Cybercrime
Matthew Lane allegedly hacked PowerSchool using stolen credentials and admitted to extorting a telecoms provider.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Cybercrime
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Cybercrime
The company says it took some of its systems offline to contain a security issue within its network.
Cybercrime
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
Cybercrime
Wireless carrier Cellcom has confirmed that a week-long widespread service outage is the result of a cyberattack.
Cybercrime
Eric Council Jr. was sentenced to prison for hacking SEC’s official X account and publishing fraudulent posts increasing Bitcoin value.
Artificial Intelligence
The FBI says former federal and state government officials are targeted with texts and AI-generated voice messages impersonating senior US officials.
Cybercrime
Once a key figure in the Angler exploit kit underworld, Tarasov’s life has unraveled into detention, paranoia, and an unwanted return to the Russia...
Cybercrime
Health technology and consumer electronics firm Masimo detected unauthorized activity on its network in late April.
Cybercrime
Rami Khaled Ahmed, a 36-year-old from Yemen, has been charged for launching ransomware attacks between 2021 and 2023.
Cybercrime
A 25-year-old has admitted hacking Disney systems and leaking data under the guise of a hacktivist collective named NullBulge.
Cybercrime
Major UK retailers Co-op, Harrods, and M&S are scrambling to restore services that were affected by cyberattacks.
Cybercrime
Ukrainian national Artem Stryzhak was extradited to the US and charged with using Nefilim ransomware in attacks on large businesses.
Cybercrime
British retailer Marks & Spencer has been experiencing certain service disruptions after falling victim to a cyberattack.
Cybercrime
The city of Abilene, Texas, is scrambling to restore systems that have been taken offline in response to a cyberattack.
Artificial Intelligence
With 51% of internet traffic now bot-driven and a growing share of it malicious, organizations must prepare for an era of more evasive, AI-assisted...
Cybercrime
Noteworthy stories that might have slipped under the radar: 4chan hacked, auto-reboot security feature coming to Android, Iranian administrator of Nemesis charged in US.
Cybercrime
Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme.
Cybercrime
Organizations in the healthcare and pharmaceutical sectors have been targeted with ResolverRAT, a new malware family with advanced capabilities.
Cybercrime
Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers.
Cybercrime
Noteworthy stories that might have slipped under the radar: Scattered Spider still active despite arrests, hacker known as EncryptHub unmasked, Rydox admins extradited to...
Artificial Intelligence
Agentic AI has improved spear phishing effectiveness by 55% since 2023, research shows.
Cybercrime
A 20-year-old arrested last year and charged alongside others believed to be members of Scattered Spider has pleaded guilty.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)