Cybercrime
A data breach at billing collections service provider American Medical Collection Agency (AMCA) could impact many of the company’s customers. One victim is medical...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
Luxembourg-based laboratory testing services giant Eurofins Scientific on Monday revealed that some of its IT systems have been infected with a piece of ransomware.
Cybercrime
Checkers Drive-In Restaurants, Inc. on Wednesday informed customers that malware had been found on point-of-sale (PoS) systems at some of its Checkers and Rally's...
Compliance
Privacy-focused email service ProtonMail has been accused of voluntarily helping law enforcement spy on users. The company has denied the accusations.
Cybercrime
[UPDATE 5.30.19 - New Zealand Says Budget Leak Was Bungled, Not Hacked]
Cybercrime
Chinese cyber-espionage group Emissary Panda has been targeting government organizations in two different countries in the Middle East, Palo Alto Networks security researchers say.
Cybercrime
News and social media aggregator Flipboard revealed on Tuesday that it suffered a serious breach involving unauthorized access to some databases storing user account...
Cybercrime
The US city of Baltimore, a victim this month of a cyberattack that paralyzed part of its computer network, will not pay a ransom...
Cybercrime
HawkEye keylogger campaigns observed in April and May 2019 focused on targeting business users, IBM X-Force security researchers say.
Cybercrime
Researchers have detected what they believe to be new activity from Chinese cyber espionage group, APT10. The activity surfaced in the Philippines and shares...
Cybercrime
This is an age of large scale political social engineering through social media, both by advertising and the presentation of misleading data. International social...
Compliance
The New York State Department of Financial Services (DFS) this week announced that it has launched a new cybersecurity division whose role is to...
Cybercrime
A superseding indictment returned by a U.S. federal grand jury on Thursday charges WikiLeaks founder Julian Assange with 18 counts related to illegally obtaining...
Cybercrime
Facebook on Thursday said it recently disabled billions of bogus accounts set up by "bad actors" and that five percent of active accounts are...
Cybercrime
The hacking of U.S. election systems, including by foreign adversaries, is inevitable, and the real challenge is ensuring the country is resilient enough to...
Cybercrime
Instagram on Thursday said it was not the source of private contact information for millions of influential users of the service recently found in...
Cybercrime
Authorities in Europe this week said they took down Bestmixer.io, one of the leading cryptocurrency mixing service in the world. The takedown was possible due...
Cybercrime
The skimmer used in a recently discovered Magecart attack on a Magento-based e-commerce website was posing as a payment service provider via a rogue...
Cybercrime
The European Union on Friday adopted powers to punish those outside the bloc who launch cyberattacks that cripple hospitals and banks, sway elections and...
Cybercrime
Canadian authorities announced last week that Defiant Tech Inc., the company that ran LeakedSource, pleaded guilty to trafficking identity information and possession of property...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)