https://www.infosecurity-magazine.com/encryption/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements Mon, 24 Aug 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter Wed, 19 Aug 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act Mon, 17 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/ CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data Thu, 13 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/ https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort Thu, 13 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor Fri, 07 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/ Infosecurity has contacted over a dozen cybersecurity vendors to examine how they are integrating NIST-approved quantum-safe algorithms into their roadmaps Mon, 03 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/ https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/ New ClickLock macOS stealer locked victims out of their own system until they surrendered a password Thu, 16 Jul 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/ https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims Wed, 15 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/ Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials Mon, 13 Jul 2026 10:40:00 GMT https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/ https://www.infosecurity-magazine.com/blogs/pki-under-pressure-security/ AI growth, certificate sprawl and shrinking lifecycles are transforming PKI, pushing organizations to adopt automation and rethink digital trust strategies Mon, 13 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/blogs/pki-under-pressure-security/ https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ The NCSC has shared best practice advice from pen testers which could help improve system resilience Thu, 02 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/ Microsoft has brought forward its timelines for transitioning to post-quantum cryptography (PQC) Wed, 01 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/ https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executive Order Tue, 23 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign Mon, 22 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ https://www.infosecurity-magazine.com/news/raise-security-procurement-quantum/ Forescout VP of security intelligence, Rik Ferguson, warns that Q-day is fast approaching Thu, 04 Jun 2026 07:45:00 GMT https://www.infosecurity-magazine.com/news/raise-security-procurement-quantum/ https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/ First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol Thu, 21 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/ https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace Thu, 21 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally Thu, 21 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ https://www.infosecurity-magazine.com/news/apple-google-rcs-end-to-end/ Apple begins rolling out end-to-end encrypted RCS messaging between iPhone and Android in iOS 26.5 Tue, 12 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/apple-google-rcs-end-to-end/ https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading Thu, 07 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/ Deep#Door Python RAT uses tunneling and obfuscation to evade detection and steal credentials Thu, 30 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/ https://www.infosecurity-magazine.com/news/critical-flaw-vect-ransomware-data/ The Vect 2.0 ransomware wipes large files instead of merely encrypting them, making recovery impossible – even for the attackers Wed, 29 Apr 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/critical-flaw-vect-ransomware-data/ https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/ The UK’s NCSC has fully backed passkeys as consumers’ first choice for login, citing progress with FIDO and successful use across the NHS Thu, 23 Apr 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/ https://www.infosecurity-magazine.com/news/google-chrome-protection/ Chrome’s Device Bound Session Credentials is designed to block infostealers from harvesting session cookie Fri, 10 Apr 2026 11:25:00 GMT https://www.infosecurity-magazine.com/news/google-chrome-protection/ https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/ STX RAT, a newly identified remote access trojan, attempted deployment in finance, showing advanced C2 and stealthy delivery methods Thu, 09 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/ https://www.infosecurity-magazine.com/news/teampcp-targets-telnyx-pypi-package/ Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware Fri, 27 Mar 2026 15:06:00 GMT https://www.infosecurity-magazine.com/news/teampcp-targets-telnyx-pypi-package/ https://www.infosecurity-magazine.com/news/quantum-encryption-q-day-closer/ ‘Q-Day’ and the cybersecurity problems it brings could come as early as 2029 as Google accelerates its post-quantum cryptography migration Fri, 27 Mar 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/quantum-encryption-q-day-closer/ https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/ EtherRAT hides C2 in Ethereum smart contracts via EtherHiding, steals wallets and credentials Thu, 26 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/ https://www.infosecurity-magazine.com/news/gcot-6g-cybersecurity-guidelines/ A coalition of seven Western nations has launched guidelines to help integrate security-by-design principles into future 6G standards Wed, 04 Mar 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/gcot-6g-cybersecurity-guidelines/ https://www.infosecurity-magazine.com/news/aeternum-botnet-c2-polygon/ New botnet Aeternum shifted C2 operations to Polygon blockchain, complicating takedown efforts Thu, 26 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/aeternum-botnet-c2-polygon/ https://www.infosecurity-magazine.com/opinions/why-your-organization-should-start/ Quantum preparedness manageable, using skills and resources security teams already have and embedding the activities in ongoing security remediation work Wed, 18 Feb 2026 14:01:00 GMT https://www.infosecurity-magazine.com/opinions/why-your-organization-should-start/ https://www.infosecurity-magazine.com/news/apple-rcs-encryption-memory/ iOS 26.4 Beta adds end-to-end encryption for RCS messaging and enhanced Memory Integrity Enforcement Tue, 17 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/apple-rcs-encryption-memory/ https://www.infosecurity-magazine.com/news/cisa-post-quantum-cryptography/ CISA released initial list of PQC-capable hardware and software to guide companies amid quantum threats Mon, 26 Jan 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-post-quantum-cryptography/ https://www.infosecurity-magazine.com/news/g7-2034-deadline-finance-pqc/ The financial sector should finalize its post-quantum cryptography transition circa 2034, G7 cyber experts said Wed, 14 Jan 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/g7-2034-deadline-finance-pqc/ https://www.infosecurity-magazine.com/news/wef-deepfake-faceswapping-security/ Researchers at the World Economic Forum have shown that threat actors can use commercial deepfake tools to bypass corporate security protections Fri, 09 Jan 2026 12:34:00 GMT https://www.infosecurity-magazine.com/news/wef-deepfake-faceswapping-security/ https://www.infosecurity-magazine.com/news/vvs-stealer-advanced-obfuscation/ A new Python-based malware called VVS stealer has been identified, targeting Discord users with stealthy techniques to steal data Mon, 05 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/vvs-stealer-advanced-obfuscation/ https://www.infosecurity-magazine.com/news/deadlock-ransomware-uses-byovd/ Cisco Talos has detected new tactics from a financially motivated actor using DeadLock ransomware Tue, 09 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/deadlock-ransomware-uses-byovd/ https://www.infosecurity-magazine.com/blogs/quantum-future-lessons-singapore/ As quantum computing advances, so is the race to secure our systems before “Q-day” when quantum machines can break today’s encryption. At GovWare 2025, Singapore’s role as a global testbed for quantum-safe innovation was highlighted, with insights from an expert at global technology, defense and engineering group ST Engineering Mon, 01 Dec 2025 08:55:00 GMT https://www.infosecurity-magazine.com/blogs/quantum-future-lessons-singapore/ https://www.infosecurity-magazine.com/news/kraken-benchmarking-enhance/ Cisco Talos has observed overlaps between Kraken and the earlier HelloKitty cartel through attack tactics using SMB flaws for big-game hunting and double extortion Mon, 17 