Cybercrime
Even seemingly insignificant Internet of Things (IoT) devices such as LED light control consoles can be abused to launch malicious attacks, Microsoft’s security researchers...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
Professional services company Cognizant has fallen victim to a cyber-attack which appears to have been the work of the Maze ransomware operators.
Cybercrime
A threat actor that has been spotted targeting Azerbaijan has shown an interest in the energy sector, specifically SCADA systems related to wind turbines,...
Cybercrime
Multiple botnets are targeting a zero-day vulnerability in fiber routers in an attempt to ensnare them and leverage their power for malicious purposes, security...
Cybercrime
A Connected TV (CTV) ad fraud operation managed to generate as much as 28% of the CTV traffic observed in January 2020 by White...
Cybercrime
GitHub has warned users that they may be targeted in a fairly sophisticated phishing campaign that the company has dubbed “Sawfish.”
Cybercrime
Banking Trojans Increasingly Target Corporate UsersFinancial phishing has increased in frequency and accounted for more than half of all phishing detections last year, Kaspersky...
Cybercrime
'Double extortion' is the term given to an evolving ransomware tactic: first steal confidential data, then encrypt the victim's files. If the victim doesn't...
Cybercrime
Syrian-linked hackers recently switched to COVID-19-themed lures as part of a long-running surveillance campaign, Lookout security researchers reveal.
Cybercrime
Swiss-based global shipping giant Mediterranean Shipping Company (MSC) has confirmed that a recent outage was caused by a malware attack that affected its headquarters...
Cybercrime
Linksys has prompted users to reset passwords after learning that hackers were leveraging stolen credentials to change router settings and direct customers to malware.
Cybercrime
Threat actors working for North Korea have also been hired by others to hack websites and extort targets, the U.S. government says in a...
Cybercrime
The recently disclosed attack aimed at two websites pertaining to the San Francisco International Airport (SFO) is the work of Russian hackers, ESET claims.
Cybercrime
Microsoft’s Update Tuesday patches for April 2020 address 113 vulnerabilities, including three Windows flaws that have been exploited in attacks for arbitrary code execution...
Cybercrime
A data set containing 3,954,416 Quidd user credentials was found on a prominent dark web hacking forum, Risk Based Security reports.Backed by Sequoia and...
Cybercrime
Hackers managed to breach two websites pertaining to the San Francisco International Airport (SFO) in March 2020, the airport has revealed.
Cybercrime
Dutch police on Friday arrested a 19-year-old man from Breda suspected of launching a distributed denial of service (DDoS) attack on a government website.As...
Cybercrime
The United States Securities and Exchange Commission (SEC) last week announced that it reached a settlement with two of the traders charged last year...
Cybercrime
Researchers have found a database of Zoom video conferencing credentials ranging from just an email and password to also include meeting IDs, names and...
Cybercrime
The Hoaxcalls botnet is actively targeting a recently patched SQL injection vulnerability in Grandstream UCM6200 series devices, security researchers warn.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)