Cybercrime
Using indicators of compromise (IoCs) made available by FireEye, threat intelligence and incident response firm Volexity determined that the threat group behind the SolarWinds...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
Palo Alto Networks security researchers have discovered a Linux-based cryptocurrency-mining botnet that being delivered via PostgreSQL.
Cybercrime
SolarWinds’ investigation into the recent attacks that leveraged its products to target government and private sector organizations revealed that 18,000 customers may have used...
Cybercrime
Norwegian cruise company Hurtigruten announced Monday that it had been hit by a major cyberattack involving what appeared to be "ransomware", designed to seize...
Cybercrime
An Indian national who moved to California on an H1-B work visa was sentenced to 24 months in prison last week for accessing and...
Cybercrime
Tampered Versions of SolarWinds Orion IT Monitoring Software Used to Compromise Global Organizations
Cybercrime
Threat actors are targeting K-12 educational institutions in the United States to deploy ransomware, steal data, or disrupt distance learning services.
Cybercrime
Social media giant Facebook this week revealed that it has disrupted the activity of two groups of hackers — one operating from Vietnam and...
Cybercrime
Cybersecurity firm FireEye this week revealed that a highly sophisticated threat group likely sponsored by a foreign government breached its network and stole some...
Cybercrime
A cyberattack targeting coronavirus data at the EU's medicines watchdog lasted two weeks but will not affect the timeline for approval of the jabs,...
Cybercrime
Two new backdoors have been attributed to the Molerats advanced persistent threat (APT) group, which is believed to be associated with the Palestinian terrorist...
Cybercrime
The Russia-linked cyberspy group known as Zebrocy has adopted COVID-19 vaccine-related lures in a recently observed phishing campaign, threat detection and response company Intezer...
Cybercrime
Documents related to the Pfizer coronavirus vaccine were illegally accessed during a cyberattack at the EU regulator, the company said Wednesday, as Germany and...
Cybercrime
Secretary of State Mike Pompeo on Wednesday accused U.S. universities of caving to Chinese pressure to blunt or bar criticism of the Chinese Communist...
Cybercrime
A Russian citizen living in Denmark has been charged with espionage for allegedly having provided information about Danish energy technology, among other things, to...
Cybercrime
A late October cyberattack on the computer systems of the University of Vermont Medical Center is costing the hospital about $1.5 million a day...
Cybercrime
The EU's medicines regulator said Wednesday it had been the victim of a cyberattack, just weeks before it is due to decide on special...
Cybercrime
Prominent U.S. cybersecurity firm FireEye said Tuesday that foreign government hackers with “world-class capabilities” broke into its network and stole offensive tools it uses...
Cybercrime
Electronics manufacturing giant Foxconn has confirmed that some of its systems have been targeted in a cyberattack, after a group of hackers started leaking...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)