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/kraken-benchmarking-enhance/ https://www.infosecurity-magazine.com/news/scattered-spider-shinyhunters/ Scattered Spider, ShinyHunters and LAPSUS$ have formed an enhanced coordinated threat network for extortion efforts Tue, 04 Nov 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-shinyhunters/ https://www.infosecurity-magazine.com/news/chrome-https-mandatory-2026/ Google Chrome will enhance security with enforced HTTPS connections from version 154, set for release in October 2026 Wed, 29 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/chrome-https-mandatory-2026/ https://www.infosecurity-magazine.com/interviews/how-businesses-approach-pqc/ Transitioning to quantum-safe cryptography is not necessarily a top priority for every system of every organization, said the co-founder of Crypto Quantique Wed, 29 Oct 2025 09:00:00 GMT https://www.infosecurity-magazine.com/interviews/how-businesses-approach-pqc/ https://www.infosecurity-magazine.com/news/qilin-ransomware-40-cases-monthly/ Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics Mon, 27 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/qilin-ransomware-40-cases-monthly/ https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/ According to ExtraHop’s latest threat landscape report, average ransomware payments surged 44% to $3.6m in 2025 despite fewer incidents Tue, 21 Oct 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/ https://www.infosecurity-magazine.com/news/asahi-ransomware-attack-data-stolen/ Asahi confirmed it has fallen victim to a ransomware attack, and revealed it has started manual order processing amid ongoing operational disruption Mon, 06 Oct 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/asahi-ransomware-attack-data-stolen/ https://www.infosecurity-magazine.com/news/lockbit-ransomware-most-dangerous/ Trend Micro highlighted the new LockBit version’s improved technical improvements and cross-platform functionality compared to previous iterations Fri, 26 Sep 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/lockbit-ransomware-most-dangerous/ https://www.infosecurity-magazine.com/news/npm-uses-qr-code-steganography/ Malicious npm package Fezbox uses QR codes to steal credentials from browser cookies Wed, 24 Sep 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/npm-uses-qr-code-steganography/ https://www.infosecurity-magazine.com/news/attacker-breakout-time-falls-18/ ReliaQuest report claims time from initial access to lateral movement has shrunk to just 18 minutes Tue, 23 Sep 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/attacker-breakout-time-falls-18/ https://www.infosecurity-magazine.com/news/filefix-steganography-multistage/ FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing Wed, 17 Sep 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/filefix-steganography-multistage/ https://www.infosecurity-magazine.com/news/ransomware-payments-plummet/ Sophos found that average ransom demands and payments fell substantially in the education sector in 2025, as recovery time and costs fell Wed, 10 Sep 2025 11:45:00 GMT https://www.infosecurity-magazine.com/news/ransomware-payments-plummet/ https://www.infosecurity-magazine.com/news/malicious-npm-packages-exploit/ A malicious campaign using Ethereum smart contracts has been observed targeting developers via npm and GitHub Wed, 03 Sep 2025 15:45:00 GMT https://www.infosecurity-magazine.com/news/malicious-npm-packages-exploit/ https://www.infosecurity-magazine.com/news/ransomware-pennsylvania-ag/ Pennsylvania’s Attorney General confirmed the OAG had refused to pay a ransom demand to the attackers after files were encrypted Mon, 01 Sep 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-pennsylvania-ag/ https://www.infosecurity-magazine.com/news/vs-code-extensions-exploit-name/ Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages Thu, 28 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/vs-code-extensions-exploit-name/ https://www.infosecurity-magazine.com/news/android-trojan-expands-ransomware/ A new version of the Hook Android banking Trojan features 107 remote commands, including ransomware overlays Tue, 26 Aug 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/android-trojan-expands-ransomware/ https://www.infosecurity-magazine.com/opinions/quantum-countdown-encryption-crisis/ Security leaders must ensure the board is aware that the quantum risk isn't theoretical, it's happening now Mon, 25 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/opinions/quantum-countdown-encryption-crisis/ https://www.infosecurity-magazine.com/news/microsoft-products-quantum-safe/ Microsoft has set out a roadmap to complete transition to PQC in all its products and services by 2033, with roll out beginning by 2029 Fri, 22 Aug 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-products-quantum-safe/ https://www.infosecurity-magazine.com/news/pharma-inotiv-confirms-ransomware/ Indiana-based pharmaceutical research company Inotiv has confirmed it suffered a ransomware attack, disrupting operations and compromising data Wed, 20 Aug 2025 17:00:00 GMT https://www.infosecurity-magazine.com/news/pharma-inotiv-confirms-ransomware/ https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ Trend Micro highlighted a sophisticated post-compromise attack chain to deploy the Warlock ransomware in unpatched SharePoint on-prem environments Wed, 20 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ https://www.infosecurity-magazine.com/opinions/secure-uk-quantum-economy/ BT’s Gabriela Styf Sjöman explains how the UK can lay secure foundations for the future implementation of quantum technologies Fri, 15 Aug 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/secure-uk-quantum-economy/ https://www.infosecurity-magazine.com/news/embargo-ransomware-amasses-attack/ TRM Labs observed crypto payments worth $34.2m moved from victims addresses to a range of destinations likely associated with the group Mon, 11 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/embargo-ransomware-amasses-attack/ https://www.infosecurity-magazine.com/news/ransomware-expand-encryption/ Ransomware actors deploy a range of activities to make it harder for victims to recover and increase the consequences of not paying demands Wed, 06 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/ransomware-expand-encryption/ https://www.infosecurity-magazine.com/news/auto-color-backdoor-exploits-sap/ Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324 Tue, 29 Jul 2025 15:10:00 GMT https://www.infosecurity-magazine.com/news/auto-color-backdoor-exploits-sap/ https://www.infosecurity-magazine.com/news/chaos-ransomware-wave-attacks/ Cisco Talos warned that the Chaos group, thought to be formed of former BlackSuit members, has launched a wave of attacks targeted a variety of sectors Fri, 25 Jul 2025 10:35:00 GMT https://www.infosecurity-magazine.com/news/chaos-ransomware-wave-attacks/ https://www.infosecurity-magazine.com/news/crushftp-critical-vulnerability/ CVE-2025-54309 could allow remote attackers to obtain admin access via HTTPS Mon, 21 Jul 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/crushftp-critical-vulnerability/ https://www.infosecurity-magazine.com/news/retail-ransomware-jump-globally-q2/ BlackFog found that publicly disclosed ransomware attacks on retail grew significantly in Q2 compared to Q1, with UK firms heavily targeted Wed, 16 Jul 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/retail-ransomware-jump-globally-q2/ https://www.infosecurity-magazine.com/news/interlock-ransomware-new-rat/ Interlock ransomware continues to develop custom tooling and a new RAT has been detected by researchers Mon, 14 Jul 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/interlock-ransomware-new-rat/ https://www.infosecurity-magazine.com/news/eu-plan-quantum-secure/ The EU’s Quantum Strategy includes plans to develop secure quantum communication infrastructure across the region Fri, 04 Jul 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/eu-plan-quantum-secure/ https://www.infosecurity-magazine.com/opinions/crypto-procastination-quantum/ Santander's Jaime Gomez Garcia says a global action plan is essential to prevent crypto-procrastination and ensure an orderly transition to quantum security Tue, 01 Jul 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/crypto-procastination-quantum/ https://www.infosecurity-magazine.com/news/scattered-spider-targeting/ The FBI alert comes amid several reported cyber incidents impacting North America-based airlines, including Hawaiian Airlines Mon, 30 Jun 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-targeting/ https://www.infosecurity-magazine.com/news/sap-gui-vulnerable-weak-encryption/ Two SAP GUI vulnerabilities have been identified exposing sensitive data due to weak encryption in input history features Wed, 25 Jun 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/sap-gui-vulnerable-weak-encryption/ https://www.infosecurity-magazine.com/news/meta-introduce-full-passkey-support/ Around half of the world’s top 100 websites have already integrated passkey support Fri, 20 Jun 2025 12:45:00 GMT https://www.infosecurity-magazine.com/news/meta-introduce-full-passkey-support/ https://www.infosecurity-magazine.com/news/microsoft-european-cloud-data/ Microsoft’s Sovereign Cloud solutions are designed to ensure European cloud data is stored and processed in Europe Tue, 17 Jun 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-european-cloud-data/ https://www.infosecurity-magazine.com/blogs/predicting-primes-encryption/ New research claims prime numbers can now be predicted, potentially weakening encryption methods like RSA. While this poses risks to cybersecurity, it also opens doors to more efficient cryptographic systems Mon, 09 Jun 2025 10:30:00 GMT https://www.infosecurity-magazine.com/blogs/predicting-primes-encryption/ https://www.infosecurity-magazine.com/news/infosec2025-lessons-maersk-ciso/ 2017 ransomware attack on shipping company A P Moller Maersk marked a turning point for the cybersecurity industry, according to its former CISO Adam Banks Thu, 05 Jun 2025 19:05:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-lessons-maersk-ciso/ https://www.infosecurity-magazine.com/news/infosec2025-vendors-quantum/ CISOs should demand more of their vendors and use regulation as an ally to persuade board members to accelerate the transition to post-quantum safety Tue, 03 Jun 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-vendors-quantum/ https://www.infosecurity-magazine.com/news/just-5-enterprises-quantumsafe/ DigiCert survey finds only 5% of global businesses are using post-quantum cryptography Thu, 08 May 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/just-5-enterprises-quantumsafe/ https://www.infosecurity-magazine.com/news/passkeys-govuk-accounts/ The UK government has announced that it will be replace its current SMS verification system with passkeys by the end of 2025 Wed, 07 May 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/passkeys-govuk-accounts/ https://www.infosecurity-magazine.com/news/infosec2025-quantum-reshape/ The impact of the advancement in quantum computing on cybersecurity will be a key focus at this year’s Infosecurity Europe event Thu, 01 May 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-quantum-reshape/ https://www.infosecurity-magazine.com/news/ransomhub-refines-extortion/ RansomHub refines extortion strategy amid RaaS market fractures, expanding affiliate recruitment Wed, 30 Apr 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/ransomhub-refines-extortion/ https://www.infosecurity-magazine.com/news/isaca-lack-quantum-threat/ An ISACA survey found that just 5% of organizations have a defined strategy to defend against quantum-enabled threats Mon, 28 Apr 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/isaca-lack-quantum-threat/ https://www.infosecurity-magazine.com/news/elenor-corp-ransomware-targets/ ELENOR-corp ransomware, a new version of Mimic, is targeting healthcare organizations using advanced capabilities Thu, 24 Apr 2025 18:00:00 GMT https://www.infosecurity-magazine.com/news/elenor-corp-ransomware-targets/ https://www.infosecurity-magazine.com/news/ntlm-hash-exploit-targets-poland/ An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild Thu, 17 Apr 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/ntlm-hash-exploit-targets-poland/ https://www.infosecurity-magazine.com/news/92-mobile-apps-insecure/ Study reveals 92% of mobile apps use insecure cryptographic methods, exposing millions to data risks Wed, 16 Apr 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/92-mobile-apps-insecure/ https://www.infosecurity-magazine.com/news/digital-certificate-lifespans-fall/ CA/Browser Forum members have voted in favor of shortening TLS/SSL certificate lifespans to 47 days Mon, 14 Apr 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/digital-certificate-lifespans-fall/ https://www.infosecurity-magazine.com/news/google-switch-e2ee-all-gmail-users/ Google is set to roll out end-to-end encryption for all Gmail users, boosting security, compliance and data sovereignty efforts Tue, 01 Apr 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/google-switch-e2ee-all-gmail-users/ https://www.infosecurity-magazine.com/news-features/cybersecurity-roundup-google-wiz/ Google’s agreement to acquire Wiz was the standout M&A news from March. Other acquisition agreements were announced by SolarWinds, Armis and Forcepoint Mon, 31 Mar 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-roundup-google-wiz/ https://www.infosecurity-magazine.com/news/etsi-quantum-safe-encryption/ Standards body ETSI has defined a scheme for key encapsulation mechanisms with access control (KEMAC), enabling quantum-secure encryption Wed, 26 Mar 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/etsi-quantum-safe-encryption/ https://www.infosecurity-magazine.com/news/ncsc-post-quantum-cryptography/ New NCSC guidance sets out a three-phase migration to post-quantum cryptography, designed to ensure all systems are protected from quantum attacks by 2035 Thu, 20 Mar 2025 08:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-post-quantum-cryptography/ https://www.infosecurity-magazine.com/news/brian-cox-quantum-infosecurity/ World-renowned physicist, Professor Brian Cox, will headline day one of Infosecurity Europe, analyzing the science behind quantum computing and the challenges it brings Wed, 19 Mar 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/brian-cox-quantum-infosecurity/ https://www.infosecurity-magazine.com/news/malicious-app-bypass-android/ Bitdefender said the malicious app campaign has resulted in more than 60 million downloads of malicious apps from the Google Play Store Tue, 18 Mar 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/malicious-app-bypass-android/ https://www.infosecurity-magazine.com/news/cloudflare-e2e-post-quantum/ Cloudflare introduces E2E post-quantum cryptography, enhancing security against quantum threats Mon, 17 Mar 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/cloudflare-e2e-post-quantum/ https://www.infosecurity-magazine.com/news/phishing-campaign-havoc-framework/ A new phishing campaign has been identified using Havoc to control infected systems, leveraging SharePoint and Microsoft Graph API Mon, 03 Mar 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-campaign-havoc-framework/ https://www.infosecurity-magazine.com/news/vodafone-trials-quantum-safe/ Telecoms provider Vodafone has developed the new proof of concept with IBM, as it seeks to implement post-quantum cryptography ahead of anticipated quantum-based attacks Mon, 03 Mar 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/vodafone-trials-quantum-safe/ https://www.infosecurity-magazine.com/news/6tb-data-stolen-saudi-cyber-attack/ DragonForce ransomware attacks Saudi firms stealing 6TB data, escalating cyber threats in real estate Thu, 27 Feb 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/6tb-data-stolen-saudi-cyber-attack/ https://www.infosecurity-magazine.com/news/signal-exit-sweden-government/ Meredith Whittaker, Signal's CEO, has threatened to pull the company out of Sweden if a proposed government bill requiring encryption backdoors becomes law Wed, 26 Feb 2025 12:45:00 GMT https://www.infosecurity-magazine.com/news/signal-exit-sweden-government/ https://www.infosecurity-magazine.com/news/only-fifth-ransomware-attacks/ ReliaQuest claims 80% of ransomware attacks now focus solely on exfiltrating data as it is faster Tue, 25 Feb 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/only-fifth-ransomware-attacks/ https://www.infosecurity-magazine.com/news/google-cloud-pqc-digital-signatures/ Google Cloud's Key Management Service now features quantum-safe digital signatures to strengthen data integrity and prepare for emerging quantum computing challenges Mon, 24 Feb 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-pqc-digital-signatures/ https://www.infosecurity-magazine.com/news/experts-government-disastrous/ Experts argue Britons are now less secure after their government effectively forced Apple to abandon end-to-end encryption Mon, 24 Feb 2025 11:20:00 GMT https://www.infosecurity-magazine.com/news/experts-government-disastrous/ https://www.infosecurity-magazine.com/news/microsoft-quantum-chip-encryption/ Microsoft has developed the first ever quantum