Cybercrime
A new piece of macOS malware linked to the North Korean hacking group Lazarus employs in-memory execution of payloads, researchers revealed this week.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
A Lamborghini-driving Moscow hacker who called his operation Evil Corp and has ties to the FSB Russian intelligence service was indicted by US authorities...
Cybercrime
Magecart started as the name given to a single criminal gang operating a software skimming attack targeting payment card data on web sites. The...
Cybercrime
A new Python-based remote access Trojan (RAT) has been used in campaigns targeting a wide range of industries, BlackBerry Cylance revealed this week.
Cybercrime
Researchers at IBM X-Force have come across what appears to be a new piece of malware that has been used in highly targeted attacks...
Cybercrime
The website of American gunmaker Smith & Wesson was hacked late last month and the hackers planted malicious code designed to steal customers’ payment...
Cybercrime
Norwegian app security company Promon on Monday disclosed the existence of a vulnerability that has been exploited by tens of malicious Android apps, and...
Cybercrime
The activity associated with a cybercrime campaign targeting hospitality companies with remote access Trojans and other malware has intensified this year, Kaspersky reports.
Cybercrime
A worldwide law enforcement operation has resulted in the Imminent Monitor Remote Access Trojan (IM-RAT) being taken down completely, Europol has announced.Designed to provide...
Cybercrime
Adobe-owned e-commerce platform Magento recently informed some Magento Marketplace users that an unauthorized third-party had gained access to their account information.
Compliance
A man convicted of murder 37 years ago has the right to be forgotten and have his name removed from online search results, Germany's...
Cybercrime
Kilos is a new dark web search engine that goes where Google doesn't. It was first announced by its developer on Reddit on November...
Cybercrime
Google’s Threat Analysis Group (TAG) this week shared some data on government-backed hacking and disinformation attempts targteting its customers.
Cybercrime
South Korean cryptocurrency exchange Upbit today announced that hackers managed to steal $49 million in Ethereum.The crypto-coins were transferred from the Upbeat Ethereum Hot...
Cybercrime
Tex-Mex restaurant chain On The Border has informed customers this week that their payment card information may have been stolen by hackers.
Cybercrime
A Chinese woman who stirred fears of espionage when she entered President Donald Trump's Mar-a-Lago resort carrying multiple mobile phones and a malware-spiked thumb...
Cybercrime
At least 160 Church’s Chicken restaurants across 11 U.S. states are impacted by a data breach that involved unauthorized access to payment processing systems.Cajun...
Cybercrime
One in ten of Louisiana’s 5,000 computer network servers that power operations across state government were damaged by this week’s cyberattack, a key technology...
Cybercrime
Chinese smartphone manufacturer OnePlus revealed on Friday that some customers’ order information was accessed by hackers who breached its systems.
Cybercrime
A Lithuanian man extradited to the United States this week has been charged with hacking U.S.-based computers and stealing from online bank accounts and...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)