Cybercrime
A recently discovered attack group referred to as Tortoiseshell has been targeting job seekers in the United States, especially military veterans, Cisco Talos’ security...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
A Russian man this week pleaded guilty in a Manhattan federal court to the hacking of various financial institutions in the United States, including...
Cybercrime
A massive data breach at Indonesian airline Lion Air that affected millions of customers stolen was the fault of staff at a contractor, the...
Cybercrime
Gillette, Wyoming-based Campbell County Memorial Hospital continues to experience service disruptions after a ransomware attack hit Campbell County Health’s computer systems on Friday.
Cybercrime
It could be a manipulated video embarrassing a candidate. Or a computer voting system locked by ransomware. Or doubts about electronic voting machines with...
Cybercrime
A Mac Trojan focused on stealing users’ information was found masquerading as a legitimate trading application, Trend Micro’s security researchers report.
Cybercrime
Portuguese prosecutors are bringing 154 charges against an alleged local hacker they believe is linked to the publication of internal documents that embarrassed top...
Cyber Insurance
Experts Worry That Cyber Insurance Policies Designed to Limit Damage of Ransomware Attacks Might Actually be Encouraging Hackers
Cybercrime
More than 20,000 records from eight cities across the United States have been compromised in a new wave of Click2Gov breaches, Gemini Advisory reports.Developed...
Cybercrime
France has not changed its mind on rejecting any asylum request from US surveillance whistleblower Edward Snowden, its foreign minister said Thursday, after the...
Cybercrime
The United States Department of Justice this week announced the arrest of two individuals charged for participating in a long-term tech support fraud scheme.
Cybercrime
A recently observed phishing campaign is targeting taxpayers in the United States in an attempt to infect their machines with a piece of malware...
Cybercrime
A Magecart threat actor has compromised the websites of two hotel chains to inject scripts targeting Android and iOS users, Trend Micro’s security researchers...
Cybercrime
The Smominru botnet continues to spread at a fast pace, infecting around 4,700 new hosts daily during the month of August, Guardicore Labs reports.
Cybercrime
Philippines immigration agents, backed by troops, have arrested more than 300 Chinese for alleged cyber crimes, a week after a similar number were detained...
Cybercrime
Following a 4-month vacation, Emotet’s operators are back at it, borrowing a recently introduced spear-phishing technique to deliver their malware: hijacking legitimate email conversations.
Cybercrime
A previously undocumented attack group, given the name the Tortoiseshell Group, is targeting middle eastern IT firms in an apparent supply chain move against...
Cybercrime
A new threat actor has generated thousands of dollars in the Monero cryptocurrency using remote access tools (RATs) and illicit cryptocurrency mining malware.
Cybercrime
A newly discovered remote access Trojan can steal various types of data from the infected machines, including personal data and cryptocurrency wallet information, Zscaler...
Cybercrime
British police said Friday they had arrested a 19-year-old man for stealing unreleased songs from musicians' websites and cloud-based accounts, as part of a...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)