NIST Scraps Passwords Complexity and Mandatory Changes
Sep 26, 2024 · Using a mixture of character types in your passwords and regularly changing passwords are officially no longer best password management practices according to new guidelines published by the US National Institute of Standards and Technology (NIST).
Information Security and IT Security News - Infosecurity Magazine
Dec 20, 2024 · Ransomware Attack Exposes Data of 5.6 Million Ascension Patients 23 Dec 2024. US healthcare giant Ascension revealed that 5.6 million individuals have had their personal, medical and financial information breached in a ransomware attack
Apple Issues Emergency Security Update for Actively Exploited ...
Nov 20, 2024 · Apple has urged customers to apply emergency security updates, which fixes two actively exploited vulnerabilities on its devices. The fixes are included in the iOS 18.1.1 and iPadOS 18.1.1, Safari 18.1.1, visionOS 2.1.1 and macOS Sequoia 15.1.1 updates, available across a range of Apple devices, including iPhones, iPads, macOS and Apple Vision Pro.
FIN7 Gang Hides Malware in AI “Deepnude” Sites
Oct 3, 2024 · An infamous financially motivated threat group is luring victims to a network of malware-baited sites, promising downloads of deepfake tools, according to a new report from Silent Push.
Dark Web Market Revenues Rebound but Sector Fragments
Feb 29, 2024 · Administrators and sellers on dark web marketplaces had a better 2023 than the previous year, pulling in an estimated $1.7bn in cryptocurrency-based revenues, according to new Chainalysis data.
Russia's SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Oct 11, 2024 · Hackers at Russia’s Foreign Intelligence Service (SVR) have been spying on US, European and global entities for years to collect intelligence and enable future cyber operations, according to US and UK intelligence agencies.
Fortinet Confirms Exploitation of Critical FortiManager Zero-Day
Oct 24, 2024 · Fortinet has confirmed that a critical zero-day vulnerability affecting its FortiManager network management solution is being exploited in the wild.. In an October 23 security advisory, the cybersecurity provider shared more information on CVE-2024-47575, a vulnerability allowing threat actors to use a compromised FortiManager device to execute arbitrary code or commands against other ...
Over Six Million Hit by Ransomware Breach at Infosys McCamish …
Jul 1, 2024 · A cyber-attack on outsourcer Infosys McCamish Systems last year impacted more than six million customers, according to a new filing with data protection authorities.
White House Issues AI National Security Memo - Infosecurity …
Oct 24, 2024 · The White House has issued a National Security Memorandum (NSM) on AI, setting out key actions for the federal government to advance the safe, secure and trustworthy development of the technology in the interests on US national security.
Microsoft 365 Copilot Vulnerability Exposes User Data Risks
Aug 27, 2024 · A vulnerability in Microsoft 365 Copilot that allowed attackers to steal users’ sensitive information has been disclosed by a cybersecurity researcher.