Cybercrime
The Ragnar Locker ransomware has been deploying a full virtual machine to ensure that it can evade detection, Sophos reveals.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
Verizon this week published its 2020 Data Breach Investigation Report (DBIR). The report is based on insights from thousands of incidents and it’s more...
Cybercrime
Some Florida residents who have made unemployment claims may have had personal data stolen, officials said Thursday.
Cybercrime
Malicious actors targeting a zero-day vulnerability in Sophos XG Firewall appliances last month attempted to deploy ransomware after Sophos started taking measures to neutralize...
Cybercrime
Facebook on Thursday said that its Messenger app will be watching behind the scenes for scammers using the smartphone communication system.
Cybercrime
The source code of the GhostDNS exploit kit (EK) has been obtained and analyzed by researchers. GhostDNS is used to compromise a wide range...
Cybercrime
Hackers claim to have obtained more than 200 GB of archived data from Australian transportation and logistics giant Toll, and they have already started...
Cybercrime
Subscription meal kit service Home Chef has confirmed that it recently suffered a data breach impacting customer information.
Cybercrime
Researchers have trawled the dark web to see how the underground is responding to the COVID-19 pandemic. The callous criminal effect has been obvious...
Cybercrime
Japan is investigating a possible leak of data including details of a prototype missile in a massive cyberattack earlier this year on Mitsubishi Electric...
Cybercrime
Researchers have spotted a piece of WordPress malware that allows cybercriminals to collect information from WooCommerce stores and helps them set up compromised websites...
Cybercrime
New variants of the Mirai and Hoaxcalls botnets have been targeting an old remote code execution (RCE) vulnerability in legacy Symantec Secure Web Gateway...
Cybercrime
British airline EasyJet on Tuesday said it had suffered a "sophisticated" cyber attack, uncovering names and travel details of about nine million customers amid...
Cybercrime
The U.S. Department of Justice announced on Monday that the FBI managed to gain access to the data stored on two iPhones belonging to...
Cybercrime
Australian steel producer BlueScope was recently hit by a cyberattack that caused disruptions to some of the company’s operations.
Cybercrime
A state program that was created to process unemployment applications in Arkansas for self-employed individuals or gig economy workers appears to have been illegally...
Cybercrime
Texas’ transportation agency has become the second part of the state government to be hit by a ransomware attack in recent days.On Thursday, someone...
Cybercrime
Several supercomputers across Europe were taken offline last week after being targeted in what appears to be a crypto-mining campaign.
Cybercrime
Security researchers at Bitdefender have identified a highly sophisticated Android spyware platform that managed to remain undetected for four years.
Cybercrime
French prosecutors said on Friday that police had broken up an international network aimed at the so-called "jackpotting" of ATMs that makes the machines...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)