chip, shortening the timeframe for when quantum computers will break exiting encryption Fri, 21 Feb 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-quantum-chip-encryption/ https://www.infosecurity-magazine.com/news/russian-hackers-signal-spy/ Google has warned that Russian state-backed hackers are targeting Signal to eavesdrop on persons of interest in Ukraine Wed, 19 Feb 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/russian-hackers-signal-spy/ https://www.infosecurity-magazine.com/news/ransomware-gangs-prioritize-speed/ Ransomware groups are adopting agile techniques in a quantity-over-quality approach, according to a new report from Huntress Tue, 11 Feb 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-gangs-prioritize-speed/ https://www.infosecurity-magazine.com/news/experts-dismayed-uk-apple/ Security and privacy experts have questioned a new demand from the UK Home Office on Apple’s encrypted iCloud service Mon, 10 Feb 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/experts-dismayed-uk-apple/ https://www.infosecurity-magazine.com/news/europol-warns-financial-sector/ Europol has urged the financial sector to prioritize quantum-safe cryptography Mon, 10 Feb 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/europol-warns-financial-sector/ https://www.infosecurity-magazine.com/news/englobal-attack-sensitive-data/ Energy contractor ENGlobal reported that sensitive personal data was stolen by threat actors, with the incident disrupting operations for six weeks Tue, 28 Jan 2025 17:00:00 GMT https://www.infosecurity-magazine.com/news/englobal-attack-sensitive-data/ https://www.infosecurity-magazine.com/news/lynx-ransomware-sophisticated/ Group-IB researchers have exposed the highly organized affiliate platform and sophisticated operations of the Lynx Ransomware-as-a-Service group Tue, 28 Jan 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/lynx-ransomware-sophisticated/ https://www.infosecurity-magazine.com/news/ransomware-victims-shut-operations/ A Ponemon Institute survey highlighted the growing impact of ransomware attacks on victims’ revenue and reputation Tue, 28 Jan 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-victims-shut-operations/ https://www.infosecurity-magazine.com/opinions/quantum-computers-crypto-keys/ IBS Software’s Alex Haynes says there is still a long way to go before quantum computers are able to break modern cryptographic keys Fri, 24 Jan 2025 13:30:00 GMT https://www.infosecurity-magazine.com/opinions/quantum-computers-crypto-keys/ https://www.infosecurity-magazine.com/news/biden-tightens-software-security/ The US President’s second cybersecurity Executive Order will impose stricter security standards on software providers Thu, 16 Jan 2025 16:14:00 GMT https://www.infosecurity-magazine.com/news/biden-tightens-software-security/ https://www.infosecurity-magazine.com/news/supply-chain-attack-targets/ A new supply chain attack targets Ethereum tools, exploiting npm packages to steal sensitive data Mon, 06 Jan 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/supply-chain-attack-targets/ https://www.infosecurity-magazine.com/news/uk-smes-lack-cybersecurity-policy/ Insurance firm Markel Direct found that 69% of UK SMEs lack a cybersecurity policy, with a significant lack of basic cybersecurity measures in place across these firms Mon, 30 Dec 2024 09:00:00 GMT https://www.infosecurity-magazine.com/news/uk-smes-lack-cybersecurity-policy/ https://www.infosecurity-magazine.com/opinions/quantum-next-big-leap/ Google Cloud CISO Phil Venables sets out how to ensure a smooth transition to quantum-resistant cryptography Fri, 20 Dec 2024 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/quantum-next-big-leap/ https://www.infosecurity-magazine.com/news/ransomware-industries-downtime/ A Dragos report observed 23 new ransomware groups targeting industrial organizations in Q3 2024 Fri, 20 Dec 2024 09:15:00 GMT https://www.infosecurity-magazine.com/news/ransomware-industries-downtime/ https://www.infosecurity-magazine.com/news/texas-tech-university-breach/ The breach has affected 650,000 individuals at TTUHSC’s Lubbock campus and 815,000 at its El Paso branch Tue, 17 Dec 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/texas-tech-university-breach/ https://www.infosecurity-magazine.com/news/ransomware-disrupts-us-contractor/ ENGlobal has been hit by a ransomware attack, taking its IT systems offline since November 25 Tue, 03 Dec 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/ransomware-disrupts-us-contractor/ https://www.infosecurity-magazine.com/news/police-shut-down-matrix-criminal/ A law enforcement operation executed by Dutch and French authorities resulted in the main servers used by Matrix being taken down Tue, 03 Dec 2024 14:45:00 GMT https://www.infosecurity-magazine.com/news/police-shut-down-matrix-criminal/ https://www.infosecurity-magazine.com/news-features/certifications-cybersecurity/ Certifications still matter in the cybersecurity job market, but skills seal the deal Mon, 02 Dec 2024 10:50:00 GMT https://www.infosecurity-magazine.com/news-features/certifications-cybersecurity/ https://www.infosecurity-magazine.com/news/albanian-drug-busted-cops-decrypt/ European police have arrested 21 individuals linked to a violent Albanian gang after decrypting their Sky ECC communications Thu, 28 Nov 2024 10:30:00 GMT https://www.infosecurity-magazine.com/news/albanian-drug-busted-cops-decrypt/ https://www.infosecurity-magazine.com/news/bootkit-bootkitty-targets-linux/ Bootkitty, the first Linux-targeting UEFI bootkit, bypassed kernel security in a proof-of-concept attack Wed, 27 Nov 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/bootkit-bootkitty-targets-linux/ https://www.infosecurity-magazine.com/news/ddos-campaign-exploits-iot-devices/ DDoS campaign by Matrix targets IoT devices and servers, exploiting weak credentials and public scripts Tue, 26 Nov 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/ddos-campaign-exploits-iot-devices/ https://www.infosecurity-magazine.com/news/helldown-ransomware-target-vmware/ Helldown ransomware has expanded its reach to target Linux and VMware systems, exploiting Zyxel firewall vulnerabilities and exfiltrating data Tue, 19 Nov 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/helldown-ransomware-target-vmware/ https://www.infosecurity-magazine.com/news/remcos-rat-variant-targets-windows/ The new Remcos RAT variant identified in a new phishing campaign exploits CVE-2017-0199 via malicious Excel files Mon, 11 Nov 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/remcos-rat-variant-targets-windows/ https://www.infosecurity-magazine.com/news/interlock-ransomware-us-healthcare/ Interlock employs both “big-game hunting” and double extortion tactics against its victims Thu, 07 Nov 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/interlock-ransomware-us-healthcare/ https://www.infosecurity-magazine.com/news/google-cloud-mandate-mfa-2025/ Google wants to ensure a smooth transition towards required MFA across all Google Cloud accounts with a phased rollout running throughout 2025 Wed, 06 Nov 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-mandate-mfa-2025/ https://www.infosecurity-magazine.com/news/half-us-county-websites-could-be/ Comparitech warns that voters could be misled as most local government sites are failing on basic security Wed, 30 Oct 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/half-us-county-websites-could-be/ https://www.infosecurity-magazine.com/news/embargo-ransomware-defense-evasion/ The recently discovered Embargo ransomware group is using Rust-based custom tools to overcome victims’ security defenses, ESET researchers have observed Wed, 23 Oct 2024 16:02:00 GMT https://www.infosecurity-magazine.com/news/embargo-ransomware-defense-evasion/ https://www.infosecurity-magazine.com/news/flaws-e2ee-cloud-storage-services/ The cryptographic vulnerabilities were found in Sync, pCloud, Icedrive and Seafile by ETH Zurich Mon, 21 Oct 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/flaws-e2ee-cloud-storage-services/ https://www.infosecurity-magazine.com/news/cicada-ransomware-critical-sectors/ Cicada3301 ransomware has targeted critical sectors in US/UK, leaking data from 30 firms in three months Thu, 17 Oct 2024 17:16:00 GMT https://www.infosecurity-magazine.com/news/cicada-ransomware-critical-sectors/ https://www.infosecurity-magazine.com/news/fido-passkey-exchange-standard/ The new set of specifications could enable users to securely move passkeys and all other credentials across providers Wed, 16 Oct 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news/fido-passkey-exchange-standard/ https://www.infosecurity-magazine.com/news/experts-play-down-chinese-quantum/ DigiCert says imminent crypto threat from quantum computing has been over-hyped Wed, 16 Oct 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/experts-play-down-chinese-quantum/ https://www.infosecurity-magazine.com/news/orgs-unprepared-postquantum-threat/ Most organizations are not prepared for the post-quantum threat, despite the recent publication of NIST's first three finalized post-quantum encryption standards Tue, 15 Oct 2024 14:30:00 GMT https://www.infosecurity-magazine.com/news/orgs-unprepared-postquantum-threat/ https://www.infosecurity-magazine.com/news/nation-states-cybercriminals/ Microsoft has observed nation states ramping up cooperation with cybercriminals to conduct operations in the past year Tue, 15 Oct 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/nation-states-cybercriminals/ https://www.infosecurity-magazine.com/news/cisa-urges-encryption-cookies-f/ CISA urged organizations to tackle security risks from unencrypted cookies in F5 BIG-IP LTM systems Mon, 14 Oct 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-urges-encryption-cookies-f/ https://www.infosecurity-magazine.com/news/stonefly-targets-us-firms-new/ North Korean APT Stonefly continues to launch cyber-attacks on US firms despite July indictment Wed, 02 Oct 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/stonefly-targets-us-firms-new/ https://www.infosecurity-magazine.com/news/hsbc-quantum-safe-technology/ The bank giant and Quantinuum trialed the first application of quantum-secure technology for buying and selling tokenized physical gold Fri, 20 Sep 2024 09:00:00 GMT https://www.infosecurity-magazine.com/news/hsbc-quantum-safe-technology/ https://www.infosecurity-magazine.com/news/infostealers-ransomware-attacks/ Infostealer malware and digital identity exposure behind rise in ransomware, researchers find Thu, 19 Sep 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/infostealers-ransomware-attacks/ https://www.infosecurity-magazine.com/news/researcher-vulnerability-yubikeys/ A security flaw exploiting side channel attacks means some Yubikeys can be cloned Thu, 05 Sep 2024 12:15:00 GMT https://www.infosecurity-magazine.com/news/researcher-vulnerability-yubikeys/ https://www.infosecurity-magazine.com/news/us-internet-routing-security/ The US White House Office of the National Cyber Director proposes improving internet security by protecting the Border Gateway Protocol Wed, 04 Sep 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/us-internet-routing-security/ https://www.infosecurity-magazine.com/news/verkada-penalty-hackers-sensitive/ The US FTC has proposed a $2.95m fine for security camera firm Verkada for alleged security failings that allowed hackers to access customers' video footage Mon, 02 Sep 2024 13:45:00 GMT https://www.infosecurity-magazine.com/news/verkada-penalty-hackers-sensitive/ https://www.infosecurity-magazine.com/news/backdoor-mifare-smart-cards-open/ Quarklabs researchers claim millions of contactless key cards could be cloned via a backdoor Thu, 22 Aug 2024 10:00:00 GMT https://www.infosecurity-magazine.com/news/backdoor-mifare-smart-cards-open/ https://www.infosecurity-magazine.com/news/litespeed-cache-plugin-flaw/ The LiteSpeed Cache flaw may expose millions of WordPress sites to severe security risks Wed, 21 Aug 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/litespeed-cache-plugin-flaw/ https://www.infosecurity-magazine.com/news/healthcare-fifth-ransomware/ Healthcare has been the most targeted sector according to Barracuda analysis of 200 reported ransomware incidents from August 2023 to July 2024 Wed, 21 Aug 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news/healthcare-fifth-ransomware/ https://www.infosecurity-magazine.com/opinions/modernize-cryptography-quantum/ Dr Ali El Kaafarani highlights the actions organizations must take to make their systems quantum secure in light of the new NIST standards Fri, 16 Aug 2024 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/modernize-cryptography-quantum/ https://www.infosecurity-magazine.com/news/valleyrat-campaign-hits-windows/ Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems Thu, 15 Aug 2024 16:00:00 GMT https://www.infosecurity-magazine.com/news/valleyrat-campaign-hits-windows/ https://www.infosecurity-magazine.com/news/nist-quantum-cryptography-standards/ NIST has formalized three post-quantum cryptographic algorithms, with organizations urged to start the transition to quantum-secure encryption immediately Tue, 13 Aug 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/nist-quantum-cryptography-standards/ https://www.infosecurity-magazine.com/news/cisa-secure-by-demand-strategy/ CISA Director Jen Easterly calls on organizations to drive cybersecurity improvements through a 'Secure by Demand' approach Fri, 09 Aug 2024 17:25:00 GMT https://www.infosecurity-magazine.com/news/cisa-secure-by-demand-strategy/ https://www.infosecurity-magazine.com/news/ransomexx-targets-indian-banking/ CloudSek said the RansomEXX breach occurred via a misconfigured Jenkins server at Brontoo Technology Thu, 01 Aug 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/ransomexx-targets-indian-banking/ https://www.infosecurity-magazine.com/news/walmart-powershell-backdoor-zloader/ Walmart detailed findings about an unknown PowerShell backdoor, which was potentially utilized alongside a new Zloader variant Mon, 29 Jul 2024 15:00:00 GMT https://www.infosecurity-magazine.com/news/walmart-powershell-backdoor-zloader/ https://www.infosecurity-magazine.com/news/north-korean-critical/ A joint advisory by the UK, US and South Korea have warned of a global espionage campaign by a North Korea threat actor, Andariel, targeting CNI organizations Fri, 26 Jul 2024 11:02:00 GMT https://www.infosecurity-magazine.com/news/north-korean-critical/ https://www.infosecurity-magazine.com/news/russia-cyber-focus-battlefield/ A new report published by RUSI highlighted how Russia’s intelligence services have adapted their cybersecurity strategy to the demands of a long war in Ukraine Tue, 23 Jul 2024 12:10:00 GMT https://www.infosecurity-magazine.com/news/russia-cyber-focus-battlefield/ https://www.infosecurity-magazine.com/news/play-ransomware-target-vmware-esxi/ Trend Micro also revealed a connection between the Play ransomware group and the threat actor Prolific Puma Mon, 22 Jul 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/play-ransomware-target-vmware-esxi/ https://www.infosecurity-magazine.com/news/sap-ai-core-expose-customer-data/ All SAP AI Core vulnerabilities were reported to SAP by Wiz and have since been fixed Thu, 18 Jul 2024 18:00:00 GMT https://www.infosecurity-magazine.com/news/sap-ai-core-expose-customer-data/ https://www.infosecurity-magazine.com/news/qilin-ransomwares-tactics-unveiled/ Qilin’s attack on Synnovis severely impacted key NHS hospitals in London earlier this month Wed, 17 Jul 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/qilin-ransomwares-tactics-unveiled/ https://www.infosecurity-magazine.com/news/crystalray-cyber-attacks-grow/ Sysdig said CRYSTALRAY used a variety of open source security tools to scan for vulnerabilities Mon, 15 Jul 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/crystalray-cyber-attacks-grow/ https://www.infosecurity-magazine.com/news/ransomware-defense-evasion-data/ A Cisco report highlighted TTPs used by the most prominent ransomware groups to evade detection, establish persistence and exfiltrate sensitive data Wed, 10 Jul 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-defense-evasion-data/ https://www.infosecurity-magazine.com/news/eldorado-ransomware-hits-windows/ Group-IB also revealed the ransomware uses Chacha20 and RSA-OAEP for encryption Tue, 09 Jul 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/eldorado-ransomware-hits-windows/ https://www.infosecurity-magazine.com/news/avast-provides-donex-ransomware/ Researchers at Avast found a flaw in the cryptographic schema of the DoNex ransomware and have been sending out decryptor keys to victims since March 2024 Tue, 09 Jul 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news/avast-provides-donex-ransomware/ https://www.infosecurity-magazine.com/news/cisco-regresshion-vulnerability/ Cisco has told customers that 42 of its products are impacted by the OpenSSH regreSSHion vulnerability, with a further 51 products being investigated Mon, 08 Jul 2024 15:30:00 GMT https://www.infosecurity-magazine.com/news/cisco-regresshion-vulnerability/ https://www.infosecurity-magazine.com/news/chrome-update-will-block-entrust/ The move follows a series of reported compliance failures and lack of progress in addressing publicly disclosed incidents Tue, 02 Jul 