Cybercrime
Binance, one of the world’s largest cryptocurrency exchanges, revealed on Tuesday that hackers managed to steal over 7,000 bitcoins, worth more than $41 million.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
Baltimore’s government on Tuesday rushed to shut down most of its computer servers after its network was hit by a ransomware virus. Officials believe...
Cybercrime
In an effort to make voting more secure and protect political parties and campaigns from cyberattacks, Microsoft this week added new solutions to its previously...
Cybercrime
The Russia-linked threat group known as Turla has been using a sophisticated backdoor to hijack Microsoft Exchange mail servers, ESET reported on Tuesday.
Cybercrime
GandCrab, once known as a consumer-targeting ransomware, is increasingly being used in attacks against business organizations
Cybercrime
A Chinese threat actor was spotted using a tool attributed to the NSA-linked Equation Group more than one year prior to it being leaked...
Cybercrime
A Ukrainian national was indicted in the United States for his role in a years-long, international scheme to infect computers with malware via online...
Cybercrime
Magecart is a prolific stealer of bank card details. It is neither a malware type nor an attacker group -- it is more like...
Cybercrime
European and American investigators have broken up one of the world’s largest online criminal marketplaces for drugs, hacking tools and financial-theft wares in raids...
Cybercrime
Cybercriminals have been wiping GitHub, GitLab and Bitbucket repositories and asking their owners to pay a ransom to recover the data. The impacted Git...
Cybercrime
German police have shut down one of the world's largest illegal online markets in the so-called darkweb and arrested the three men allegedly running...
Cybercrime
A denial-of-service (DoS) attack has been blamed for disruptions to electrical grid operations in the United States.According to the National Energy Technology Laboratory’s OE-417...
Cybercrime
A defiant Julian Assange told a London court Thursday he will fight extradition to the United States to face charges of conspiring to hack...
Cybercrime
A botnet targeting the users of the popular Electrum Bitcoin wallet managed to ensnare more than 150,000 hosts at its peak, Malwarebytes security researchers...
Cybercrime
Software giant Citrix has shared more information about the recent data breach and it appears the hackers had access to the company’s network for...
Cybercrime
Kaspersky Details MuddyWater’s Post-Infection Tools The MuddyWater cyberespionage group is making use of a broad range of post-infection tools in their attacks, mostly developed...
Cybercrime
A critical Oracle WebLogic Server vulnerability patched last week has been exploited by malicious actors to deliver a new piece of ransomware to organizations.
Cybercrime
Russia and China are stepping up "worrying" cyber-spying activity, including last year's plot to hack the world chemical weapons watchdog, the Dutch intelligence service...
Cybercrime
A majority of the 2020 U.S. presidential campaigns are vulnerable to sophisticated email attacks as they have failed to implement DMARC and advanced security...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)