キタきつね

@kitafox.bsky.social

11 hours ago

New 'Storm' Infostealer Remotely Decrypts Stolen Credentials This modern infostealer adopted server-side decryption of stolen credentials to bypass security controls

新たな情報窃盗マルウェア「ストーム」が盗まれた認証情報を遠隔で復号化

New 'Storm' Infostealer Remotely Decrypts Stolen Credentials #InfosecurityMagazine (Arp 2)

www.infosecurity-magazine.com/news/storm-i...

キタきつね

@kitafox.bsky.social

12 hours ago

Researchers Observe Sub-One-Hour Ransomware Attacks Halcyon says Akira is now capable of carrying out an entire ransomware attack in less than an hour

研究者らが1時間未満で完了するランサムウェア攻撃を観測

Researchers Observe Sub-One-Hour Ransomware Attacks #InfosecurityMagazine (Apr 2)

www.infosecurity-magazine.com/news/researc...

キタきつね

@kitafox.bsky.social

12 hours ago

Most CNI Firms Face Up to £5m in Downtime from OT Attacks E2e-assure says 80% of critical infrastructure providers could face millions in downtime from cyber-attacks

重要インフラ企業の多くは、OT攻撃によるダウンタイムで最大500万ポンドの損失に直面する

Most CNI Firms Face Up to £5m in Downtime from OT Attacks #InfosecurityMagazine (Apr 2)

www.infosecurity-magazine.com/news/most-cn...

キタきつね

@kitafox.bsky.social

1 day ago

NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal The UK’s cybersecurity agency offered advice to “high-risk’ individuals” on how to protect against social engineering and cyber-attacks

NCSCがハッカーによるWhatsAppおよびSignalアカウントへの攻撃に関するセキュリティ警告を発令

NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts #InfosecurityMagazine (Apr 2)

www.infosecurity-magazine.com/news/ncsc-al...

キタきつね

@kitafox.bsky.social

1 day ago

Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year Most of the 78% of UK manufacturers compromised last year suffered financial loss, says ESET

英国の製造業者の10社中8社が1年間にサイバー攻撃の被害に遭う

Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year #InfosecurityMagazine (Apr 1)

www.infosecurity-magazine.com/news/eight-1...

キタきつね

@kitafox.bsky.social

2 days ago

Cybercriminals Exploit Tax Season With New Phishing Tactics Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams

サイバー犯罪者たちが新たなフィッシング手口で確定申告シーズンを悪用

Cybercriminals Exploit Tax Season With New Phishing Tactics #InfosecurityMagazine (Mar 31)

www.infosecurity-magazine.com/news/tax-sea...

キタきつね

@kitafox.bsky.social

2 days ago

Employee Data Breaches Surge to Seven-Year High Analysis from law firm Nockolds suggests non-cyber incidents are driving up employee data breaches

従業員データ漏洩が7年ぶりの高水準に急増

Employee Data Breaches Surge to Seven-Year High #InfosecurityMagazine (Mar 31)

www.infosecurity-magazine.com/news/employe...

キタきつね

@kitafox.bsky.social

2 days ago

ChatGPT Security Issue Enabled Data Theft via Single Prompt OpenAI has patched vulnerability, which Check Point said was because of a DNS loophole

ChatGPTのセキュリティ問題により、単一プロンプト経由でのデータ窃盗が可能になる

ChatGPT Security Issue Enabled Data Theft via Single Prompt #InfosecurityMagazine (Mar 31)

www.infosecurity-magazine.com/news/chatgpt...

キタきつね

@kitafox.bsky.social

3 days ago

NCSC Urges Immediate Patching of F5 BIG-IP Bug The National Cyber Security Centre wants UK firms to patch CVE-2025-53521

NCSCはF5 BIG-IPのバグに対する即時パッチ適用を強く推奨

NCSC Urges Immediate Patching of F5 BIG-IP Bug #InfosecurityMagazine (Mar 31)

www.infosecurity-magazine.com/news/ncsc-ur...

キタきつね

@kitafox.bsky.social

3 days ago

DeepLoad Malware Combines ClickFix With AI-Code to Avoid Detection Researchers at ReliaQuest warn of persistent malware campaign targeting enterprise credentials

DeepLoadマルウェアはClickFixとAI生成コードを組み合わせて検出を回避する

DeepLoad Malware Combines ClickFix With AI-Generated Code to Avoid Detection #InfosecurityMagazine (Mar 30)

www.infosecurity-magazine.com/news/deeploa...

