SC Magazine UK

1 week ago | insight.scmagazineuk.com | Dan Raywood

Company were not aware of the breach until informed by the NCA, and were unaware of duty to report to the ICO. Merseyside-based DPP Law Ltd has been fined £60,000 by the Information Commissioner’s Office following a cyber-attack. Following the attack, highly sensitive and confidential personal information was published on the dark web. The ICO’s investigation found DPP failed to put appropriate measures in place to ensure the security of personal information held electronically.

1 week ago | insight.scmagazineuk.com | Dan Raywood

Number of ransomware victims increased year-on-year. Around half of all cyber-attacks were attributed to financially motivated cyber-criminals in 2024. According to Cognyte’s Threat Landscape Report for 2025, 49 percent were due to those cyber-criminals, while state-sponsored actors accounted for 36 percent of attacks. Hacktivists accounted for four percent of attacks in 2024.

1 week ago | insight.scmagazineuk.com | Dan Raywood

Personal details were included, with national insurance numbers and user images found. Millions of healthcare related documents were discovered in a breach after a publicly exposed database was discovered. According to a blog by researcher Jeremiah Fowler, the publicly exposed database was not password-protected or encrypted, and contained 7,975,438 files with a total size of 1.1 TB.

1 week ago | insight.scmagazineuk.com | Dan Raywood

Fraudulent emails claimed to be invitations to a wine-tasting event. The Russian state-backed threat group Midnight Blizzard, also known as APT29 or Cozy Bear, has targeted embassies and other diplomatic organizations across Europe as part of a spear-phishing campaign that began in January. According to Check Point Research, the campaign introduces a previously unseen malware loader called 'GrapeLoader,' and a new variant of the 'WineLoader' backdoor, reports BleepingComputer.

1 week ago | insight.scmagazineuk.com | Dan Raywood

The SNOWLIGHT malware deploys the VShell remote access trojan on victims. Linux and Ivanti Connect Secure VPN devices have been targeted in separate Chinese malware attack campaigns. According to research by Sysdig, in a report shared with The Hacker News, the China-linked threat actor, known as UNC5174, has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called VShell to infect Linux systems.