https://www.infosecurity-magazine.com/cloud-security/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions Mon, 24 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ Truffle Security says it found over 9000 publicly accessible and active AWS key pairs Mon, 24 Aug 2026 08:05:00 GMT https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ https://www.infosecurity-magazine.com/blogs/rise-with-sap-idm-sunset-identity/ As SAP Identity Management approaches end of life and organizations transition to RISE with SAP, identity governance becomes a critical parallel initiative. This article explores key risks, migration strategies, and planning considerations, helping organizations modernize identity governance, maintain compliance, and avoid provisioning, access, and audit challenges during transformation Fri, 14 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/blogs/rise-with-sap-idm-sunset-identity/ https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028 Thu, 13 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it Thu, 13 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims Thu, 06 Aug 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ A new npm worm has compromised packages with over two billion monthly installs Wed, 05 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks Tue, 04 Aug 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ University of the Arts London's Keith Joy explains the unique cybersecurity challenges facing higher education and how institutions can secure users without restricting creativity Tue, 04 Aug 2026 09:06:00 GMT https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ https://www.infosecurity-magazine.com/opinions/brower-securitys-front-line-in-age/ Security teams face an uphill battle in understanding the tools already inside their environment, their capabilities, and their risks. Shadow AI adds to the challenge Mon, 03 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/brower-securitys-front-line-in-age/ https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ AWS has linked North Korea to the axios campaign to other attacks on npm libraries Fri, 31 Jul 2026 09:50:00 GMT https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/ Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure Thu, 30 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/ https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/ Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model Tue, 28 Jul 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/ https://www.infosecurity-magazine.com/opinions/employees-misusing-ai-tools/ Workers don’t differentiate between paid for and free tools. This is creates a privacy a problem Wed, 22 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/opinions/employees-misusing-ai-tools/ https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more Tue, 14 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/ New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments Mon, 13 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/ https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver Fri, 10 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/ Hackers can get in and out of enterprise networks faster than ever. Here's why - and hat it means for your cybersecurity strategy Wed, 08 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/ https://www.infosecurity-magazine.com/opinions/security-coverage-gap-math-problem/ The economics of offensive operations are changing, and defenders must react now. Fri, 26 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/security-coverage-gap-math-problem/ https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust Thu, 25 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ https://www.infosecurity-magazine.com/news/increase-ransomware-europe/ Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing Thu, 25 Jun 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/increase-ransomware-europe/ https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executive Order Tue, 23 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/ Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities Fri, 19 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/ https://www.infosecurity-magazine.com/news/sensitive-ai-data-upload-doubles/ The rise of AI-assistants and applications in the enterprise has seen a 93% increase in employees attempting to upload sensitive data, bringing security challenges Wed, 17 Jun 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/sensitive-ai-data-upload-doubles/ https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/ Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyber threats Wed, 10 Jun 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/ https://www.infosecurity-magazine.com/opinions/shadow-ai-is-exposing-governance/ As organizations rapidly implement AI governance policies in response to rising shadow AI usage, many are repeating the same operational governance mistakes that have historically weakened cybersecurity compliance programs Wed, 10 Jun 2026 09:01:00 GMT https://www.infosecurity-magazine.com/opinions/shadow-ai-is-exposing-governance/ https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/ Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance Fri, 05 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/ https://www.infosecurity-magazine.com/news/zara-data-breach-impacts-200000/ ShinyHunters gets away with emails and other data on 200,000 Zara customers Mon, 11 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/zara-data-breach-impacts-200000/ https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member Fri, 08 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage Tue, 28 Apr 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ https://www.infosecurity-magazine.com/news-features/cyber-ma-roundup-march-26/ Investment in start-ups involved with securing AI against cyber threats was a strong focus of cybersecurity M&A activity during March Fri, 03 Apr 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cyber-ma-roundup-march-26/ https://www.infosecurity-magazine.com/blogs/why-modern-security-new-data/ Legacy SIEMs can’t keep pace with AI-driven cyber threats. Discover why centralized models are failing and how federated, cloud-first security delivers faster visibility Tue, 31 Mar 2026 09:05:00 GMT https://www.infosecurity-magazine.com/blogs/why-modern-security-new-data/ https://www.infosecurity-magazine.com/news/european-commission-cloud-data/ The European Commission has revealed details of a data breach impacting its AWS infrastructure Mon, 30 Mar 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/european-commission-cloud-data/ https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/ EtherRAT hides C2 in Ethereum smart contracts via EtherHiding, steals wallets and credentials Thu, 26 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/ https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials Wed, 25 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/ The head of the UK’s NCSC is calling the cybersecurity industry to “seize the disruptive vibe coding opportunity” to make software more secure Tue, 24 Mar 2026 21:00:00 GMT https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/ https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory Tue, 24 Mar 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/ New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans Mon, 23 Mar 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/ https://www.infosecurity-magazine.com/news/ai-issues-half-incident-response/ Gartner has urged security teams to get involved in AI projects from the start to avoid costly incident response Wed, 18 Mar 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/ai-issues-half-incident-response/ https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/ DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data Mon, 16 Mar 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/ https://www.infosecurity-magazine.com/news/infosecurity-europe-2026-keynote/ Infosecurity Europe 2026 reveals its keynote line-up, featuring Jason Fox, Shlomo Kramer, Cynthia Kaiser and more, with sessions on AI, cloud security and post quantum threats Wed, 11 Mar 2026 16:20:00 GMT https://www.infosecurity-magazine.com/news/infosecurity-europe-2026-keynote/ https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/ LeakyLooker flaws in Google Looker Studio let attackers run cross-tenant SQL attacks on cloud data Wed, 11 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/ https://www.infosecurity-magazine.com/news/cloud-attackers-prefer-exploits/ Google Cloud report details a sharp rise in attackers exploiting software vulnerabilities, including React2Shell Tue, 10 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-attackers-prefer-exploits/ https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ ReliaQuest claims AI has reduced breakout and exfiltration time to under 10 minutes Tue, 24 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds Mon, 09 Feb 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ https://www.infosecurity-magazine.com/news/malicious-commands-in-github/ Flaws in GitHub Codespaces allow RCE via crafted repositories or pull requests Thu, 05 Feb 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/malicious-commands-in-github/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ 2026 has started with a string of cybersecurity industry mergers & acquisitions as vendors position themselves around agentic AI Mon, 02 Feb 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ https://www.infosecurity-magazine.com/opinions/precision-playbook-software-supply/ Adversaries are adopting a more precise approach to supply chain compromise. Organizations need to rethink what “secure software” really means. Fri, 30 Jan 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/precision-playbook-software-supply/ https://www.infosecurity-magazine.com/news/cybersecurity-teams-embrace-ai/ Despite the seemingly widespread adoption of AI for security operations, security leaders primarily use it for “relatively basic use cases,” said a Sumo Logic study Thu, 29 Jan 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-teams-embrace-ai/ https://www.infosecurity-magazine.com/interviews/bridging-the-infosec-saas-divide/ Eoghan Casey, Field CTO and Carl Brundage, Distinguished Technical Architect, Salesforce, share expert insights on how organizations can securely deploy Agentic AI in SaaS environments, overcome identity challenges and build resilience against next-generation threats Wed, 28 Jan 2026 16:15:00 GMT https://www.infosecurity-magazine.com/interviews/bridging-the-infosec-saas-divide/ https://www.infosecurity-magazine.com/news/pdfsider-anti-vm-checks-hidden/ New malware PDFSIDER enables covert, long-term access to compromised systems via advanced techniques Mon, 19 Jan 2026 16:20:00 GMT https://www.infosecurity-magazine.com/news/pdfsider-anti-vm-checks-hidden/ https://www.infosecurity-magazine.com/news/phishing-exploits-misconfigured/ Misconfigurations abused to make phishing emails look like they come from within the organization Thu, 08 Jan 2026 14:01:00 GMT https://www.infosecurity-magazine.com/news/phishing-exploits-misconfigured/ https://www.infosecurity-magazine.com/news/european-space-agency-confirms/ The European Space Agency has said that external servers were recently involved in a security “issue” Mon, 05 Jan 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/european-space-agency-confirms/ https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/ Infosecurity explores the biggest cybersecurity mergers and acquisitions of 2025, including two mega-deals that reshaped the industry Thu, 25 Dec 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/ https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ A surge in phishing attacks exploiting Microsoft’s OAuth device code flow has been identified by Proofpoint Thu, 18 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ https://www.infosecurity-magazine.com/news/jumpcloud-windows-agent-flaw/ A flaw in JumpCloud Remote Assist for Windows has exposed managed endpoints to local privilege escalation and denial-of-service attacks Tue, 16 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/jumpcloud-windows-agent-flaw/ https://www.infosecurity-magazine.com/blogs/the-budget-effect-of-a-security/ Explore why proactive SaaS data protection is essential as cyber threats evolve. Learn how rising attack vectors and AI adoption impact security budgets and why investing early reduces risk and long-term costs Mon, 15 Dec 2025 12:30:00 GMT https://www.infosecurity-magazine.com/blogs/the-budget-effect-of-a-security/ https://www.infosecurity-magazine.com/news/yearn-finance-yeth-pool-exploit/ A critical vulnerability in Yearn Finance's yETH pool allowed an attacker to steal around $9m Wed, 03 Dec 2025 15:30:00 GMT https://www.infosecurity-magazine.com/news/yearn-finance-yeth-pool-exploit/ https://www.infosecurity-magazine.com/blogs/saas-security-nist-csf-agentic-ai/ How do we strike the right balance between rapid innovation and maintaining airtight security in a SaaS-first, AI-driven landscape? Wed, 03 Dec 2025 08:30:00 GMT https://www.infosecurity-magazine.com/blogs/saas-security-nist-csf-agentic-ai/ https://www.infosecurity-magazine.com/news/flaws-expose-risks-fluent-bit/ Critical flaws in Fluent Bit threaten telemetry across platforms according to an advisory published by Oligo Security researchers Mon, 24 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/flaws-expose-risks-fluent-bit/ https://www.infosecurity-magazine.com/news/chinal-operation-wrthug-thousands/ SecurityScorecard has revealed a new Chinese campaign targeting thousands of ASUS routers globally Wed, 19 Nov 2025 10:20:00 GMT https://www.infosecurity-magazine.com/news/chinal-operation-wrthug-thousands/ https://www.infosecurity-magazine.com/news/kraken-benchmarking-enhance/ Cisco Talos has observed overlaps between Kraken and the earlier HelloKitty cartel through attack tactics using SMB flaws for big-game hunting and double extortion Mon, 17 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/kraken-benchmarking-enhance/ https://www.infosecurity-magazine.com/blogs/sap-identity-framework-migration/ Explore the impact of SAP IdM and GRC end-of-life by 2027 and discover key considerations for migrating to new identity and governance solutions Wed, 12 Nov 2025 14:07:00 GMT https://www.infosecurity-magazine.com/blogs/sap-identity-framework-migration/ https://www.infosecurity-magazine.com/blogs/strategies-secure-saas-environments/ Misalignment between InfoSec and SaaS teams creates an "InfoSec↔SaaS Divide," leading to delays and risk exposure. Bridging this operational gap is vital for securing SaaS data and unlocking the future benefits of agentic AI Fri, 07 Nov 2025 08:30:00 GMT https://www.infosecurity-magazine.com/blogs/strategies-secure-saas-environments/ https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/ ReliaQuest data reveals identity issues were responsible for 44% of cloud security alerts in Q3 Tue, 04 Nov 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/ https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ CISA and NSA have released a blueprint to enhance Microsoft Exchange Server security against cyber-attacks Mon, 03 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ A rise in attacks on PHP servers, IoT devices and cloud gateways is linked to botnets exploiting flaws, according to new research published by Qualys Wed, 29 Oct 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ Microsoft systems analyze over 100 trillion daily signals, suggesting dramatically increasing AI-driven cyber-threats Thu, 16 Oct 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ https://www.infosecurity-magazine.com/news/redis-servers-remote-exploitation/ A critical Redis flaw, dubbed “RediShell,” has exposed 60,000 unprotected servers to exploitation Tue, 07 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/redis-servers-remote-exploitation/ https://www.infosecurity-magazine.com/news/scanning-of-palo-alto-portals/ Experts warn that threat actors may be gearing up for compromise after large uptick in scans of Palo Alto Network portals Mon, 06 Oct 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/scanning-of-palo-alto-portals/ https://www.infosecurity-magazine.com/news/phishing-dominates-euwide/ ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year Thu, 02 Oct 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/phishing-dominates-euwide/ https://www.infosecurity-magazine.com/news/broadcom-patches-vmware-nsx-vcenter/ Broadcom has released security patches for critical flaws affecting several VMware products Wed, 01 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/broadcom-patches-vmware-nsx-vcenter/ https://www.infosecurity-magazine.com/news/gemini-trifecta-dangers-indirect/ Tenable researchers have discovered three vulnerabilities in Google’s Gemini GenAI tool Tue, 30 Sep 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/gemini-trifecta-dangers-indirect/ https://www.infosecurity-magazine.com/news/sonicwall-ssl-vpn-attacks-escalate/ Akira