Compliance
A class action lawsuit was filed on behalf of SolarWinds investors this week over the cybersecurity breach suffered by the Texas-based IT management solutions...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
President Donald Trump has signed an executive order banning transactions with eight Chinese apps including Alipay and WeChat Pay in an escalation of a...
Cybercrime
Citrix on Monday informed customers that it released firmware updates for its Application Delivery Controller (ADC) and Gateway products to prevent threat actors from...
Cybercrime
Security researchers have observed the first attempts to compromise Zyxel devices using a recently disclosed vulnerability related to the existence of hardcoded credentials.
Cybercrime
China-linked cyber-espionage group APT27 is believed to have orchestrated recent ransomware attacks, including one where a legitimate Windows tool was used to encrypt the...
Cybercrime
It is believed that the recently disclosed attack targeting Texas-based IT management solutions provider SolarWinds resulted in threat actors gaining access to the networks...
Cybercrime
A British judge on Monday rejected the United States’ request to extradite WikiLeaks founder Julian Assange to face espionage charges, saying he was likely...
Cybercrime
At-home laboratory services provider Apex Laboratory said hackers stole some patient data during a ransomware attack that took place several months ago.
Cybercrime
Microsoft acknowledged Thursday that attackers who spearheaded a massive hack of government and private computer networks gained access to its internal "source code," a...
Cybercrime
Ticketmaster agreed on Wednesday to pay a $10 million fine to escape prosecution over criminal charges accusing the company of hacking into the computer...
Cybercrime
The United States Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) has issued an alert to warn financial institutions of fraud and cyberattacks...
Cybercrime
Kawasaki Heavy Industries on Monday revealed that information from its overseas offices might have been stolen following a security breach that occurred earlier this...
Cybercrime
A piece of malware named by researchers Supernova and a zero-day vulnerability exploited to deliver this malware indicate that SolarWinds may have been targeted...
Cybercrime
A Vermont-based hospital network is now saying a cyberattack that crippled its computer systems in October was ransomware.
Cybercrime
The North Korea-linked threat actor known as Lazarus was recently observed launching cyberattacks against two entities involved in COVID-19 research.
Cybercrime
Several U.S. government organizations have issued warnings regarding various types of fraud and phishing schemes that use COVID-19 vaccine-related topics to lure potential victims.
Cybercrime
A UN rights expert on Tuesday urged outgoing US President Donald Trump to pardon Julian Assange,
Cybercrime
A VPN service used by many cybercriminals has been disrupted in a global operation that involved law enforcement agencies in Germany, the United States,...
Cybercrime
UK-based cryptocurrency exchange EXMO informed customers on Monday that it discovered large withdrawals from its hot wallets.Founded in 2013, the exchange claims more than...
Cybercrime
The blockchain domains of Joker’s Stash, a popular underground marketplace for stolen payment card data, have been seized by law enforcement.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)