Rebrand

Security Database Aims to Empower Non-Profits

Common Good Cyber has released a new mapping database designed to help NGOs find the security tools they need This article has been indexed from www.infosecurity-magazine.com Read the original article: Security Database Aims to Empower Non-Profits

LockBit Ransomware Developer Extradited to US

US authorities have extradited Rostislav Panev on charges of being a developer of the notorious LockBit ransomware This article has been indexed from www.infosecurity-magazine.com Read the original article: LockBit Ransomware Developer Extradited to US

Fraudsters Impersonate Clop Ransomware to Extort Businesses

Barracuda observed threat actors impersonating the Clop ransomware group via email to extort payments, claiming to have exfiltrated sensitive data This article has been indexed from www.infosecurity-magazine.com Read the original article: Fraudsters Impersonate Clop Ransomware to Extort Businesses

Volt Typhoon Accessed US OT Network for Nearly a Year

Volt Typhoon’s ten-month intrusion of Littleton Electric Light and Water Departments exposes vulnerabilities in the US electric grid This article has been indexed from www.infosecurity-magazine.com Read the original article: Volt Typhoon Accessed US OT Network for Nearly a Year

Tech Complexity Puts UK Cybersecurity at Risk

Palo Alto Networks found that nearly two-thirds of UK organizations cited technology complexity as the most significant challenge towards building a sophisticated security posture This article has been indexed from www.infosecurity-magazine.com Read the original article: Tech Complexity Puts UK Cybersecurity…

VC Investment in Cyber Startups Surges 35%

VC firms invested 35% more in cybersecurity startups in North America and Europe in Q4 2024 than a year previously This article has been indexed from www.infosecurity-magazine.com Read the original article: VC Investment in Cyber Startups Surges 35%

Trump Administration Shakes Up CISA with Staff and Funding Cuts

In a new round of cuts since Donald Trump became president, 100 people working with the US Cybersecurity and Infrastructure Agency saw their contracts terminated This article has been indexed from www.infosecurity-magazine.com Read the original article: Trump Administration Shakes Up…

Machine Identities Outnumber Humans Increasing Risk Seven-Fold

Surging machine identities, faster threat detection and fewer vulnerabilities are shaping cloud security according to a new report This article has been indexed from www.infosecurity-magazine.com Read the original article: Machine Identities Outnumber Humans Increasing Risk Seven-Fold

Chinese Hackers Implant Backdoor Malware on Juniper Routers

Mandiant revealed that Chinese espionage actor UNC3886 has deployed modified versions of the TinyShell backdoor across multiple Juniper OS routers This article has been indexed from www.infosecurity-magazine.com Read the original article: Chinese Hackers Implant Backdoor Malware on Juniper Routers

Microsoft Patches a Whopping Seven Zero-Days in March

Microsoft has fixed seven zero-days this Patch Tuesday, including one not currently being actively exploited This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Patches a Whopping Seven Zero-Days in March

New York Sues Allstate Over Data Breach and Security Failures

New York sues Allstate over data breach, alleging security failures that exposed the driver’s license numbers of nearly 200,000 individuals This article has been indexed from www.infosecurity-magazine.com Read the original article: New York Sues Allstate Over Data Breach and Security…

95% of Data Breaches Tied to Human Error in 2024

Mimecast found that insider threats, credential misuse and user-driven errors were involved in most security incidents last year This article has been indexed from www.infosecurity-magazine.com Read the original article: 95% of Data Breaches Tied to Human Error in 2024

Record Number of Girls Compete in CyberFirst Contest

More than 14,500 girls from across the UK took part in this year’s CyberFirst Girls competition This article has been indexed from www.infosecurity-magazine.com Read the original article: Record Number of Girls Compete in CyberFirst Contest

DDoS Blamed as X Suffers Multiple Outages

Pro-Palestine Dark Storm Team group claims responsibility for major DDoS attacks on X This article has been indexed from www.infosecurity-magazine.com Read the original article: DDoS Blamed as X Suffers Multiple Outages

SIM Swapping Fraud Surges in the Middle East

SIM swapping fraud surges in the Middle East as cybercriminals exploit websites mimicking legitimate services to steal personal data This article has been indexed from www.infosecurity-magazine.com Read the original article: SIM Swapping Fraud Surges in the Middle East