Cybercrime
Krystal, a fast-food restaurant chain based in Atlanta, Georgia, informed customers recently that it has launched an investigation into a cybersecurity incident involving the...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The South African city of Johannesburg says it will not pay the ransom demanded by hackers who recently breached its IT systems.
Cybercrime
A New Jersey man has pleaded guilty in federal court to hacking two companies and installing keyloggers in an effort to steal data.The man,...
Cybercrime
Raccoon is a malware-as-a-service (MaaS) infostealer that appeared in early 2019, and was aggressively marketed on underground forums from April 2019. Since then, its...
Cybercrime
Automation tools manufacturer Pilz has been hit by a cyberattack that took down almost its entire infrastructure.
Cybercrime
A Texas man found guilty of hacking into the Los Angeles Superior Court (LASC) computer system and abusing it to send phishing emails was...
Cybercrime
Recent Gustuff Android banking Trojan campaigns featured an updated malware version, Cisco Talos security researchers report.
Cybercrime
A recently identified backdoor used by the China-linked Winnti hackers and which targets Microsoft SQL (MSSQL) is very stealthy, ESET’s security researchers say.
Cybercrime
Magecart is the umbrella term for a range of criminal groups that use software to perform digital credit card skimming. It isn't clear how...
Cybercrime
Hackers have leaked private RSA keys and information on configuration files that were stolen from a NordVPN server last year.
Cybercrime
Czech police and intelligence services said on Monday they had busted a Russian espionage network operating through its Prague embassy.It was allegedly set up...
Cybercrime
An unknown threat actor managed to access Avast’s network in yet another supply chain compromise attempt, the security company announced on Monday.
Cybercrime
If the FBI discovers that foreign hackers have infiltrated the networks of your county election office, you may not find out about it until...
Cybercrime
Westchester, Illinois-based ingredients giant Ingredion Incorporated revealed this week that it recently detected suspicious activity on some data center servers.Only a few details have...
Cybercrime
Global shipping and ecommerce giant Pitney Bowes revealed on Thursday that the recent service disruptions were caused by a piece of ransomware known as...
Cybercrime
A northwestern Indiana hospital system is warning more than 68,000 patients that their personal information, including Social Security numbers and health records, may have...
Cybercrime
TA505, the Russian-speaking threat actor known for operating the Dridex Trojan and Locky ransomware, has been using a new remote access Trojan (RAT) in...
Cyber Insurance
The city of Baltimore is set to purchase $20 million in cyber insurance coverage, five months after an attack hobbled its computer network.The city’s...
Cybercrime
Russia-linked threat actor APT29 has been successfully avoiding detection for the past three years while compromising multiple government targets, ESET’s security researchers report.
Cybercrime
Palo Alto Networks’ security researchers have identified what appears to be the first crypto-jacking worm that spreads using Docker containers.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)