Cybercrime
Remote control and support solutions provider TeamViewer has confirmed that hackers likely operating out of China breached its systems back in 2016, but the...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
Deep & dark web (DDW) communities have long been must-have data sources for threat intelligence programs, but only recently has the market caught up...
Cybercrime
Hackers had access to Stack Overflow systems for nearly one week before the attack was detected and some user data was exposed after all,...
Cybercrime
The number of hacktivist attacks that resulted in quantifiable damage to the victim has declined by 95 percent since 2015, according to IBM.
Cybercrime
Stack Overflow, the popular Q&A platform for programmers, revealed on Thursday that someone gained access to its production systems over the weekend.
Cybercrime
Authorities in the United States and Europe on Thursday announced the takedown of an organized cybercrime network that used the GozNym malware to steal...
Cybercrime
The Singapore Red Cross said Thursday its website had been hacked and the personal data of more than 4,000 potential blood donors compromised in...
Cybercrime
The Chinese government appears to have centralized control over several hacking groups previously believed to be separate threat actors, the BlackBerry Cylance Threat Intelligence...
Cybercrime
On Sunday, May 12, 2019, security researcher Willem de Groot tweeted, "Supply chain attack of the week: @Picreel_ marketing software got hacked last night,...
Compliance
An Israeli spyware company named in a Financial Times report on a WhatsApp security flaw prides itself on "rigorous, ethical standards" despite previous links...
Cybercrime
When an attractive young Middle Eastern woman contacted Saudi dissident Ali AlAhmed over Twitter last November, he was immediately suspicious.
Cybercrime
Documents associated with the activity of Iranian APT group “Rana” have leaked online recently, exposing the group’s targeting of individuals, as well as information...
Cybercrime
A North Korea-linked threat group tracked as ScarCruft, APT37 and Group123 continues to evolve and expand its toolkit, Kaspersky Lab reported on Monday.
Cybercrime
A critical vulnerability in Microsoft’s SharePoint collaboration platform has been exploited in the wild to deliver malware.
Cybercrime
SilverTerrier is not a traditional cybercrime group. It is the collective name Unit 42 of Palo Alto Networks gives to Nigerian cybercriminals. SilverTerrier continues...
Cybercrime
The U.S. Department of Homeland Security (DHS) on Thursday published a malware analysis report detailing another piece of malware used by threat actors linked...
Cybercrime
Two Israeli citizens arrested this week are accused of being the administrators of a website that linked to numerous illegal dark web marketplaces.
Cybercrime
A three-year prison sentence has been handed a man found guilty of hacking the servers of a northern Illinois company after he was fired.
Cybercrime
Global information services giant Wolters Kluwer has taken many of its applications and platforms offline after discovering malware on its systems.The Netherlands-based company started...
Cybercrime
A vulnerability disclosed late last year has been exploited by malicious actors to deliver a piece of malware that deploys a Monero cryptocurrency miner...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)