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/chrome-update-will-block-entrust/ https://www.infosecurity-magazine.com/news/openssh-flaw-system-compromise/ A newly discovered RCE vulnerability, which can lead to full system compromise, has put over 14 million OpenSSH server instances are potentially at risk, according to Qualys Mon, 01 Jul 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/openssh-flaw-system-compromise/ https://www.infosecurity-magazine.com/news/australia-police-fake-wifi-airport/ Evil twin Wi-Fi access points mimicked legitimate networks to capture personal data from unsuspecting victims who mistakenly connected to them Mon, 01 Jul 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news/australia-police-fake-wifi-airport/ https://www.infosecurity-magazine.com/news/cloud-breaches-half-organizations/ A Thales report found that 44% of organizations have experienced a cloud data breach, with human error and misconfigurations the leading root causes Tue, 25 Jun 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/cloud-breaches-half-organizations/ https://www.infosecurity-magazine.com/interviews/q-day-hsbc-secure-banking/ HSBC’s Philip Intallura tells Infosecurity about the emerging quantum threat to the financial sector, and how the bank is working to make its systems quantum-secure Mon, 24 Jun 2024 13:30:00 GMT https://www.infosecurity-magazine.com/interviews/q-day-hsbc-secure-banking/ https://www.infosecurity-magazine.com/news/chemical-exfiltration-cisa-breach/ CISA has informed chemical facilities that its Chemical Security Assessment Tool (CSAT) was infiltrated by a malicious actor, and potentially exfiltrated sensitive data Fri, 21 Jun 2024 14:30:00 GMT https://www.infosecurity-magazine.com/news/chemical-exfiltration-cisa-breach/ https://www.infosecurity-magazine.com/news/lockbit-prominent-ransomware-may/ The LockBit ransomware group returned the fold to launch 176 attacks in May 2024 following a law enforcement takedown, NCC Group found Thu, 20 Jun 2024 14:30:00 GMT https://www.infosecurity-magazine.com/news/lockbit-prominent-ransomware-may/ https://www.infosecurity-magazine.com/news/cyber-insurance-claims-record/ Insurance firm Marsh received over 1800 cyber claim reports from clients in the US and Canada in 2023, higher than any other year Thu, 13 Jun 2024 11:30:00 GMT https://www.infosecurity-magazine.com/news/cyber-insurance-claims-record/ https://www.infosecurity-magazine.com/news/ukraine-police-identify-lockbit/ Ukrainian police appear to have arrested a cryptor specialist with links to major ransomware groups Thu, 13 Jun 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/ukraine-police-identify-lockbit/ https://www.infosecurity-magazine.com/news/ransomware-transformed-new-groups/ Significant changes to the ransomware ecosystem were discussed at Infosecurity Europe 2024, with new groups changing the rules of the game Thu, 06 Jun 2024 17:35:00 GMT https://www.infosecurity-magazine.com/news/ransomware-transformed-new-groups/ https://www.infosecurity-magazine.com/news/check-point-urges-vpn-configuration/ These attacks did not exploit a vulnerability but instead leveraged weaker authentication methods Tue, 28 May 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/check-point-urges-vpn-configuration/ https://www.infosecurity-magazine.com/news/employees-social-security-nissan/ Car manufacturer Nissan revealed that over 53,000 of its North America employees had their social security numbers accessed by a ransomware attacker Thu, 16 May 2024 15:00:00 GMT https://www.infosecurity-magazine.com/news/employees-social-security-nissan/ https://www.infosecurity-magazine.com/news/santander-customer-data-compromised/ Santander has warned that customer and employee data has been breached following unauthorized access to a database held by a third-party provider Wed, 15 May 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news/santander-customer-data-compromised/ https://www.infosecurity-magazine.com/news/black-basta-ransomware-victim/ Affiliates of prolific Black Basta ransomware group have breached over 500 global organizations Mon, 13 May 2024 10:30:00 GMT https://www.infosecurity-magazine.com/news/black-basta-ransomware-victim/ https://www.infosecurity-magazine.com/news/ransomware-strikes-wichita-systems/ Online payment systems, such as those for water bills and court citations, are still offline Tue, 07 May 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/ransomware-strikes-wichita-systems/ https://www.infosecurity-magazine.com/news/revil-ransomware-affiliate/ A US court has sentenced a Ukrainian national to 13 years and seven months in prison for his role in over 2500 ransomware attacks using the REvil strain Thu, 02 May 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news/revil-ransomware-affiliate/ https://www.infosecurity-magazine.com/news/lockbit-black-basta-play/ The data from ReliaQuest also suggests LockBit faced a significant setback due to law enforcement action Wed, 01 May 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/lockbit-black-basta-play/ https://www.infosecurity-magazine.com/news/ransomware-attacks-trigger-lawsuit/ Comparitech found that 18% of ransomware incidents in the US led to a lawsuit in 2023, with 59% of completed lawsuits since 2018 proving successful Wed, 01 May 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-attacks-trigger-lawsuit/ https://www.infosecurity-magazine.com/news/ransom-payments-surge-500/ Sophos found that the average ransom payment was $2m in 2023, with 63% of ransom demands $1m or more Tue, 30 Apr 2024 12:40:00 GMT https://www.infosecurity-magazine.com/news/ransom-payments-surge-500/ https://www.infosecurity-magazine.com/opinions/banks-quantum-security-seriously/ Andersen Cheng says banks are acutely vulnerable to the threat posed by quantum computers Wed, 24 Apr 2024 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/banks-quantum-security-seriously/ https://www.infosecurity-magazine.com/news/e2e-encryption-sparks-concerns-eu/ The call comes amid the rollout of end-to-end encryption on Meta’s Messenger platform Tue, 23 Apr 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/e2e-encryption-sparks-concerns-eu/ https://www.infosecurity-magazine.com/news/akira-ransomware-42-million/ A joint advisory from Europol and US and Dutch government agencies estimated that Akira made around $42m in ransomware proceeds from March 2023 to January 2024 Fri, 19 Apr 2024 11:17:00 GMT https://www.infosecurity-magazine.com/news/akira-ransomware-42-million/ https://www.infosecurity-magazine.com/news/microsoft-security-failures/ A report has highlighted multiple security failings by Microsoft that allowed Chinese threat actors to access US government officials’ email accounts in the Summer of 2023 Wed, 03 Apr 2024 17:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-security-failures/ https://www.infosecurity-magazine.com/opinions/learning-heartbleed-quantum-proof/ Kevin Bocek says we must learn from the Heartbleed vulnerability crisis 10 years ago to prepare for the threat posed by quantum to current encryption methods Mon, 01 Apr 2024 14:00:00 GMT https://www.infosecurity-magazine.com/opinions/learning-heartbleed-quantum-proof/ https://www.infosecurity-magazine.com/news/us-investigate-healthcare/ The US government will investigate whether protected healthcare information was breached in the Change Healthcare ransomware attack, and if the firm complied with HIPAA rules Thu, 14 Mar 2024 14:45:00 GMT https://www.infosecurity-magazine.com/news/us-investigate-healthcare/ https://www.infosecurity-magazine.com/news/cloud-attack-targets-crypto-cdn/ Sysdig said the rise of the Meson Network in blockchain signals a new frontier for attackers Tue, 12 Mar 2024 16:15:00 GMT https://www.infosecurity-magazine.com/news/cloud-attack-targets-crypto-cdn/ https://www.infosecurity-magazine.com/news/victims-47m-crypto-phishing-scams-1/ Some 57,000 victims lost $47m in phishing scams targeting their cryptocurrency last month Tue, 12 Mar 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/victims-47m-crypto-phishing-scams-1/ https://www.infosecurity-magazine.com/news/third-party-mfa-british-library/ A British Library report found the most likely source of the incident was the compromise of third-party account credentials and no MFA was in place to stop the attackers Mon, 11 Mar 2024 12:45:00 GMT https://www.infosecurity-magazine.com/news/third-party-mfa-british-library/ https://www.infosecurity-magazine.com/news/unitedhealth-restore-change/ UnitedHealth said it expects Change Healthcare’s key systems to be restored by March 18, amid reports it paid a $22m ransom to BlackCat Fri, 08 Mar 2024 11:15:00 GMT