Infosecurity News
IoT Vulnerabilities Skyrocket, Becoming Key Entry Point for Attackers
A new Forescout report found that IoT devices containing vulnerabilities surged 136% compared to a year ago, becoming a key focus for attackers
Threat Actor Claims to Leak 270GB of New York Times Data
An anonymous 4Chan user is claiming to have shared a trove of source code stolen from the New York Times
NHS Appeals For Blood and Volunteers After Cyber-Attack
London hospitals continue to suffer the after-effects of a major ransomware attack last week
EmailGPT Exposed to Prompt Injection Attacks
The flaw enables attackers to gain control over the AI service by submitting harmful prompts
#Infosec2024: Cyber Resilience Means Being Willing to Learn From a Crisis
Experts advised that crisis management and recovery is as much about communications and testing as it is about technical defense measures
Security Flaws Found in Popular WooCommerce Plugin
Despite reported attempts from Patchstack to contact the vendor, no response has been received
#Infosec2024: Collaboration is Key to an Effective Security Culture
Organizations need a culture that goes beyond reporting incidents, where the business wants to collaborate with the security team
#Infosec2024: CISOs Need to Move Beyond Passwords to Keep Up With Security Threats
Experts at Infosecurity Europe 2024 advised organizations to move away from passwords for greater security
#Infosec2024: Ransomware Ecosystem Transformed, New Groups “Changing the Rules”
Significant changes to the ransomware ecosystem were discussed at Infosecurity Europe 2024, with new groups changing the rules of the game
#Infosec2024: AI Red Teaming Provider Mindgard Named UK's Most Innovative Cyber SME
Mingard provides a continuous AI red teaming and vulnerability remediation platform
#Infosec2024: Experts Share How CISOs Can Manage Change as the Only Constant
CISOs explain how to build high-performing teams, communicate with the business and manage security amid constant volatility
#Infosec2024: Third of Web Traffic Comes from Malicious Bots, Veracity Says
Malicious bots keep growing, now accounting for over 30% of the global web traffic, the CEO of Veracity Trust Network said during Infosecurity Europe
#Infosec2024: How to Change Security Behaviors Beyond Awareness Training
Experts at Infosecurity Europe 2024 advised on how to ensure meaningful behavioral change in employees, moving beyond awareness training
#Infosec2024: Mandatory Ransomware Reporting Would Be Positive Move, Say Experts
Police, insurance and private sector security experts argue UK government proposals on ransomware payments could benefit the community
#Infosec2024: Supply Chains Remain Hidden Threat to Business
Supply chains pose a significant but often invisible risk to organizations across all sectors, experts warn
#Infosec2024: Small Firms Need to Work Smarter to Stretch Security Budgets
Lack of budgets and resources need not be a barrier to improving security for SMEs, according to industry experts
Chinese State-Sponsored Operation “Crimson Palace” Revealed
Sophos said the campaign aimed to maintain prolonged network access for espionage purposes
FBI Warns of Rise in Work-From-Home Scams
One key tactic these scammers employ is a convoluted payment structure to access additional earnings or unlock access to work
#Infosec2024 Spyware: A Threat to Civil Society and a Threat to Business
Commercial spyware poses a threat to enterprises, and CISOs need to consider its impact and how to mitigate it
#Infosec2024: 104 EU Laws Have Different Definitions of Cybersecurity
Top lawyer outlines how firms can better manage legal risk amid complex regulatory landscape