Cybercrime
A Ruby software package that contained a malicious backdoor has been removed from the Ruby Gems repository after compromising over ten libraries.Called rest-client, the...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
A recently analyzed Chinese cyber-espionage and financially-focused threat actor was observed targeting a web server at a U.S.-based research university, FireEye’s security researchers report.
Compliance
Twitter said Monday it has suspended more than 200,000 accounts that it believes were part of a Chinese government influence campaign targeting the protest...
Compliance
Twitter first announced Monday, August 19, 2019, that is updating its policy on state media advertising. "Going forward," it said, "we will not accept...
Cybercrime
A new ransomware family specifically targeting users of the Fortnite game is based on the open source Hidden-Cry malware, Cyren’s security researchers have discovered.
Cybercrime
Webmin, the open source web-based interface for managing Linux and UNIX systems, contained a remote code execution vulnerability for more than a year and...
Cybercrime
Hacker Elliot Gunton has been sentenced to 20 months in prison by Norwich (UK) County Court, but released immediately because of time already served...
Cybercrime
A ransomware attack hit 23 local government entities in Texas last week, the Texas Department of Information Resources (DIR) has revealed.
Compliance
Americans have a pragmatic view towards cybersecurity. For example, while 86% believe that paying ransoms merely encourages more attacks, 70% accept that when organizations...
Cybercrime
Hackers had access for months to the contact information of hundreds of financial industry subscribers to a European Central Bank newsletter, the Frankfurt institution...
Cybercrime
Two Florida men have pleaded guilty to wire fraud charges filed in southern Illinois, where they targeted people with fake technical support services.Michael Austin...
Cybercrime
Federal prosecutors say a woman charged in a massive data breach at Capital One may have hacked more than 30 other organizations.
Cloud Security
The Cloud Atlas threat group has continued conducting cyber espionage operations and its recent attacks have involved a new piece of polymorphic malware.
Cybercrime
A newly identified exploit kit is targeting vulnerable versions of Adobe's Flash Player, Malwarebytes security researchers say.
Cybercrime
A Pakistani national has been charged by U.S. authorities for his role in a scheme that involved bribing employees of telecommunications giant AT&T to...
Cybercrime
A panel monitoring U.N. sanctions says North Korean cyber experts have illegally raised money for the country’s weapons of mass destruction programs “with total...
Cybercrime
The threat actor behind the cyberespionage campaign dubbed Machete continues to be active and some of its most recent attacks targeted the military in...
Cybercrime
Edward Snowden, the former National Security Agency contractor who fled to Russia after leaking information about the US government's mass surveillance program, is publishing...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)