News

Infosecurity Magazine5h
PayU Plugin Flaw Allows Account Takeover on 5000 WordPress Sites
A critical vulnerability in the PayU CommercePro plugin has put thousands of WordPress sites at risk by allowing ...
Infosecurity Magazine5h
New Wiper Malware Targets Ukrainian Infrastructure
A new wiper malware known as PathWiper has been used in a destructive cyber-attack against a Ukrainian critical ...
Infosecurity Magazine12h
FBI Warns Smart Home Users of Badbox 2.0 Botnet Threat
“The Badbox 2.0 botnet consists of millions of infected devices and maintains numerous backdoors to proxy services that ...
Infosecurity Magazine9h
Trump Administration Revises Cybersecurity Rules, Replaces Biden and Obama Orders
A new Trump Executive Order limits the use of cybersecurity-related sanctions only against foreign malicious actors ...
Infosecurity Magazine11h
US Tries to Claw Back $7m Taken by North Korean IT Workers
The $7.7m in funds were originally seized by the government in 2023 in a case involving Sim Hyon Sop – a staffer at the North ...
Infosecurity Magazine11h
Predicting Primes: Is This Discovery a Problem for Encryption?
New research claims prime numbers can now be predicted, potentially weakening encryption methods like RSA. While this poses ...
Infosecurity Magazine3d
Scattered Spider Uses Tech Vendor Impersonation and Phishing Kits to Target Helpdesks
The ransomware group combines IT vendor impersonation and phishing frameworks like Evilginx to breach its targets ...
Infosecurity Magazine5d
Phishing Campaign Uses Fake Booking.com Emails to Deliver Malware
A phishing campaign spoofing Booking.com has been observed targeting hospitality sector, using ClickFix to install malware ...
Infosecurity Magazine6d
Fake Docusign Pages Deliver Multi-Stage NetSupport RAT Malware
A new malware campaign using fake DocuSign verification pages to deploy the NetSupport Remote Access Trojan (RAT) has been ...
Infosecurity Magazine3dOpinion
DOJ Cross-Border Data Transfers Rule: Key Implications for Companies Operating in the US
Legal experts dissect how affected entities should respond to the DoJ's rule prohibiting data transactions with specific ...
Infosecurity-magazine.com6d
#Infosec2025: Half of Firms Suffer Two Supply Chain Incidents in Past Year
Nearly half (46%) of organizations have experienced at least two cybersecurity incidents in their supply chain over the past year, according to new research by Risk Ledger presented at Infosecurity ...
Infosecurity-magazine.com7d
Sophisticated Malware Campaign Targets Windows and Linux Systems
A newly uncovered malware campaign targeting both Windows and Linux systems has revealed advanced evasion and credential theft techniques, according to the Sysdig Threat Research Team (TRT). The ...