https://www.infosecurity-magazine.com/news/unitedhealth-restore-change/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup/ Notable M&A cybersecurity news in February 2024 included SentinelOne completing its purchase of PingSafe, while ZeroFox is set to be sold to a private equity firm Mon, 04 Mar 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup/ https://www.infosecurity-magazine.com/news/cloudflare-breach-stolen-okta/ Cloudflare revealed suspected nation-state attackers compromised its systems and accessed source code using credentials stolen in the Okta breach Fri, 02 Feb 2024 11:15:00 GMT https://www.infosecurity-magazine.com/news/cloudflare-breach-stolen-okta/ https://www.infosecurity-magazine.com/news/dark-web-floods-operator/ Resecurity discovered over 1572 compromised customers from RIPE, APNIC, AFRINIC and LACNIC Tue, 30 Jan 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/dark-web-floods-operator/ https://www.infosecurity-magazine.com/news/alpha-ransomware-launches-data/ Netenrich analyzed the ransom note pattern saying the group is refining their messages to victims Tue, 30 Jan 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/alpha-ransomware-launches-data/ https://www.infosecurity-magazine.com/news/phobos-ransomware-new-faust-variant/ FortiGuard said the variant was found in an Office document using a VBA script Mon, 29 Jan 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/phobos-ransomware-new-faust-variant/ https://www.infosecurity-magazine.com/news/southern-water-data-breach-black/ Southern Water confirmed a data breach had occurred after the Black Basta ransomware group purportedly published personal information held by the firm Thu, 25 Jan 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news/southern-water-data-breach-black/ https://www.infosecurity-magazine.com/news/npm-packages-target-github-ssh-keys/ ReversingLabs noted a 1300% surge in harmful open-source packages between 2020 and 2023 Tue, 23 Jan 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/npm-packages-target-github-ssh-keys/ https://www.infosecurity-magazine.com/news/github-rotates-credentials-patches/ GitHub urges customers to apply a new patch and take action if impacted by credential rotation Wed, 17 Jan 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/github-rotates-credentials-patches/ https://www.infosecurity-magazine.com/news/decryption-key-babuk-ransomware/ Cisco Talos announced that a decryption key for the Babuk Tortilla ransomware variant is available for victims to download Tue, 09 Jan 2024 12:30:00 GMT https://www.infosecurity-magazine.com/news/decryption-key-babuk-ransomware/ https://www.infosecurity-magazine.com/opinions/shift-credentials-passwordless/ Raul Zeppenfeldt Molina says that the password breach incidents in 2023 show we must adopt a modern approach to authentication Mon, 08 Jan 2024 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/shift-credentials-passwordless/ https://www.infosecurity-magazine.com/news/north-korean-hackers-stole-crypto/ North Korean hackers remain effective in stealing cryptocurrency despite growing international law enforcement action Mon, 08 Jan 2024 11:00:00 GMT https://www.infosecurity-magazine.com/news/north-korean-hackers-stole-crypto/ https://www.infosecurity-magazine.com/news/lastpass-enforces-12-character/ Password manager provider LastPass has started implementing stricter password measures for its customers Thu, 04 Jan 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/lastpass-enforces-12-character/ https://www.infosecurity-magazine.com/news/black-basta-ransomware-decryptor/ Researchers at SRLabs have revealed a new suite of decryption tools for Black Basta ransomware Tue, 02 Jan 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/black-basta-ransomware-decryptor/ https://www.infosecurity-magazine.com/news-features/pave-quantum-secure-encryption/ It is vital organizations act now to prepare their systems for migration to post-quantum cryptography Wed, 27 Dec 2023 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/pave-quantum-secure-encryption/ https://www.infosecurity-magazine.com/news-features/5-wackiest-cybersecurity-stories/ Infosecurity Magazine sets out the most unusual and bizarre cybersecurity stories it has seen this year Tue, 26 Dec 2023 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/5-wackiest-cybersecurity-stories/ https://www.infosecurity-magazine.com/news/blackcat-ransomware-defies-law/ BlackCat ransomware resurfaces after FBI takedown attempt, defying law enforcement takedown Wed, 20 Dec 2023 13:00:00 GMT https://www.infosecurity-magazine.com/news/blackcat-ransomware-defies-law/ https://www.infosecurity-magazine.com/news/law-enforcement-blackcat-decryption/ The FBI has developed a decryption key it believes will save over 500 victims around $68m Tue, 19 Dec 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/law-enforcement-blackcat-decryption/ https://www.infosecurity-magazine.com/news/us-australia-ransomware-threat/ A joint advisory by US and Australian government agencies urges organizations to protect themselves against Play group’s tactics Tue, 19 Dec 2023 14:00:00 GMT https://www.infosecurity-magazine.com/news/us-australia-ransomware-threat/ https://www.infosecurity-magazine.com/news/uk-risk-catastrophic-ransomware/ A UK parliament report found that large swathes of critical national infrastructure are vulnerable to ransomware Wed, 13 Dec 2023 12:20:00 GMT https://www.infosecurity-magazine.com/news/uk-risk-catastrophic-ransomware/ https://www.infosecurity-magazine.com/news/black-friday-security-gaps-e/ Researchers warn that millions of consumers’ PII could be at risk due to exploitable vulnerabilities and a lack of basic security protocols in e-commerce web apps Tue, 21 Nov 2023 14:00:00 GMT https://www.infosecurity-magazine.com/news/black-friday-security-gaps-e/ https://www.infosecurity-magazine.com/opinions/enterprises-governments-prepare-q/ Quantum computers are here and in use - governments and enterprises must protect themselves against the risks Fri, 10 Nov 2023 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/enterprises-governments-prepare-q/ https://www.infosecurity-magazine.com/news/icbc-and-allen-overy-hit-by/ Multinationals believed to have been targeted by LockBit Fri, 10 Nov 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/icbc-and-allen-overy-hit-by/ https://www.infosecurity-magazine.com/news/fbi-ransomware-initial-access/ The FBI notification advises how to protect against the growing targeting of third-party vendors and services Wed, 08 Nov 2023 15:30:00 GMT https://www.infosecurity-magazine.com/news/fbi-ransomware-initial-access/ https://www.infosecurity-magazine.com/news/eu-eidas-face-backlash-mozilla/ A proposed amendment of eIDAS could “weaken the security of the Internet as a whole”, said a letter signed by over 500 individuals and organizations Wed, 08 Nov 2023 12:00:00 GMT https://www.infosecurity-magazine.com/news/eu-eidas-face-backlash-mozilla/ https://www.infosecurity-magazine.com/news/threequarters-retail-ransomware/ Sophos claims more victims are taking longer to recover Wed, 08 Nov 2023 10:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-retail-ransomware/ https://www.infosecurity-magazine.com/news/half-users-kubernetescontainer/ Many say it led to a subsequent data breach Mon, 06 Nov 2023 13:00:00 GMT https://www.infosecurity-magazine.com/news/half-users-kubernetescontainer/ https://www.infosecurity-magazine.com/news/security-agency-postquantum/ NCSC wants to ease transition to quantum safety Mon, 06 Nov 2023 10:00:00 GMT https://www.infosecurity-magazine.com/news/security-agency-postquantum/ https://www.infosecurity-magazine.com/news/uk-banks-quantum-imperil-entire/ Industry wants government to set up a new taskforce Thu, 02 Nov 2023 10:30:00 GMT https://www.infosecurity-magazine.com/news/uk-banks-quantum-imperil-entire/ https://www.infosecurity-magazine.com/news/data-encrypted-ransomware/ Sophos researchers said the increased success rates was partly due to threat actors speeding up their attack timelines Wed, 01 Nov 2023 16:00:00 GMT https://www.infosecurity-magazine.com/news/data-encrypted-ransomware/ https://www.infosecurity-magazine.com/news/lazarus-group-targets-legitimate/ Kaspersky unveiled the cyber campaign at the Security Analyst Summit Mon, 30 Oct 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/lazarus-group-targets-legitimate/ https://www.infosecurity-magazine.com/news/europol-police-start-planning/ New report highlights challenges and opportunities ahead Thu, 26 Oct 2023 10:35:00 GMT https://www.infosecurity-magazine.com/news/europol-police-start-planning/ https://www.infosecurity-magazine.com/opinions/digital-trust-rapidly-evolving/ Linda Betz discusses actions the financial sector must take to prepare for emerging cyber threats Wed, 25 Oct 2023 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/digital-trust-rapidly-evolving/ https://www.infosecurity-magazine.com/news/hacker-ghostsec-unveils-new/ The ex-hacktivist group is now fully involved with the ransomware-as-a-service market Thu, 19 Oct 2023 10:30:00 GMT https://www.infosecurity-magazine.com/news/hacker-ghostsec-unveils-new/ https://www.infosecurity-magazine.com/news-features/cybermonth-mfa-enough-protect/ One of CISA’s Cybersecurity Awareness Month mottos is “Turn on multi-factor authentication”. Is this enough to prevent phishing attacks? Tue, 17 Oct 2023 13:45:00 GMT https://www.infosecurity-magazine.com/news-features/cybermonth-mfa-enough-protect/ https://www.infosecurity-magazine.com/news/rising-ai-phishing-drives-demand/ FIDO Alliance’s third Online Authentication Barometer showed that AI-powered phishing is slowly prompting users to switch passwords for multi-factor authentication methods Tue, 17 Oct 2023 13:00:00 GMT https://www.infosecurity-magazine.com/news/rising-ai-phishing-drives-demand/ https://www.infosecurity-magazine.com/news/signal-disputes-alleged-zero-day/ Reports emerged over the weekend regarding a zero-day exploit in the messaging app Mon, 16 Oct 2023 14:30:00 GMT https://www.infosecurity-magazine.com/news/signal-disputes-alleged-zero-day/ https://www.infosecurity-magazine.com/interviews/cisa-plan-awareness-campaign/ Infosecurity spoke to two CISA experts about the evolving approach to the annual Cybersecurity Awareness Month campaign Mon, 16 Oct 2023 14:00:00 GMT https://www.infosecurity-magazine.com/interviews/cisa-plan-awareness-campaign/ https://www.infosecurity-magazine.com/news/healthcare-warned-ransomware/ The US government highlighted the operations of the NoEscape group, which is believed to be a rebrand of Russian threat actor Avaddon Mon, 16 Oct 2023 12:30:00 GMT https://www.infosecurity-magazine.com/news/healthcare-warned-ransomware/ https://www.infosecurity-magazine.com/news/mgm-resorts-dollar100m-costs/ In an SEC 8-K filing published last Thursday, the company cited operational disruptions Mon, 09 Oct 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/mgm-resorts-dollar100m-costs/ https://www.infosecurity-magazine.com/blogs/need-to-know-ssl-certificates-for/ IT professionals are increasingly responsible for website security, which includes managing SSL certificates Thu, 05 Oct 2023 15:30:00 GMT https://www.infosecurity-magazine.com/blogs/need-to-know-ssl-certificates-for/ https://www.infosecurity-magazine.com/news/fbi-warns-dual-ransomware-data/ Hackers are deploying different ransomware variants, including AvosLocker and Hive, among others Mon, 02 Oct 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/fbi-warns-dual-ransomware-data/ https://www.infosecurity-magazine.com/news/android-banking-trojan-zanubis/ The Trojan utilizes the Obfuscapk obfuscator for Android APK files, Kaspersky explained Thu, 28 Sep 2023 16:30:00 GMT https://www.infosecurity-magazine.com/news/android-banking-trojan-zanubis/ https://www.infosecurity-magazine.com/news/uk-logistics-close-after/ Kettering-based KNP Logistics Group was hit in June Thu, 28 Sep 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-logistics-close-after/ https://www.infosecurity-magazine.com/news/ransomedvc-group-hits-ntt-docomo/ According to Resecurity, Ransomed.vc is demanding a ransom of over $1m from NTT Docomo Wed, 27 Sep 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/ransomedvc-group-hits-ntt-docomo/ https://www.infosecurity-magazine.com/news/tech-giants-postquantum/ IBM Quantum, Microsoft, MITRE and others join forces Tue, 26 Sep 2023 10:30:00 GMT https://www.infosecurity-magazine.com/news/tech-giants-postquantum/ https://www.infosecurity-magazine.com/news/uk-security-agency-new-crypto/ NCSC hopes research will inform future standards Fri, 22 Sep 2023 10:00:00 GMT https://www.infosecurity-magazine.com/news/uk-security-agency-new-crypto/ https://www.infosecurity-magazine.com/news/ransomware-victims-surge-gangs/ The Trend Micro report observed that small organizations are being increasingly targeted by ransomware gangs, including LockBit and BlackCat Thu, 21 Sep 2023 15:15:00 GMT https://www.infosecurity-magazine.com/news/ransomware-victims-surge-gangs/ https://www.infosecurity-magazine.com/news/windows-targeted-multi-stage/ According to Fortinet security expert Cara Lin, the attack begins with a phishing email Tue, 12 Sep 2023 16:30:00 GMT https://www.infosecurity-magazine.com/news/windows-targeted-multi-stage/ https://www.infosecurity-magazine.com/news/cuba-ransomware-undetectable/ Kaspersky found suspicious files in December 2022 which activated the komar65 library known as BUGHATCH Mon, 11 Sep 2023 17:30:00 GMT https://www.infosecurity-magazine.com/news/cuba-ransomware-undetectable/ https://www.infosecurity-magazine.com/opinions/how-prepare-nis2/ Tom Venables sets out the areas organizations must focus on to ensure they are compliant with the NIS2 directive ahead of October 2024 Fri, 08 Sep 2023 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/how-prepare-nis2/ https://www.infosecurity-magazine.com/news/zero-day-flaw-exposes-atlas-vpn/ The exploit code, shared by a researcher on Reddit, demonstrates the issue Thu, 07 Sep 2023 16:30:00 GMT https://www.infosecurity-magazine.com/news/zero-day-flaw-exposes-atlas-vpn/ https://www.infosecurity-magazine.com/news/chinese-hacker-steals-microsoft/ The threat actor used the stolen key to breach 25 organizations, including US government agencies Thu, 07 Sep 2023 13:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-hacker-steals-microsoft/ https://www.infosecurity-magazine.com/news/uk-government-backs-down/ Statement to Lords heralds delay to on-device message scanning Thu, 07 Sep 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-government-backs-down/ https://www.infosecurity-magazine.com/news/lockbit-3-variants-surge-post/ Kaspersky explained that LockBit 3.0, also known as LockBit Black, first emerged in June 2022 Tue, 29 Aug 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/lockbit-3-variants-surge-post/ https://www.infosecurity-magazine.com/news/nist-post-quantum-cryptography/ The draft standards are expected to become the global benchmark for quantum-resistant cybersecurity across the world in 2024 Thu, 24 Aug 2023 15:00:00 GMT https://www.infosecurity-magazine.com/news/nist-post-quantum-cryptography/ https://www.infosecurity-magazine.com/opinions/securely-manage-data-vulnerable/ Jessica Perkins sets out six best practices to safeguard the data of vulnerable groups Mon, 21 Aug 2023 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/securely-manage-data-vulnerable/ https://www.infosecurity-magazine.com/news/study-reveals-web-apps/ Latest CyCognito report exposes 74% PII vulnerability, prompting urgent data protection Fri, 18 Aug 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/study-reveals-web-apps/ https://www.infosecurity-magazine.com/opinions/time-kick-password-habit/ The FIDO Alliance's Andrew Shikiar argues that we are at the tipping point of passkey adoption Fri, 18 Aug 2023 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/time-kick-password-habit/ https://www.infosecurity-magazine.com/news-features/black-hat-usa-unwrapped-2023/ Infosecurity reviews five highlights from Black Hat USA 2023 that inform us on the current cybersecurity trends Fri, 11 Aug 2023 14:30:00 GMT https://www.infosecurity-magazine.com/news-features/black-hat-usa-unwrapped-2023/ https://www.infosecurity-magazine.com/news/uk-government-slammed-encryption/ Technology secretary branded “delusion” Fri, 11 Aug 2023 10:30:00 GMT https://www.infosecurity-magazine.com/news/uk-government-slammed-encryption/ https://www.infosecurity-magazine.com/news/zero-day-vulnerabilities-crypto/ A number of popular crypto wallet providers have been affected by the vulnerabilities, including Coinbase WaaS, Zengo and Binance Wed, 09 Aug 2023 22:16:00 GMT https://www.infosecurity-magazine.com/news/zero-day-vulnerabilities-crypto/ https://www.infosecurity-magazine.com/news/vietnamese-ransomware-mimics/ Cisco Talos said what sets this operation apart is the novel approach to delivering ransom notes Tue, 08 Aug 2023 16:00:00 GMT https://www.infosecurity-magazine.com/news/vietnamese-ransomware-mimics/ https://www.infosecurity-magazine.com/news/black-hat-identity-most-breaches/ Pushed to the edges by efficient EDRs, threat actors are forced to use living-off-the-land techniques Tue, 08 Aug 2023 14:00:00 GMT https://www.infosecurity-magazine.com/news/black-hat-identity-most-breaches/