Multiple UK councils have warned that residents’ personal data may have been compromised following a ransomware attack on NRS Healthcare

A new banking Trojan targeting Android devices shows multifaceted capabilities

Electronic prescriptions provider MediSecure said the attack originated from a third-party vendor, and has impacted individuals’ personal and health information

Microsoft warned Storm-1811 started vishing attacks in April to gain access to target devices

Proofpoint said the attackers modified registry key names for persistence

Car manufacturer Nissan revealed that over 53,000 of its North America employees had their social security numbers accessed by a ransomware attacker

Nearly six out of ten surveyed ClubCISO members are confident AI is used securely in their organizations

UK organizations are less likely than their European peers to have known exploited bugs but take longer to fix them

The FBI claims to have seized the domain and servers of hacking forum BreachForums

Despite this setback, the auction house said bids can still be placed by phone and in-person

CPR said exploit builders in .NET and Python have been employed to deploy this malware

The National Cyber Security Centre launches an opt-in Personal Internet Protection service to safeguard individuals from cyber threats during the upcoming election

Google DeepMind’s SynthID can now be used to watermark AI-generated images, audio, text and video

Santander has warned that customer and employee data has been breached following unauthorized access to a database held by a third-party provider

NCSC CTO argues current market rewards prioritize cost over security, hindering the development of secure technology

Trend Micro research claims CISOs are often ignored or dismissed as “nagging” by their board

Microsoft has released patches for three zero-day vulnerabilities including two actively exploited in the wild

Comparitech said 2023 was a record year for breaches with 954 reported, up from 139 in 2022 and 783 in 2021

The 15-year-old Ebury botnet is more active than ever, as ESET found 400,000 Linux servers compromised for cryptocurrency theft and financial gain

The guide is designed to provide high-risk communities with actionable steps to bolster their cybersecurity defenses

Several software security experts have told Infosecurity that no new vulnerabilities have been added to the US National Vulnerability Database (NVD) since May 9

GCHQ chief warns China's cyber actions threaten global internet security, while Russia and Iran pose immediate risks

Infosecurity Europe research highlights significant challenges faced by organisations in staying up to speed with increasing compliance requirements

Recorded Future details a novel campaign that abuses legitimate internet services to deploy multiple malware variants for credential theft

UK insurers and the National Cybersecurity Centre release new guidance to discourage ransomware payments by businesses

Palo Alto Networks warns threat actors are using DNS tunneling techniques to probe for network vulnerabilities

In a first, the FCC has designated “Royal Tiger” as a malicious robocall threat group

The flaws include CVE-2023-47610, a security weakness within the modem’s SUPL message handlers

Analyzing Mallox samples, Sekoia identified two distinct affiliates using different approaches

A ransomware attack on US private healthcare provider Ascension has disrupted patient care, with several hospitals currently on diversion

Affiliates of prolific Black Basta ransomware group have breached over 500 global organizations

A threat actor known as IntelBroker claims to be selling confidential Europol data after a May breach

The UK's open source AI safety evaluation platform, Inspect, is set to empower global collaboration for safer AI development

Well-funded cybercriminals are adopting more sophisticated techniques, creating a need for defenders to stay informed about the evolving threat landscape

Experts at the RSA Conference urged cyber professionals to lead the way in securing AI systems today and pave the way for AI to solve huge societal challenges

Experts at the RSA Conference discussed what CISOs can do to protect themselves against legal pressure

Sysdig said the attackers gained access to these credentials from a vulnerable version of Laravel

Afghanistan, Turkmenistan and Tajikistan victims experienced the highest share of banking Trojans

Researchers discover large-scale Russian influence operation using GenAI to influence voters

Researchers discover 75,000+ domains hosting fraudulent e-commerce sites, in a campaign dubbed BogusBazaar

Experts at the RSA Conference discussed how governments, the open-source community and end users can work together to drastically improve the security of open-source software

CISA launched a new software vulnerability enrichment program to fill the gap left by NIST’s National Vulnerability Database backlog

Researchers from Carnegie Mellon University have shared an overview of their new AI Security Incident Response Team (AISIRT)

Europol and Eurojust targeted the orchestrators of a cryptocurrency scam launched in December 2017

The findings come from Apricorn, based on annual Freedom of Information (FOI) responses from 2023

The award recognises Khan's outstanding contributions to the field and his role in shaping the cybersecurity industry

IANS Research data finds many tech CISOs are concerned about their compensation as salaries stagnate

MedStar Health and DocGo have become the latest US healthcare providers to announce cybersecurity incidents

An ISACA survey found that just a third of organizations are adequately addressing security, privacy and ethical risks with AI