The US warns that the North Korea-linked Kimsuky group is exploiting poorly configured DMARC protocols to spoof legitimate domains in espionage phishing campaigns

Amnesty International found in Indonesia a murky ecosystem of surveillance suppliers, brokers and resellers that obscures the sale and transfer of surveillance technology

Microsoft illustrated the severity of the issue via a case study involving Xiaomi’s File Manager

Sweden experienced a wave of DDoS attacks as the country was working towards joining NATO, Netscout found

Dynatrace research claims global CISOs are concerned AI is driving advanced app security threats and poor developer practices

Attackers accessed emails, usernames, phone numbers, hashed passwords and authentication information

A US court has sentenced a Ukrainian national to 13 years and seven months in prison for his role in over 2500 ransomware attacks using the REvil strain

The US and its allies claim Russian hacktivists are disruptive operations in water, energy, food and agriculture sectors

The data from ReliaQuest also suggests LockBit faced a significant setback due to law enforcement action

Andrew Witty made the claims in a written testimony submitted before a House subcommittee hearing

Comparitech found that 18% of ransomware incidents in the US led to a lawsuit in 2023, with 59% of completed lawsuits since 2018 proving successful

New report from Netwrix reveals unplanned expenses impact half of breached firms, including a surge in lawsuits

The growth of software supply chain attacks pushed vulnerability exploits to the third most used initial access method, Verizon found

Join Claire Williams at Infosecurity Europe to learn how F1 leadership strategies can inspire cybersecurity leaders

The UK’s National Cyber Security Centre claims its AMS model will protect firms from state-backed mobile threats

The US Department of Homeland Security has released new guidelines for securing critical infrastructure and CBRN from AI threats

The first quarter of 2024 saw the most ransomware activity ever recorded, Corvus Insurance found in a new analysis

Central YMCA was fined £7,500 for a data breach exposing HIV information of support program participants, prompting the ICO to call for stronger privacy protections for people with HIV

According to JFrog, approximately 25% of all repositories lack useful functionality and serve as vehicles for spam and malware

Meta’s moderation failings could allow coordinated disinformation campaigns to thrive in the run-up to the EU election

Sophos found that the average ransom payment was $2m in 2023, with 63% of ransom demands $1m or more

Some of America’s biggest wireless carriers illegally sold customer location, says FCC

Google blocked millions of policy-violating apps from being listed on Play in 2023 and banned 333,000 bad accounts

The top malicious domains attracted over 100,000 hits each, according to Akamai Security

Tanto Security uncovered three vulnerabilities which could allow attackers to execute sandbox escapes and gain root permissions on host machines

Coffee County has discovered malicious cyber-activity on its IT systems, and it reportedly severed its connection to Georgia’s state voter registration system

European non-profit Noyb has filed a complaint to the Austrian data protection authority (DSB) over OpenAI’s ChatGPT providing false personal information

IoT manufacturers, retailers and importers must comply with new security legislation, the PSTI act, from today

Okta has issued customers with new advice on how to block mounting credential stuffing attacks

CISA’s RVWP program sent 1754 ransomware vulnerability notifications to government and critical infrastructure entities in 2023, leading to 852 devices being secured

The US Federal Trade Commission will send $5.6m worth of refunds to the spied-on customers of the Amazon-owned home camera company

The two founders of Samourai Wallet have been charged with money laundering and unlicensed money-transmitting offenses

An advisory from Cisco Talos has highlighted a sophisticated cyber-espionage campaign targeting government networks globally

Cyber threat intelligence provider Cyble found that DragonForce was using a ransomware binary based on LockBit Black’s builder

A new ISC2 study highlights the lack of diversity in cybersecurity with only 4% of teams having a majority of women, while 11% have none at all

Consumer rights group Which? has found more security gaps in UK banking sites and apps

Email-borne fraud accounted for more insurance claims than any other category in 2023, says Coalition

Jake Humphrey and Professor Damian Hughes, the minds behind the High Performance Podcast, share their top non-negotiable behaviours for success in cybersecurity

The bill that could see TikTok banned in the US has been approved by the House of Representatives and the Senate

The US Treasury announced sanctions on two companies and four individuals for cyber campaigns conducted on behalf of the Iranian government

The proximity of organizations’ headquarters, like Asda’s and NHS England’s, prompted BlueVoyant to choose Leeds as the location for its first UK SOC

Netacea research found that 93% of security leaders expect to face daily AI-driven attacks by the end of 2024, with 65% predicting that offensive AI will be the norm for cybercriminals

One in five UK organizations have had corporate data exposed via generative AI, says RiverSafe

North Korean hackers ran a year-long cyber-espionage campaign against South Korean defense companies

The move is reportedly part of a broader effort to counter the misuse of surveillance technology

The call comes amid the rollout of end-to-end encryption on Meta’s Messenger platform

Millions of Americans may be impacted by the Change Healthcare data breach as UnitedHealth confirms exposed data includes personal and health information

Mandiant’s latest M-Trends report found that vulnerability exploitation was the most common initial infection vector in 2023, making up 38% of intrusions

Notorious APT44 group Sandworm launched a major campaign against Ukrainian critical infrastructure in March