ransomware attacks on SonicWall SSL VPN appliances are bypassing its MFA for rapid deployment Mon, 29 Sep 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-ssl-vpn-attacks-escalate/ https://www.infosecurity-magazine.com/news/chinese-hackers-brickstorm/ The hackers are likely trying to collect data to feed the development of zero-day exploits, said Google researchers Thu, 25 Sep 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-hackers-brickstorm/ https://www.infosecurity-magazine.com/news/sonicwall-compromise-cloud-backup/ SonicWall said that threat actors accessed firewall preference files stored in the cloud for around 5% of its firewall install base Thu, 18 Sep 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-compromise-cloud-backup/ https://www.infosecurity-magazine.com/news/cves-chaos-mesh-cluster-code/ A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration Wed, 17 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/cves-chaos-mesh-cluster-code/ https://www.infosecurity-magazine.com/news/cursor-autorun-flaw-repos-execute/ A flaw in the Cursor extension allows unauthorized code execution when opening repositories in Visual Studio Wed, 10 Sep 2025 13:30:00 GMT https://www.infosecurity-magazine.com/news/cursor-autorun-flaw-repos-execute/ https://www.infosecurity-magazine.com/news/malicious-npm-code-10-cloud/ Wiz Security warns that a recently discovered supply chain attack campaign targeting npm is far from over Wed, 10 Sep 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/malicious-npm-code-10-cloud/ https://www.infosecurity-magazine.com/news/us-companies-insider-data-breaches/ The OPSWAT report found that insider breaches cost impacted firms $2.7m on average due to factors such as regulatory fines and diminished productivity Fri, 05 Sep 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/us-companies-insider-data-breaches/ https://www.infosecurity-magazine.com/news/azure-ad-credentials-exposed/ Experts have revealed an Azure AD vulnerability exposing ClientId and ClientSecret in a publicly accessible appsettings.json file Tue, 02 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/azure-ad-credentials-exposed/ https://www.infosecurity-magazine.com/news/zscaler-customer-info-taken/ Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data Tue, 02 Sep 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/zscaler-customer-info-taken/ https://www.infosecurity-magazine.com/news/salesloft-attacks-target-google/ Adversaries targeting the Salesloft Drift application integration with Salesforce have also compromised Google Workspace accounts Mon, 01 Sep 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/salesloft-attacks-target-google/ https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ Microsoft observed Storm-0501 pivot to the victim’s cloud environment to exfiltrate data rapidly and prevent the victim’s recovery Thu, 28 Aug 2025 09:05:00 GMT https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ https://www.infosecurity-magazine.com/news/phishing-upcrypter-deploy-rat/ A global phishing campaign has been identified using personalized emails and fake websites to deliver malware via UpCrypter Tue, 26 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-upcrypter-deploy-rat/ https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ Red Canary observed the novel tactic in a cluster of activity targeting a legacy vulnerability to access cloud-based Linux systems Tue, 19 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ https://www.infosecurity-magazine.com/news/servers-unpatched-microsoft/ Over 29,000 Microsoft Exchange servers remain unpatched against a vulnerability that could allow attackers to seize control of entire domains in hybrid cloud environments Tue, 12 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/servers-unpatched-microsoft/ https://www.infosecurity-magazine.com/news/uk-red-teamers-deeply-skeptical-of/ Commercial red team experts believe AI’s current impact on cyber is overstated Mon, 11 Aug 2025 09:25:00 GMT https://www.infosecurity-magazine.com/news/uk-red-teamers-deeply-skeptical-of/ https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ Microsoft Exchange customers have been urged to apply fixes set out in a hybrid deployment security update published in April Thu, 07 Aug 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ https://www.infosecurity-magazine.com/news/chanel-pandora-breach-salesforce/ Chanel and Pandora have revealed data breaches reportedly linked to attacks on their Salesforce instances Wed, 06 Aug 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/chanel-pandora-breach-salesforce/ https://www.infosecurity-magazine.com/news/ghost-zip-behind-pxa-stealer/ Python-based PXA Stealer has stolen data from more than 4000 victims in over 62 countries, according to SentinalLabs Mon, 04 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/ghost-zip-behind-pxa-stealer/ https://www.infosecurity-magazine.com/news/cloud-intrusions-skyrocket/ CrowdStrike revealed the surge in cloud intrusions was partly driven by a 40% increase in Chinese-state actors exploiting these environments Mon, 04 Aug 2025 08:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-intrusions-skyrocket/ https://www.infosecurity-magazine.com/news/scattered-spider-targets-us-virtual/ Scattered Spider has targeted VMware vSphere environments, exploiting retail, airline and insurance sectors Mon, 28 Jul 2025 15:10:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-targets-us-virtual/ https://www.infosecurity-magazine.com/news/third-party-breach-allianz/ Insurance firm Allianz Life said that a threat actor accessed personally identifiable information of the majority of its 1.4 million US customers Mon, 28 Jul 2025 14:05:00 GMT https://www.infosecurity-magazine.com/news/third-party-breach-allianz/ https://www.infosecurity-magazine.com/news/campaign-exploits-cloud/ Wiz believes the active campaign is part of a broader crypto-scam infrastructure, which uses a wide range of exploitation techniques Thu, 24 Jul 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/campaign-exploits-cloud/ https://www.infosecurity-magazine.com/news/microsoft-exposes-scattered/ Microsoft has reported Scattered Spider continues to evolve tactics to compromise both on-premises infrastructure and cloud environments Thu, 17 Jul 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-exposes-scattered/ https://www.infosecurity-magazine.com/news/education-sector-most-exposed-to/ CyCognito research finds that a third of education sector APIs, web apps and cloud assets are exposed to attack Wed, 16 Jul 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/education-sector-most-exposed-to/ https://www.infosecurity-magazine.com/news/saas-security-adoption-grows/ The latest report from AppOmni has revealed 91% confidence in SaaS security while 75% of organizations have faced incidents Tue, 15 Jul 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/saas-security-adoption-grows/ https://www.infosecurity-magazine.com/news/privilege-escalation-flaw-azure-ml/ A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise Thu, 03 Jul 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/privilege-escalation-flaw-azure-ml/ https://www.infosecurity-magazine.com/news/sap-gui-vulnerable-weak-encryption/ Two SAP GUI vulnerabilities have been identified exposing sensitive data due to weak encryption in input history features Wed, 25 Jun 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/sap-gui-vulnerable-weak-encryption/ https://www.infosecurity-magazine.com/news/banana-squads-github-malware/ Banana Squad exploited GitHub to distribute malicious Python code disguised as legitimate tools Thu, 19 Jun 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/banana-squads-github-malware/ https://www.infosecurity-magazine.com/news/godfather-upgraded-hijack-mobile/ Upgraded GodFather banking malware now uses on-device virtualization to hijack apps, enabling real-time fraud Wed, 18 Jun 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/godfather-upgraded-hijack-mobile/ https://www.infosecurity-magazine.com/news/microsoft-european-cloud-data/ Microsoft’s Sovereign Cloud solutions are designed to ensure European cloud data is stored and processed in Europe Tue, 17 Jun 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-european-cloud-data/ https://www.infosecurity-magazine.com/news/over-third-grafana-instances/ Some 36% of Grafana instances are vulnerable to account takeover bug, putting DevOps teams at risk Mon, 16 Jun 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/over-third-grafana-instances/ https://www.infosecurity-magazine.com/news/zeroday-20-misconfigurations-in/ The products affected by the issues are part of the Salesforce OmniStudio suite, including FlexCards and Data Mappers Wed, 11 Jun 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/zeroday-20-misconfigurations-in/ https://www.infosecurity-magazine.com/news/infosec2025-lessons-maersk-ciso/ 2017 ransomware attack on shipping company A P Moller Maersk marked a turning point for the cybersecurity industry, according to its former CISO Adam Banks Thu, 05 Jun 2025 19:05:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-lessons-maersk-ciso/ https://www.infosecurity-magazine.com/news/infosec2025-cloudnative-security/ Moving to cloud-native architecture and modern platforms is allowing enterprises to automate operations and improve security Wed, 04 Jun 2025 17:30:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-cloudnative-security/ https://www.infosecurity-magazine.com/news/infosec2025-vendors-quantum/ CISOs should demand more of their vendors and use regulation as an ally to persuade board members to accelerate the transition to post-quantum safety Tue, 03 Jun 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-vendors-quantum/ https://www.infosecurity-magazine.com/news/cryptojacking-campaign-devops/ Wiz finds new threat group running cryptojacking campaign via exploited and misconfigured DevOps assets Mon, 02 Jun 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/cryptojacking-campaign-devops/ https://www.infosecurity-magazine.com/news/microsoft-onedrive-flaw-exposes/ A flaw in OneDrive File Picker has exposed millions to data overreach through excessive OAuth permissions Wed, 28 May 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-onedrive-flaw-exposes/ https://www.infosecurity-magazine.com/opinions/value-undersea-cable-security/ Federico Bruni explains the economic value of cloud data flow and the cables that carry them, and the importance of ensuring cyber resiliency is built into them Fri, 23 May 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/value-undersea-cable-security/ https://www.infosecurity-magazine.com/news/critical-zerodays-versa-networks/ The unpatched vulnerabilities, with a CVSS score of 8.6 to 10.0, can lead to remote code execution via authentication bypass Thu, 22 May 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/critical-zerodays-versa-networks/ https://www.infosecurity-magazine.com/news/flaw-google-cloud-security-concerns/ Patched privilege escalation flaw in Google Cloud Platform linked to wider cloud security concerns Wed, 21 May 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/flaw-google-cloud-security-concerns/ https://www.infosecurity-magazine.com/news/genai-cyber-risks-investment/ Thales found that 73% of organizations are investing in AI-specific security tools, amid surging takeup of GenAI tools in enterprises Tue, 20 May 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/genai-cyber-risks-investment/ https://www.infosecurity-magazine.com/interviews/google-godfrey-ciso-security/ The head of Google Cloud’s Office of the CISO, Nick Godfrey, tells Infosecurity about the biggest challenges security leaders are experiencing today Mon, 19 May 2025 13:28:00 GMT https://www.infosecurity-magazine.com/interviews/google-godfrey-ciso-security/ https://www.infosecurity-magazine.com/news/infosec2025-cisos-evolving-cloud/ Security experts tell Infosecurity about the cloud attack trends in the past year, and how CISOs can mitigate evolving techniques Mon, 19 May 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-cisos-evolving-cloud/ https://www.infosecurity-magazine.com/opinions/current-cloud-threat-landscape/ Paolo Passeri sets out current trends in the cloud threat landscape Fri, 16 May 2025 14:00:00 GMT https://www.infosecurity-magazine.com/opinions/current-cloud-threat-landscape/ https://www.infosecurity-magazine.com/news/healthcare-cyber-attacks-intensify/ New data from Darktrace showed that cyber-attacks targeting healthcare organizations increased in intensity in 2024 Fri, 16 May 2025 10:10:00 GMT https://www.infosecurity-magazine.com/news/healthcare-cyber-attacks-intensify/ https://www.infosecurity-magazine.com/news/russian-group-lostkeys-malware/ New LOSTKEYS malware has been identified and linked to COLDRIVER by GTIG, stealing files and system data in targeted attacks Thu, 08 May 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/russian-group-lostkeys-malware/ https://www.infosecurity-magazine.com/news/microsoft-expands-cloud-ai/ Microsoft has announced plans to expand cloud and AI infrastructure in the EU, increasing data center capacity by 40% by 2027 Wed, 30 Apr 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-expands-cloud-ai/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-paloalto/ Cybersecurity giant Palo Alto Networks announced a definitive agreement to acquire ProtectAI, as it looks to develop its security offerings for AI and ML systems Wed, 30 Apr 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-paloalto/ https://www.infosecurity-magazine.com/news/jpmorgan-ciso-warns-saas-security/ JPMorgan’s CISO has argued that SaaS apps represent a growing risk to businesses, “quietly enabling cyber attackers” Wed, 30 Apr 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/jpmorgan-ciso-warns-saas-security/ https://www.infosecurity-magazine.com/news/zeroday-exploitation-surges-19-two/ Google claims 19% more zero-day bugs were exploited in 2024 than 2022 as threat actors focus on security products Tue, 29 Apr 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/zeroday-exploitation-surges-19-two/ https://www.infosecurity-magazine.com/news/increase-automated-scanning/ According to the 2025 Global Threat Landscape Report from FortiGuard, threat actors are executing 36,000 scans per second Mon, 28 Apr 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/increase-automated-scanning/ https://www.infosecurity-magazine.com/news/vulnerability-credential-initial/ Mandiant’s M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers Wed, 23 Apr 2025 14:01:00 GMT https://www.infosecurity-magazine.com/news/vulnerability-credential-initial/ https://www.infosecurity-magazine.com/news/microsoft-secure-initiative/ The tech giant has released its second Secure Future Initiative (SFI) progress report, showcasing its ongoing efforts to improve cybersecurity Tue, 22 Apr 2025 17:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-secure-initiative/ https://www.infosecurity-magazine.com/interviews/bayer-ciso-kevin-jones/ Bayer's CISO, Kevin Jones, advocates for a platform-centric, shared-ownership approach to cybersecurity, emphasizing AI's role in the life science fields of healthcare and agriculture and navigating complex global regulations. Tue, 15 Apr 2025 14:00:00 GMT https://www.infosecurity-magazine.com/interviews/bayer-ciso-kevin-jones/ https://www.infosecurity-magazine.com/news/compliance-cyber-challenge-uk/ Regulatory compliance and data protection were the biggest cybersecurity challenges cited by UK financial organizations, according to a Bridewell survey Tue, 15 Apr 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/compliance-cyber-challenge-uk/ https://www.infosecurity-magazine.com/news/top-5-priorities-for-cybersecurity/ Experts at the Google Cloud Next event set out how security teams need to adapt their focuses in the wake of trends such as rising cyber-attacks and advances in AI Fri, 11 Apr 2025 12:05:00 GMT https://www.infosecurity-magazine.com/news/top-5-priorities-for-cybersecurity/ https://www.infosecurity-magazine.com/news/google-cloud-cisos-demand/ Google Cloud announced a number of security products designed to reduce complexity for security leaders Thu, 10 Apr 2025 15:30:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-cisos-demand/ https://www.infosecurity-magazine.com/opinions/cybersecurity-skills-gap/ Infosec Institute's Keatron Evans discusses how the cyber industry needs to adapt its hiring strategies to the modern age Fri, 04 Apr 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/cybersecurity-skills-gap/ https://www.infosecurity-magazine.com/news-features/cybersecurity-roundup-google-wiz/ Google’s agreement to acquire Wiz was the standout M&A news from March. Other acquisition agreements were announced by SolarWinds, Armis and Forcepoint Mon, 31 Mar 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-roundup-google-wiz/ https://www.infosecurity-magazine.com/news-features/world-backup-day-2025-data/ In 2025, World Backup Day has expanded to encompass a broader range of data protection strategies Mon, 31 Mar 