Cybercrime
The notorious cybercrime groups claim they are going dark, but experts believe they will continue their activities.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Cybercrime
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Cybercrime
The company says it took some of its systems offline to contain a security issue within its network.
Cybercrime
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
Cybercrime
Volodymyr Tymoshchuk allegedly hit hundreds of organizations with the LockerGoga, MegaCortex, and Nefilim ransomware families.
Cybercrime
Wytec’s website was defaced twice by unknown threat actors more than a week ago and it has yet to be brought back online.
Cybercrime
Authorities say VerifTools sold fake driver’s licenses and passports worldwide, enabling fraudsters to bypass KYC checks and access online accounts.
Cybercrime
State websites and phone lines were taken offline, but officials say emergency services and personal data remain unaffected.
Cybercrime
The Arch Linux Project has been targeted in a DDoS attack that disrupted its website, repository, and forums.
Cybercrime
Dubbed Operation Serengeti 2.0, the operation took place between June and August.
Cybercrime
Noteworthy stories that might have slipped under the radar: cryptojacker sentenced to prison, ECC.fail Rowhammer attack, and Microsoft limits China’s access to MAPP.
Cybercrime
Davis Lu was sentenced to four years in prison for installing malicious code on employer’s systems and for deleting encrypted data.
Cybercrime
Noah Urban was sentenced to 10 years in prison for his role in the notorious cybercriminal operation known as Scattered Spider.
Cybercrime
A $50,000 reward from Europol for two members of the Qilin ransomware group is a ‘scam’, according to the law enforcement agency.
Cybercrime
The US Department of Justice has announced the takedown of the RapperBot botnet and charges against its American administrator.
Cybercrime
Al-Tahery Al-Mashriky of the Yemen Cyber Army has been accused of hacking into and defacing many websites as part of hacktivist campaigns.
Cybercrime
The US has indicted Zeppelin ransomware operator Ianis Antropenko, seizing over $2.8 million in cryptocurrency from his wallet.
Cybercrime
Rapid7’s analysis of dark web forums reveals a thriving market where elite hackers sell corporate network access to buyers, turning cybercrime into a streamlined...
Cybercrime
As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats.
Cybercrime
Meta linked these scams to a criminal scam center in Cambodia — and said it disrupted the campaign in partnership with ChatGPT maker OpenAI.
Cybercrime
Should Gen Z to be treated as a separate attack surface within your company?
Cybercrime
Multiple financially motivated threat actors are targeting backup systems and employing Scattered Spider’s social engineering techniques.
Cybercrime
Orange was targeted by hackers in an attack that resulted in the disruption of services offered to corporate and individual customers.
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)