Cybercrime
Kaspersky this week released a threat intelligence solution designed to help with the attribution of malware samples to known advanced persistent threat (APT) groups.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
Microsoft’s Azure Security Center (ASC) recently identified an attack campaign that targets Kubeflow, a machine learning toolkit for Kubernetes.
Cybercrime
Personal information of police officers in departments nationwide is being leaked online amid tense interactions at demonstrations across the U.S. over the police custody...
Cybercrime
More than a dozen U.S. officials have sent a letter to California-based networking and cybersecurity solutions provider Juniper Networks to ask the company about...
Cybercrime
At least a dozen bogus "contact tracing" apps designed to look like official software to track coronavirus infections have been deployed globally to spread...
Cybercrime
Japanese gaming giant Nintendo has admitted that hackers have breached 300,000 accounts since early April, gaining access to personal information such as birthdays and...
Cybercrime
Thousands of individuals and hundreds of organizations across six continents have been targeted by the same hack-for-hire group over the past several years, Citizen...
Cybercrime
Malicious attacks targeting the United States utilities sector last year were observed employing a previously unknown malware family that allows hackers to take over...
Cybercrime
A Korean threat actor known as Higaisa has been employing malicious LNK files in recent attacks targeting organizations that use the Zeplin collaboration platform.
Cybercrime
One of the several multinational corporations enlisted by the German government to help it obtain personal protective equipment (PPE) for the care of COVID-19...
Cybercrime
The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has warned Windows users that a recently released proof-of-concept (PoC) exploit for...
Cybercrime
Business process services provider Conduent has been the victim of a ransomware attack that appears to be the work of Maze operators.Formed in 2017...
Cybercrime
The North Atlantic Treaty Organization (NATO) this week publicly condemned the malicious cyber-activities directed against COVID-19 responders.
Cybercrime
Campaign staffs for both President Donald Trump and Democratic rival Joe Biden have been targeted recently by foreign hackers, Google researchers said Thursday, highlighting...
Cybercrime
A recently discovered multi-platform Java ransomware uses a Java image file (JIMAGE) to evade detection, BlackBerry security researchers report.Dubbed Tycoon, the ransomware appears to...
Cybercrime
Over a period of just a few days in late May, malicious actors attempted to steal database credentials from millions of WordPress websites by...
Cybercrime
For years, a China-linked threat actor named Cycldek has been exfiltrating data from air-gapped systems using a previously unreported, custom USB malware family, Kaspersky...
Cybercrime
The San Francisco Employees’ Retirement System (SFERS) this week disclosed a data breach that impacted over 70,000 of its members.
Cybercrime
For more than five months, Lastline security researchers have tracked the evolution of malicious Excel 4.0 (XL4) macros, observing the fast pace at which...
Cybercrime
Several vulnerabilities affecting the Exim mail transfer agent (MTA) have been exploited by Russia-linked hackers, and administrators have been urged to patch immediately, but...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)