Information Security Magazine

A former ransomware negotiator has pleaded guilty to abusing his position by working with noted cybercrime group BlackCat

Infrawatch says ProxySmart platform enables SIM farm activity at “industrial scale”

The convergence of global tensions and rapid technological change is driving a new era of cyber risk, the NCSC warns

NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil

Gentlemen RaaS expands quickly with multi-platform attacks and SystemBC-linked infections

Data exposure, operational disruption and financial losses among issues faced by businesses struggling with the rapid rise of AI agents, warns Cloud Security Alliance report

Cloud app developer Vercel appears to have suffered a security breach

North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO

ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities

Formbook attacks use combination of DLL Side-Loading and Obfuscated JavaScript to stay hidden, researchers at WatchGuard have uncovered

FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices

The National Cyber Security Centre has shared an update of its resilience-building efforts for the NHS

Russian crypto-exchange Grinex claims Western intelligence agencies were behind a $13m heist

AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds

Coordinated action by FBI, Europol and others seizes infrastructure, makes arrests – and sends warning letters to known DDoS service users

US authorities jail two Americans for aiding North Korean laptop farm scams that infiltrated over 100 firms

APK malformation tactic now appears in over 3000 Android malware samples evading static analysis

Tennessee's CRMC notifies over 337,000 patients of Rhysida ransomware breach exposing sensitive data

NIST’s National Vulnerability Database will now prioritize enriching new and exploited flaws to address the record growth of reported CVEs

Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability