Infosecurity News

  1. EU Elections: Pro-Russian Propaganda Exploits Meta's Failure to Moderate Political Ads

    This year’s EU elections will be a stress test to see whether the newly adopted Digital Services Act can efficiently mitigate misinformation threats

  2. Ivanti Patches Two Critical Avalanche Flaws in Major Update

    Ivanti has fixed two critical vulnerabilities in its Avalanche MDM product which could lead to remote code execution

  3. Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites

    Cifas reveals 14% rise in dishonest employees, driven mainly by financial necessity last year

  4. Russian Sandworm Group Using Novel Backdoor to Target Ukraine and Allies

    WithSecure researchers said it is likely Russian state group Sandworm has added a novel backdoor dubbed ‘Kapeka’ to its arsenal

  5. Report Suggests 93% of Breaches Lead to Downtime and Data Loss

    According to Pentera, firms are allocating 13% of their total IT security budgets to pentesting

  6. LeakyCLI Flaw Exposes AWS and Google Cloud Credentials

    Orca Security said the issue mirrors a previously identified vulnerability in Azure CLI

  7. Cybersecurity Pros Urge US Congress to Help NIST Restore NVD Operation

    An open letter signed by 50 cybersecurity practitioners requires the US Congress to support NIST in restoring operations at the National Vulnerability Database

  8. Microsoft Most Impersonated Brand in Phishing Scams

    New Check Point data found Microsoft was impersonated in 38% of all brand phishing attacks in Q1 2024, up from 33% in Q4 2024

  9. Open Source Leaders Warn of XZ Utils-Like Takeover Attempts

    Two open source organizations have revealed attempts to socially engineer project takeovers

  10. Bad Bots Drive 10% Annual Surge in Account Takeover Attacks

    Malicious bots now represent a third of all internet traffic, says Imperva

  11. Russia and Ukraine Top Inaugural World Cybercrime Index

    An international team of researchers published the first-ever index ranking countries by cybercrime threat level

  12. New LockBit Variant Exploits Self-Spreading Features

    Kaspersky also uncovered the use of the SessionGopher script to extract saved passwords

What’s hot on Infosecurity Magazine?