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/world-backup-day-2025-data/ https://www.infosecurity-magazine.com/news/threat-actors-abuse-cloud-platforms/ Threat actors are exploiting cloud platforms like Adobe and Dropbox to evade email gateways and steal credentials Wed, 26 Mar 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/threat-actors-abuse-cloud-platforms/ https://www.infosecurity-magazine.com/news/ingressnightmare-critical-bugs-40/ Wiz Security finds four critical RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes Tue, 25 Mar 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/ingressnightmare-critical-bugs-40/ https://www.infosecurity-magazine.com/news/google-buys-wiz-32bn-cloud/ Google is set to acquire Wiz, a cloud security platform founded in 2020, for $32bn in an all-cash deal Tue, 18 Mar 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/google-buys-wiz-32bn-cloud/ https://www.infosecurity-magazine.com/news/cloudflare-e2e-post-quantum/ Cloudflare introduces E2E post-quantum cryptography, enhancing security against quantum threats Mon, 17 Mar 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/cloudflare-e2e-post-quantum/ https://www.infosecurity-magazine.com/news/security-database-aims-empower/ Common Good Cyber has released a new mapping database designed to help NGOs find the security tools they need Mon, 17 Mar 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/security-database-aims-empower/ https://www.infosecurity-magazine.com/news/machine-identities-outnumber/ Surging machine identities, faster threat detection and fewer vulnerabilities are shaping cloud security according to a new report Wed, 12 Mar 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/machine-identities-outnumber/ https://www.infosecurity-magazine.com/news/critical-infrastructure-sectors/ Enisa identifies six sectors that it says must improve on NIS2 compliance Thu, 06 Mar 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/critical-infrastructure-sectors/ https://www.infosecurity-magazine.com/news/silk-typhoon-exploits-common/ Chinese espionage group Silk Typhoon is increasingly exploiting common IT solutions to infiltrate networks and exfiltrate data Wed, 05 Mar 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/silk-typhoon-exploits-common/ https://www.infosecurity-magazine.com/news/attackers-exploit-microsoft-teams/ Phishing attack exploits social engineering techniques alongside Microsoft Teams and remote access software to deploy BackConnect malware Mon, 03 Mar 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-exploit-microsoft-teams/ https://www.infosecurity-magazine.com/news/phishing-campaign-havoc-framework/ A new phishing campaign has been identified using Havoc to control infected systems, leveraging SharePoint and Microsoft Graph API Mon, 03 Mar 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-campaign-havoc-framework/ https://www.infosecurity-magazine.com/news/security-detection-tech-failing/ A new Everfox survey shows a growing consensus among regulated organizations in favor of a strategic shift away from detecting cyber threats to preventing them Wed, 12 Feb 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/security-detection-tech-failing/ https://www.infosecurity-magazine.com/news/experts-dismayed-uk-apple/ Security and privacy experts have questioned a new demand from the UK Home Office on Apple’s encrypted iCloud service Mon, 10 Feb 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/experts-dismayed-uk-apple/ https://www.infosecurity-magazine.com/news/saas-breaches-defenses-short/ Obsidian found that threat actors are focusing on SaaS applications to steal sensitive data, with most organizations' security measures not set up to deal with these attacks Mon, 27 Jan 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/saas-breaches-defenses-short/ https://www.infosecurity-magazine.com/news/aws-5m-pound-grant-cyber-education/ Amazon Web Services has launched its Cyber Education Grant Program in the UK Fri, 24 Jan 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/aws-5m-pound-grant-cyber-education/ https://www.infosecurity-magazine.com/news/biden-tightens-software-security/ The US President’s second cybersecurity Executive Order will impose stricter security standards on software providers Thu, 16 Jan 2025 16:14:00 GMT https://www.infosecurity-magazine.com/news/biden-tightens-software-security/ https://www.infosecurity-magazine.com/news/multicloud-surges-rising-security/ A new report from Fortinet reveals increased adoption of multi-cloud strategies and hybrid implementations combining on-premises and public cloud infrastructure Wed, 15 Jan 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/multicloud-surges-rising-security/ https://www.infosecurity-magazine.com/news/microsoft-patches-eight-zerodays/ Patch Tuesday saw Microsoft fix eight zero-days, three of which are being actively exploited Wed, 15 Jan 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-patches-eight-zerodays/ https://www.infosecurity-magazine.com/news/japan-faces-cyberattacks-china/ Cyber-attacks by China-linked MirrorFace targeted Japan’s national security information in major campaigns operating since 2019 Thu, 09 Jan 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/japan-faces-cyberattacks-china/ https://www.infosecurity-magazine.com/news/us-treasury-computers-china-supply/ Chinese hackers appear to have compromised Treasury machines via a trusted third party Thu, 02 Jan 2025 09:25:00 GMT https://www.infosecurity-magazine.com/news/us-treasury-computers-china-supply/ https://www.infosecurity-magazine.com/news-features/cyber-threat-intelligence-review/ Infosecurity consulted top counter-threat intelligence experts to analyze the tumultuous cyber threat landscape of 2024 and provide insights on what organizations should prepare for in 2025 Wed, 01 Jan 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/cyber-threat-intelligence-review/ https://www.infosecurity-magazine.com/news/cloud-security-federal-agencies/ A CISA Directive sets out actions all US federal agencies must take to identify and secure cloud tenants in their environments Wed, 18 Dec 2024 15:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-security-federal-agencies/ https://www.infosecurity-magazine.com/news/microsoft-azure-mfa-flaw-access/ Microsoft MFA flaw exposed that allowed attackers to bypass security within an hour, putting 400m Office 365 accounts at risk Wed, 11 Dec 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-azure-mfa-flaw-access/ https://www.infosecurity-magazine.com/news/hackers-exploit-aws/ Hackers exploited AWS misconfigurations, leaking 2TB of sensitive data, including customer information, credentials and proprietary source code Tue, 10 Dec 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-aws/ https://www.infosecurity-magazine.com/news/veeam-urges-update-patch/ Veeam has released patches for critical VSPC flaws, requiring immediate attention from affected service providers Thu, 05 Dec 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/veeam-urges-update-patch/ https://www.infosecurity-magazine.com/news/security-risks-open-source/ An analysis by the Linux Foundation, OpenSSF and Harvard University found that there continues to be significant cybersecurity risks in open source software practices Wed, 04 Dec 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/security-risks-open-source/ https://www.infosecurity-magazine.com/news-features/certifications-cybersecurity/ Certifications still matter in the cybersecurity job market, but skills seal the deal Mon, 02 Dec 2024 10:50:00 GMT https://www.infosecurity-magazine.com/news-features/certifications-cybersecurity/ https://www.infosecurity-magazine.com/news-features/top-cyber-attacks-2024/ High-profile cyber-attacks in 2024 have hit healthcare services and compromised sensitive systems and data of governments and critical infrastructure Mon, 02 Dec 2024 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/top-cyber-attacks-2024/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-1/ CrowdStrike has reached a deal to acquire Adaptive Shield, while Cybereason and Trustwave have entered into a definitive merger agreement Fri, 29 Nov 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-1/ https://www.infosecurity-magazine.com/news/godloader-malware-infects/ A new cyber-attack technique uses Godot Engine to deploy undetectable malware via GodLoader, infecting more than 17,000 devices Thu, 28 Nov 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/godloader-malware-infects/ https://www.infosecurity-magazine.com/opinions/iso27001-rules-connected-world/ Andy Brophy sets out the key changes to ISO 27001 that organizations need to understand and implement Wed, 27 Nov 2024 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/iso27001-rules-connected-world/ https://www.infosecurity-magazine.com/news/helldown-ransomware-target-vmware/ Helldown ransomware has expanded its reach to target Linux and VMware systems, exploiting Zyxel firewall vulnerabilities and exfiltrating data Tue, 19 Nov 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/helldown-ransomware-target-vmware/ https://www.infosecurity-magazine.com/news/ransomware-groups-cloud-services/ SentinelOne described some of ransomware groups’ favorite techniques for targeting cloud services Fri, 15 Nov 2024 10:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-groups-cloud-services/ https://www.infosecurity-magazine.com/news/new-citrix-zeroday-vulnerability/ watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops Tue, 12 Nov 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/new-citrix-zeroday-vulnerability/ https://www.infosecurity-magazine.com/news/google-cloud-mandate-mfa-2025/ Google wants to ensure a smooth transition towards required MFA across all Google Cloud accounts with a phased rollout running throughout 2025 Wed, 06 Nov 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-mandate-mfa-2025/ https://www.infosecurity-magazine.com/news/emeraldwhale-targets-misconfigured/ Emeraldwhale breach allowed access to over 10,000 repositories and resulted in the theft of more than 15,000 cloud service credentials Thu, 31 Oct 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/emeraldwhale-targets-misconfigured/ https://www.infosecurity-magazine.com/news/evasive-panda-cloudscout-taiwan/ Evasive Panda’s CloudScout uses MgBot to steal session cookies, infiltrating and extracting cloud data from Taiwanese institutions Mon, 28 Oct 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/evasive-panda-cloudscout-taiwan/ https://www.infosecurity-magazine.com/blogs/balancing-clients-security/ To ensure the security status of CIS Hardened Images, CIS conducted testing with Azure Monitor Agent and Azure Update Manager, and this blog will discuss the significance, findings, and future plans of this initiative Wed, 23 Oct 2024 10:30:00 GMT https://www.infosecurity-magazine.com/blogs/balancing-clients-security/ https://www.infosecurity-magazine.com/news/llmjacking-opensource-surge-2024/ Cloud attacks surged in 2024 as attackers exploited cloud resources at unprecedented levels Tue, 22 Oct 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/llmjacking-opensource-surge-2024/ https://www.infosecurity-magazine.com/news/flaws-e2ee-cloud-storage-services/ The cryptographic vulnerabilities were found in Sync, pCloud, Icedrive and Seafile by ETH Zurich Mon, 21 Oct 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/flaws-e2ee-cloud-storage-services/ https://www.infosecurity-magazine.com/news/orgs-long-lived-cloud-credentials/ Long-lived credentials in the cloud put organizations at high risk of breaches, a report from Datadog has found Mon, 21 Oct 2024 09:06:00 GMT https://www.infosecurity-magazine.com/news/orgs-long-lived-cloud-credentials/ https://www.infosecurity-magazine.com/blogs/incorporating-cspm-within-iaas/ Cloud-based platforms are becoming increasingly popular for managing business operations, leading to a growing demand for MSPs, MSSPs, and IT consultants to implement IaaS strategies while mitigating risks through CSPM integration Wed, 16 Oct 2024 11:00:00 GMT https://www.infosecurity-magazine.com/blogs/incorporating-cspm-within-iaas/ https://www.infosecurity-magazine.com/news-features/cybermonth-software-updates/ Infosecurity explores the role of software updates in cybersecurity and how to prevent them from being the cause of security disasters Thu, 10 Oct 2024 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybermonth-software-updates/ https://www.infosecurity-magazine.com/news/ivanti-three-csa-zerodays/ Ivanti’s Cloud Services Appliance is being targeted by threat actors exploiting three zero-day bugs Wed, 09 Oct 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/ivanti-three-csa-zerodays/ https://www.infosecurity-magazine.com/news/cloud-security-risks-surge-38/ Tenable’s latest report reveals 38% of organizations face risks from a “toxic cloud triad” of security gaps Tue, 08 Oct 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-security-risks-surge-38/ https://www.infosecurity-magazine.com/news/cybersecurity-security-leaders/ A new report by Red Canary has found that while cybersecurity budgets have risen, many security leaders still feel overwhelmed by the growing threat landscape Thu, 03 Oct 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-security-leaders/ https://www.infosecurity-magazine.com/news-features/mastercard-visa-cybersecurity/ Several large global companies announced cybersecurity capabilities through acquisitions in September, including Visa, Mastercard and Airbus Tue, 01 Oct 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news-features/mastercard-visa-cybersecurity/ https://www.infosecurity-magazine.com/news/nvidia-ai-toolkit-vulnerability/ The vulnerability, discovered by Wiz researchers, affects both cloud-based and on-premises AI applications using the toolkit Mon, 30 Sep 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/nvidia-ai-toolkit-vulnerability/ https://www.infosecurity-magazine.com/blogs/securing-windows-linux-os-cis/ The movement towards cloud computing offers countless benefits such as business scalability and cost optimization, but it also presents a security risk often overlooked Wed, 25 Sep 2024 11:00:00 GMT https://www.infosecurity-magazine.com/blogs/securing-windows-linux-os-cis/ https://www.infosecurity-magazine.com/news/cybersecurity-skills-gap-cloud/ A new report by Check Point Software highlights a significant increase in cloud security incidents, largely due to a lack of cybersecurity expertise and employee training Fri, 20 Sep 2024 10:32:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-skills-gap-cloud/ https://www.infosecurity-magazine.com/news/att-13m-fcc-settlement-cloud-data/ Telco giant AT&T will pay the FCC $13m to resolve a cloud breach investigation Wed, 18 Sep 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/att-13m-fcc-settlement-cloud-data/ https://www.infosecurity-magazine.com/news/cybersecurity-workforce-gap-budget/ ISC2 found that the cybersecurity workforce gap is now at 4.8 million, a 19% increase from 2023 Wed, 11 Sep 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-workforce-gap-budget/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-august/ Mimecast made a second acquisition in two months, and threat intelligence provider Cyberint joined CheckPoint Tue, 03 Sep 2024 12:30:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-august/ https://www.infosecurity-magazine.com/news/blackbyte-targets-esxi-hypervisors/ BlackByte, linked to the Conti group, exploited VMware ESXi CVE-2024-37085 to control virtual machines Thu, 29 Aug 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/blackbyte-targets-esxi-hypervisors/ https://www.infosecurity-magazine.com/news/third-organizations-saas-data/ AppOmni report claims number of companies suffering SaaS-related data breaches has jumped five percentage points over past year Tue, 27 Aug 2024 10:00:00 GMT https://www.infosecurity-magazine.com/news/third-organizations-saas-data/ https://www.infosecurity-magazine.com/news/moonpeak-rat-north-korea/ The MoonPeak RAT as used by UAT-5394 showed a possible connection to North Korean threat Kimsuky Wed, 21 Aug 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/moonpeak-rat-north-korea/ https://www.infosecurity-magazine.com/news/xeon-sender-enables-sms-spam/ Xeon Sender features SMS spam via APIs, Nexmo/Twilio credentials validation and phone number generation Mon, 19 Aug 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/xeon-sender-enables-sms-spam/ https://www.infosecurity-magazine.com/news/unicoin-staff-locked-out-gsuite/ Employees at crypto firm Unicoin couldn’t access Google services for four days during a recent breach Mon, 19 Aug 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/unicoin-staff-locked-out-gsuite/ https://www.infosecurity-magazine.com/news/high-risk-cloud-exposures-palo/ Firms are introducing 300 services monthly, contributing to 32% of high or critical cloud exposures Wed, 14 Aug 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/high-risk-cloud-exposures-palo/ https://www.infosecurity-magazine.com/news/phishing-compromises-ukrainian/ CERT-UA has