Information Security and IT Security News - Infosecurity Magazine
Dec 20, 2024 · Ransomware Attack Exposes Data of 5.6 Million Ascension Patients 23 Dec 2024. US healthcare giant Ascension revealed that 5.6 million individuals have had their personal, medical and financial information breached in a ransomware attack
Apple Issues Emergency Security Update for Actively Exploited ...
Nov 20, 2024 · Apple has urged customers to apply emergency security updates, which fixes two actively exploited vulnerabilities on its devices. The fixes are included in the iOS 18.1.1 and iPadOS 18.1.1, Safari 18.1.1, visionOS 2.1.1 and macOS Sequoia 15.1.1 updates, available across a range of Apple devices, including iPhones, iPads, macOS and Apple Vision Pro.
FIN7 Gang Hides Malware in AI “Deepnude” Sites
Oct 3, 2024 · An infamous financially motivated threat group is luring victims to a network of malware-baited sites, promising downloads of deepfake tools, according to a new report from Silent Push.
New Generation of Malicious QR Codes Uncovered by Researchers
Oct 9, 2024 · A new generation of QR code phishing attacks have been uncovered by threat analyists at Barracuda.Research by the email protection firm highlighted new techniques that have been designed to evade traditional security defenses by including QR codes built from text-based ASCII/Unicode characters rather than the standard static image.
Microsoft 365 Copilot Vulnerability Exposes User Data Risks
Aug 27, 2024 · A vulnerability in Microsoft 365 Copilot that allowed attackers to steal users’ sensitive information has been disclosed by a cybersecurity researcher.
Fortinet Confirms Exploitation of Critical FortiManager Zero-Day
Oct 24, 2024 · Fortinet has confirmed that a critical zero-day vulnerability affecting its FortiManager network management solution is being exploited in the wild.. In an October 23 security advisory, the cybersecurity provider shared more information on CVE-2024-47575, a vulnerability allowing threat actors to use a compromised FortiManager device to execute arbitrary code or commands against other ...
Russia's SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Oct 11, 2024 · Hackers at Russia’s Foreign Intelligence Service (SVR) have been spying on US, European and global entities for years to collect intelligence and enable future cyber operations, according to US and UK intelligence agencies.
White House Issues AI National Security Memo - Infosecurity …
Oct 24, 2024 · The White House has issued a National Security Memorandum (NSM) on AI, setting out key actions for the federal government to advance the safe, secure and trustworthy development of the technology in the interests on US national security.
Dark Web Market Revenues Rebound but Sector Fragments
Feb 29, 2024 · Administrators and sellers on dark web marketplaces had a better 2023 than the previous year, pulling in an estimated $1.7bn in cryptocurrency-based revenues, according to new Chainalysis data.
Microsoft Fixes Five Zero-Days in October Patch Tuesday
Oct 9, 2024 · Microsoft has patched two zero-day bugs under active exploitation and a further three that were publicly disclosed in this month’s Patch Tuesday update round.