キタきつね

@kitafox.bsky.social

4 days ago

Critical Citrix NetScaler Vulnerability Exploited in the Wild Researchers from watchTowr and Defused have found evidence that attackers are actively exploiting CVE-2026-3055, a critical NetScaler vulnerability

Citrix NetScalerの重大な脆弱性が実際に悪用される

Critical Citrix NetScaler Vulnerability Exploited in the Wild #InfosecurityMagazine (Mar 30)

www.infosecurity-magazine.com/news/critica...

キタきつね

@kitafox.bsky.social

4 days ago

Google: Quantum Computing Threat to Encryption Is Closer Than Expected ‘Q-Day’ and the cybersecurity problems it brings could come as early as 2029 as Google accelerates its post-quantum cryptography migration

量子コンピューティングによる暗号化への脅威は予想以上に身近なものだと、Googleが警告

Quantum Computing Threat to Encryption Is Closer Than Expected, Warns Google #InfosecurityMagazine (Mar 27)

www.infosecurity-magazine.com/news/quantum...

キタきつね

@kitafox.bsky.social

4 days ago

AI is the Top Cyber Priority for Defenders as Criminals Exploit it PwC Annual Threat Dynamics report says AI-threats are the biggest concern of clients

PwCは、AIがサイバーセキュリティ対策の最優先事項となり、犯罪者がそれを悪用していると警告している

AI Becomes the Top Cybersecurity Priority for Defenders as Criminals Exploit It, PwC Warns #InfosecurityMagazine (Mar 26)

www.infosecurity-magazine.com/news/ai-top-...

キタきつね

@kitafox.bsky.social

4 days ago

Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code Security researchers from Georgia Tech have observed a surge in reported CVEs for which the flaw was introduced by AI-generated code

セキュリティ研究者らがAI生成コードの脆弱性について警鐘を鳴らす

Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code #InfosecurityMagazine (Mar 27)

www.infosecurity-magazine.com/news/ai-gene...

キタきつね

@kitafox.bsky.social

4 days ago

New Wave of AiTM Phishing Targets TikTok for Business Push Security has uncovered a new AiTM phishing campaign targeting TikTok for Business accounts using Google and TikTok themed login pages

TikTok for Businessを標的とした新たなAiTMフィッシング攻撃

New Wave of AiTM Phishing Targets TikTok for Business #InfosecurityMagazine (Mar 28)

www.infosecurity-magazine.com/news/phishin...

キタきつね

@kitafox.bsky.social

5 days ago

Rapid Exploitation of CVE-2026-21962 Hits Oracle WebLogic Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study

攻撃者がOracle WebLogicの重要なリモートコード実行（RCE）を急速に悪用していることが、ハニーポット調査で判明

Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds #InfosecurityMagazine (Mar 27)

www.infosecurity-magazine.com/news/critica...

キタきつね

@kitafox.bsky.social

1 week ago

Cloud Phones Linked to Rising Financial Fraud Threat Cloud Android phones fuel financial fraud, evading detection and enabling dropper accounts

クラウド電話が金融詐欺の脅威の高まりと関連している

Cloud Phones Linked to Rising Financial Fraud Threat #InfosecurityMagazine (Mar 26)

www.infosecurity-magazine.com/news/cloud-p...

キタきつね

@kitafox.bsky.social

1 week ago

Hackers Exploit Compromised Enterprise Identities at Industrial Scale SentinelOne's annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials

SentinelOneが警告：ハッカーが侵害された企業IDを大規模に悪用

Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne #InfosecurityMagazine (Mar 26)

www.infosecurity-magazine.com/news/hackers...

キタきつね

@kitafox.bsky.social

1 week ago

Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilities A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory

Citrix社、NetScalerの重大な脆弱性に対する即時パッチ適用を強く推奨

Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilities #InfosecurityMagazine (Mar 25)

www.infosecurity-magazine.com/news/citrix-...

キタきつね

@kitafox.bsky.social

1 week ago

Experts Sound Alarm Over “Prompt Poaching” Browser Extensions Expel has warned of malicious Chrome extensions stealing users’ AI conversations

専門家が「ユーザー引き抜き」を目的としたブラウザ拡張機能に警鐘を鳴らす

Experts Sound Alarm Over “Prompt Poaching” Browser Extensions #InfosecurityMagazine (Mar 25)

www.infosecurity-magazine.com/news/experts...

キタきつね

@kitafox.bsky.social

1 week ago

Enterprise Cybersecurity Software Fails 20% of the Time, Warns Report Poor patch management, increasingly complex IT environments and continued use of obsolete software puts organizations at risk from cyber threats, says the Absolute Security 2026 Resilience Risk Index

企業向けサイバーセキュリティソフトウェアは20％の確率で失敗すると、Absolute Security社が警告。

Enterprise Cybersecurity Software Fails 20% of the Time, Warns Absolute Security #InfosecurityMagazine (Mar 24)

www.infosecurity-magazine.com/news/cyberse...