warned that a mass phishing campaign impersonating Ukraine’s Security Services has infected more than 100 government devices Tue, 13 Aug 2024 15:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-compromises-ukrainian/ https://www.infosecurity-magazine.com/news/white-house-ec-council-cyber/ The White House and EC-Council scholarship program aims to train over 50,000 students in critical cybersecurity skills Mon, 05 Aug 2024 11:02:00 GMT https://www.infosecurity-magazine.com/news/white-house-ec-council-cyber/ https://www.infosecurity-magazine.com/opinions/apple-trust-ai-data/ Jonathan Joseph says that tech solutions designed to address AI privacy concerns must be trusted as well as just effective to work Fri, 02 Aug 2024 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/apple-trust-ai-data/ https://www.infosecurity-magazine.com/news/ddos-microsoft-global-outage/ A global outage of Microsoft services was triggered by a DDoS attack, with an error Microsoft’s DDoS protection measures amplifying the impact Wed, 31 Jul 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news/ddos-microsoft-global-outage/ https://www.infosecurity-magazine.com/news/cost-data-breach-10-shadow-data/ IBM reveals a 10% increase in the global cost of a data breach to $4.9m Wed, 31 Jul 2024 10:30:00 GMT https://www.infosecurity-magazine.com/news/cost-data-breach-10-shadow-data/ https://www.infosecurity-magazine.com/news/mandrake-spyware-infects-32000/ Updated Mandrake samples, identified by Kaspersky, displayed enhanced obfuscation and evasion tactics Mon, 29 Jul 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/mandrake-spyware-infects-32000/ https://www.infosecurity-magazine.com/news/severity-of-cyberattacks-has/ Appsbroker CTS found that nine in 10 IT leaders believe the severity of cyber-attacks has increased over the past year Thu, 25 Jul 2024 09:03:00 GMT https://www.infosecurity-magazine.com/news/severity-of-cyberattacks-has/ https://www.infosecurity-magazine.com/interviews/paris-2024-ciso-reveals-cyber/ The Paris 2024 Organizing Committee CISO shares the cyber apparatus his team will rely on during the world’s top sporting event Tue, 23 Jul 2024 15:00:00 GMT https://www.infosecurity-magazine.com/interviews/paris-2024-ciso-reveals-cyber/ https://www.infosecurity-magazine.com/news/play-ransomware-target-vmware-esxi/ Trend Micro also revealed a connection between the Play ransomware group and the threat actor Prolific Puma Mon, 22 Jul 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/play-ransomware-target-vmware-esxi/ https://www.infosecurity-magazine.com/news/sap-ai-core-expose-customer-data/ All SAP AI Core vulnerabilities were reported to SAP by Wiz and have since been fixed Thu, 18 Jul 2024 18:00:00 GMT https://www.infosecurity-magazine.com/news/sap-ai-core-expose-customer-data/ https://www.infosecurity-magazine.com/news/google-lines-up-23bn-wiz-security/ Google is in talks to acquire security startup Wiz Security Mon, 15 Jul 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/google-lines-up-23bn-wiz-security/ https://www.infosecurity-magazine.com/blogs/saas-security-in-europe-a-report/ More than 70% of organizations in Europe are now making SaaS cybersecurity a priority Wed, 10 Jul 2024 10:15:00 GMT https://www.infosecurity-magazine.com/blogs/saas-security-in-europe-a-report/ https://www.infosecurity-magazine.com/news/cyber-workforce-grows-15-large/ From an average of one cybersecurity expert for 1285 employees in 2023, large organizations now have one for every 1086 employees, according to Wavestone Fri, 28 Jun 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-workforce-grows-15-large/ https://www.infosecurity-magazine.com/news/attackers-cloud-services-deploy/ A growing number of malware operators have turned to cloud-based command and control servers to deploy malicious campaigns, Fortinet researchers found Wed, 26 Jun 2024 13:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-cloud-services-deploy/ https://www.infosecurity-magazine.com/news/cloud-breaches-half-organizations/ A Thales report found that 44% of organizations have experienced a cloud data breach, with human error and misconfigurations the leading root causes Tue, 25 Jun 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/cloud-breaches-half-organizations/ https://www.infosecurity-magazine.com/news/vmware-critical-vulnerabilities/ VMware has disclosed critical vulnerabilities impacting its VMware vSphere and VMware Cloud Foundation products, with patches available for customers Tue, 18 Jun 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/vmware-critical-vulnerabilities/ https://www.infosecurity-magazine.com/blogs/threat-targeting-cloud-services/ Netskope's Paolo Passeri explains how cyber espionage and cybercrime operations are targeting cloud services Fri, 14 Jun 2024 13:00:00 GMT https://www.infosecurity-magazine.com/blogs/threat-targeting-cloud-services/ https://www.infosecurity-magazine.com/news/cyber-pros-weekends-new-jobs/ Bitdefender found that 70% of cybersecurity professionals often have to work weekends to address security concerns at their organization Wed, 12 Jun 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-pros-weekends-new-jobs/ https://www.infosecurity-magazine.com/news/threat-actor-breaches-snowflake/ Mandiant warns that a financially-motivated threat actor stole a significant volume of customer data from Snowflake, and is extorting many of the victims Tue, 11 Jun 2024 14:35:00 GMT https://www.infosecurity-magazine.com/news/threat-actor-breaches-snowflake/ https://www.infosecurity-magazine.com/news/chinese-operation-crimson-palace/ Sophos said the campaign aimed to maintain prolonged network access for espionage purposes Wed, 05 Jun 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/chinese-operation-crimson-palace/ https://www.infosecurity-magazine.com/news/infosec2024-data-security-threats/ Organizations need to be aware of the threats to their mission-critical data and take urgent steps to protect their data assets Wed, 05 Jun 2024 10:45:00 GMT https://www.infosecurity-magazine.com/news/infosec2024-data-security-threats/ https://www.infosecurity-magazine.com/news/ato-outpace-ransomware-top/ The latest Abnormal Security report shows 83% of firms faced at least one account takeover in the past year Tue, 04 Jun 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/ato-outpace-ransomware-top/ https://www.infosecurity-magazine.com/news/infosec24-enterprise-browser-ai/ Island Technologies discusses the security and user experience benefits of the enterprise browser Tue, 04 Jun 2024 14:10:00 GMT https://www.infosecurity-magazine.com/news/infosec24-enterprise-browser-ai/ https://www.infosecurity-magazine.com/news/microsoft-gift-card-fraud-costing/ Microsoft has warned of surging gift card fraud and sophisticated approaches from the group Storm-0539 Fri, 24 May 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-gift-card-fraud-costing/ https://www.infosecurity-magazine.com/news/cloud-storage-exploited-sms/ According to Enea, these campaigns use cloud storage platforms to host malicious websites, sending links via SMS to bypass firewalls Thu, 23 May 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/cloud-storage-exploited-sms/ https://www.infosecurity-magazine.com/news/llmjacking-exploits-stolen-cloud/ Sysdig said the attackers gained access to these credentials from a vulnerable version of Laravel Thu, 09 May 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/llmjacking-exploits-stolen-cloud/ https://www.infosecurity-magazine.com/news/security-breach-dropbox-sign/ Attackers accessed emails, usernames, phone numbers, hashed passwords and authentication information Thu, 02 May 2024 12:24:00 GMT https://www.infosecurity-magazine.com/news/security-breach-dropbox-sign/ https://www.infosecurity-magazine.com/news/malicious-containers-found-docker/ According to JFrog, approximately 25% of all repositories lack useful functionality and serve as vehicles for spam and malware Tue, 30 Apr 2024 14:30:00 GMT https://www.infosecurity-magazine.com/news/malicious-containers-found-docker/ https://www.infosecurity-magazine.com/news/leakycli-exposes-aws-google-cloud/ Orca Security said the issue mirrors a previously identified vulnerability in Azure CLI Tue, 16 Apr 2024 14:15:00 GMT https://www.infosecurity-magazine.com/news/leakycli-exposes-aws-google-cloud/ https://www.infosecurity-magazine.com/news/wiz-discovers-flaws-generative-ai/ Wiz researchers found architecture flaws in generative AI models available on the AI hub Hugging Face Fri, 05 Apr 2024 13:15:00 GMT https://www.infosecurity-magazine.com/news/wiz-discovers-flaws-generative-ai/ https://www.infosecurity-magazine.com/news/microsoft-security-failures/ A report has highlighted multiple security failings by Microsoft that allowed Chinese threat actors to access US government officials’ email accounts in the Summer of 2023 Wed, 03 Apr 2024 17:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-security-failures/ https://www.infosecurity-magazine.com/news/infostealers-prevalent-retail/ The findings from Netskope also show a shift in the retail sector’s use of cloud applications Wed, 03 Apr 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/infostealers-prevalent-retail/ https://www.infosecurity-magazine.com/news-features/mergers-acquisitions-march-2024/ In March, Cisco confirmed its acquisition of Splunk for $28bn, while Airbus chose to buy German cybersecurity provider Infodas over the cyber business unit of French giant Atos Mon, 01 Apr 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news-features/mergers-acquisitions-march-2024/ https://www.infosecurity-magazine.com/news/ncsc-security-guidance-cloudhosted/ The UK’s National Cyber Security Centre wants to help organizations migrate their SCADA systems to the cloud Tue, 19 Mar 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/ncsc-security-guidance-cloudhosted/ https://www.infosecurity-magazine.com/news/three-vulnerabilities-uncovered/ The flaws, identified by KTrust, enable attackers to bypass rate limits and brute force protection mechanisms Mon, 18 Mar 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/three-vulnerabilities-uncovered/ https://www.infosecurity-magazine.com/news/surge-saas-assets-employee-data/ DoControl said one in six employees was found to have shared company data via personal email Thu, 14 Mar 2024 16:00:00 GMT https://www.infosecurity-magazine.com/news/surge-saas-assets-employee-data/ https://www.infosecurity-magazine.com/news/cloud-account-attacks-surged-2023/ Red Canary said cloud account compromise detections rose 16-fold in 2023, becoming the fourth most prevalent technique used by threat actors Wed, 13 Mar 2024 14:01:00 GMT https://www.infosecurity-magazine.com/news/cloud-account-attacks-surged-2023/ https://www.infosecurity-magazine.com/news/top-vulnerabilities-corporate-web/ Kaspersky said access control weaknesses and failures in data protection accounted for 70% of all flaws Tue, 12 Mar 2024 17:45:00 GMT https://www.infosecurity-magazine.com/news/top-vulnerabilities-corporate-web/ https://www.infosecurity-magazine.com/news/cloud-attack-targets-crypto-cdn/ Sysdig said the rise of the Meson Network in blockchain signals a new frontier for attackers Tue, 12 Mar 2024 16:15:00 GMT https://www.infosecurity-magazine.com/news/cloud-attack-targets-crypto-cdn/ https://www.infosecurity-magazine.com/news/nsa-top-10-cloud-security/ The advisory is associated with ten companion cybersecurity information sheets detailing how to implement each strategy Mon, 11 Mar 2024 13:30:00 GMT https://www.infosecurity-magazine.com/news/nsa-top-10-cloud-security/ https://www.infosecurity-magazine.com/news/third-party-mfa-british-library/ A British Library report found the most likely source of the incident was the compromise of third-party account credentials and no MFA was in place to stop the attackers Mon, 11 Mar 2024 12:45:00 GMT https://www.infosecurity-magazine.com/news/third-party-mfa-british-library/ https://www.infosecurity-magazine.com/news/linux-malware-targets-docker/ Cado said the payloads facilitated RCE attacks by leveraging common misconfigurations and known vulnerabilities Wed, 06 Mar 2024 16:15:00 GMT https://www.infosecurity-magazine.com/news/linux-malware-targets-docker/ https://www.infosecurity-magazine.com/news/skype-google-meet-zoom-trojan-scam/ A new threat actor has been observed by Zscaler distributing remote access Trojans (RATs) via online meeting lures Wed, 06 Mar 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news/skype-google-meet-zoom-trojan-scam/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup/ Notable M&A cybersecurity news in February 2024 included SentinelOne completing its purchase of PingSafe, while ZeroFox is set to be sold to a private equity firm Mon, 04 Mar 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup/ https://www.infosecurity-magazine.com/news/cisa-alert-apt29s-cloud-tactics/ Known as Midnight Blizzard, the Dukes or Cozy Bear, the group has been identified as a Russian entity likely operating under the SVR Mon, 26 Feb 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-alert-apt29s-cloud-tactics/ https://www.infosecurity-magazine.com/news/ncsc-alarm-private-branch-exchange/ The UK’s National Cyber Security Centre has produced new guidance for smaller firms on PBX attacks Wed, 21 Feb 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/ncsc-alarm-private-branch-exchange/ https://www.infosecurity-magazine.com/opinions/four-steps-cultivating-cyber/ Businesses must address the cyber security training gap to combat rising attacks, this must be a joint effort through solutions, policies, and employee training is key Tue, 13 Feb 2024 12:20:00 GMT https://www.infosecurity-magazine.com/opinions/four-steps-cultivating-cyber/ https://www.infosecurity-magazine.com/news/critical-manufacturing-surge/ Nozomi Networks reveals increasingly sophisticated attacks targeting bugs and other vectors in IoT and OT environments Thu, 08 Feb 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/critical-manufacturing-surge/ https://www.infosecurity-magazine.com/news/cloudflare-breach-stolen-okta/ Cloudflare revealed suspected nation-state attackers compromised its systems and accessed source code using credentials stolen in the Okta breach Fri, 02 Feb 2024 11:15:00 GMT https://www.infosecurity-magazine.com/news/cloudflare-breach-stolen-okta/ https://www.infosecurity-magazine.com/news/91-failure-runtime-scans/ The research also revealed 69% of enterprises have yet to integrate AI into cloud environments Wed, 31 Jan 2024 15:00:00 GMT https://www.infosecurity-magazine.com/news/91-failure-runtime-scans/ https://www.infosecurity-magazine.com/news/hackers-target-atlassian/ Shadowserver reported over 39,000 exploitation attempts from 600 unique IP addresses, mainly Russian Tue, 23 Jan 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-target-atlassian/ https://www.infosecurity-magazine.com/news/mother-breaches-unlikely-new-data/ A haul of 26 billion records found online was compiled from historic breaches Tue, 23 Jan 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/mother-breaches-unlikely-new-data/ https://www.infosecurity-magazine.com/news/malware-exploits-9hits-docker/ Discovered by Cado Security, the campaign deploys two containers to vulnerable Docker instances Thu, 18 Jan 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/malware-exploits-9hits-docker/ https://www.infosecurity-magazine.com/news/python-tool-fbot-disrupts-cloud/ Discovered by the SentinelLabs team, FBot targets web servers, cloud services and SaaS platforms Mon, 15 Jan 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/python-tool-fbot-disrupts-cloud/ https://www.infosecurity-magazine.com/blogs/battling-exploitation-cloud/ Paolo Passeri says organizations must understand the full threat of cloud services and how they are used in global conflicts Fri, 12 Jan 2024 13:00:00 GMT https://www.infosecurity-magazine.com/blogs/battling-exploitation-cloud/ https://www.infosecurity-magazine.com/news/vulnerability-bosch-smart/ Bitdefender researchers revealed the vulnerability allows an attacker to send commands to the thermostat and replace its firmware Fri, 12 Jan 2024 10:00:00 GMT https://www.infosecurity-magazine.com/news/vulnerability-bosch-smart/ https://www.infosecurity-magazine.com/news/ncsc-practical-security-guidance/ The UK’s National Cyber Security Centre has launched a new online security guide to help smaller organizations better manage risk Thu, 11 Jan 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/ncsc-practical-security-guidance/ https://www.infosecurity-magazine.com/news/tackling-net-malware-harmony/ New research from Check Point explores the significance of code manipulation in malware analysis Mon, 08 Jan 2024 16:45:00 GMT https://www.infosecurity-magazine.com/news/tackling-net-malware-harmony/ https://www.infosecurity-magazine.com/news/fake-stolen-x-gold-accounts-flood/ CloudSEK explored some of the techniques threat actors have been using to forge or steal X Gold accounts since Elon Musk’s firm introduced its new verified accounts program Wed, 03 Jan 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/fake-stolen-x-gold-accounts-flood/