キタきつね

@kitafox.bsky.social

1 week ago

RSAC: UK NCSC Head Urges Industry to Develop Vibe Coding Safeguards The head of the UK’s NCSC is calling the cybersecurity industry to “seize the disruptive vibe coding opportunity” to make software more secure

RSAカンファレンス：英国NCSC責任者が業界に対し、Vibeコーディングの安全対策を開発するよう促す

RSA Conference: UK NCSC Head Urges Industry to Develop Vibe Coding Safeguards #InfosecurityMagazine (Mar 25)

www.infosecurity-magazine.com/news/rsac-uk...

キタきつね

@kitafox.bsky.social

1 week ago

High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks High tech was the most frequently targeted industry in Mandiant investigations in 2025, overtaking financial services which led in 2023 and 2024

マンディアントの報告によると、ハイテク分野が金融業界を抜いてサイバー攻撃の標的トップに

High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks, Mandiant Reports #InfosecurityMagazine (Mar 24)

www.infosecurity-magazine.com/news/high-te...

キタきつね

@kitafox.bsky.social

1 week ago

New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware Ghost npm campaign fakes install logs to steal sudo passwords and drop RATs that loot crypto and data

新しいnpm「ゴーストキャンペーン」は、偽のインストールログを使用してマルウェアを隠蔽する

New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware #InfosecurityMagazine (Mar 24)

www.infosecurity-magazine.com/news/npm-gho...

キタきつね

@kitafox.bsky.social

1 week ago

Cybersecurity Staff Don’t Know How Fast They Could Cyber-Attacks on AI ISACA survey found that confusion over responsibility and lack of understanding around AI cyber-attacks makes containing them difficult

ほとんどのサイバーセキュリティ担当者は、AIシステムへのサイバー攻撃をどれだけ迅速に阻止できるかを知らない

Most Cybersecurity Staff Don’t Know How Fast They Could Stop a Cyber-Attack on AI Systems #InfosecurityMagazine (Mar 24)

www.infosecurity-magazine.com/news/cyber-s...

キタきつね

@kitafox.bsky.social

1 week ago

UK: Regulation Drives Cyber Spending for Critical Infrastructure Orgs 35% of security leaders working in the UK’s critical infrastructure said regulatory requirements are the primary influence on their security programs

英国：規制が重要インフラ組織のサイバー支出を促進

UK: Regulation Drives Cyber Spending for Critical Infrastructure Orgs #InfosecurityMagazine (Mar 19)

www.infosecurity-magazine.com/news/uk-regu...

キタきつね

@kitafox.bsky.social

1 week ago

FCA Updates Cyber Incident and Third-Party Reporting Rules The UK’s financial regulator has issued new rules to make incident and third-party reporting clearer

FCAがサイバーインシデントおよび第三者報告に関する規則を更新

FCA Updates Cyber Incident and Third-Party Reporting Rules #InfosecurityMagazine (Mar 19)

www.infosecurity-magazine.com/news/fca-upd...

キタきつね

@kitafox.bsky.social

1 week ago

Financial Brands Targeted in Global Mobile Banking Malware Surge Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices

世界的なモバイルバンキングマルウェアの急増で金融ブランドが標的に

Financial Brands Targeted in Global Mobile Banking Malware Surge #InfosecurityMagazine (Mar 19)

www.infosecurity-magazine.com/news/financi...

キタきつね

@kitafox.bsky.social

1 week ago

Ransomware Affiliate Exposes Details of 'The Gentlemen' Operation Hastalamuerte leaks The Gentlemen RaaS ops: FortiGate exploits, BYOVD evasion, Qilin split tactics

ランサムウェア関連組織が「ザ・ジェントルメン」作戦の詳細を暴露

Ransomware Affiliate Exposes Details of 'The Gentlemen' Operation #InfosecurityMagazine (Mar 20)

www.infosecurity-magazine.com/news/ransomw...

キタきつね

@kitafox.bsky.social

1 week ago

CISA Orders US Government to Patch Maximum Severity Cisco Flaw CISA added CVE-2026-20131 to its KEV catalog as it is being used in ransomware campaigns

CISA、米国政府に対しシスコシステムの深刻な脆弱性に対するパッチ適用を命令

CISA Orders US Government to Patch Maximum Severity Cisco Flaw #InfosecurityMagazine (Mar 23)

www.infosecurity-magazine.com/news/cisa-or...