Cybercrime
The Scranos rootkit-enabled spyware operation has expanded reach outside of China to hit targets worldwide, Bitdefender security researchers warn.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
One of Idaho’s largest insurance companies said Friday that someone hacked its website and obtained access to the personal information of about 5,600 customers,...
Cybercrime
A new variant of HawkEye, a piece of malware used for keylogging and data theft, is being leveraged in ongoing malware distribution campaigns, Cisco’s...
Cybercrime
Norwegian aluminum giant Norsk Hydro last week announced that its financial report for the first quarter of 2019 will be delayed by over one...
Cybercrime
Hackers breached Microsoft email services (Outlook.com, Hotmail, MSN) and accessed user accounts after compromising a support agent’s credentials, Microsoft has confirmed.
Cybercrime
Ecuador said on Monday it has suffered 40 million cyber attacks on the webpages of public institutions since stripping Wikileaks founder Julian Assange of...
Cybercrime
A local privilege escalation vulnerability patched recently by Microsoft in its Windows operating system had been exploited by malicious actors to deliver a PowerShell...
Cybercrime
Microsoft has been collaborating with researchers linked to a Chinese military-backed university on artificial intelligence, elevating concerns that US firms are contributing to China's...
Cybercrime
Matrix.org had its systems hacked and its website defaced by someone who decided to disclose the security issues found during the attack.
Cybercrime
Two of the most powerful Ministers in the UK government, the secretary of state for Digital, Culture, Media & Sport (DCMS) and the secretary...
Cybercrime
News broke this week that the threat group behind the notorious malware known as Triton, Trisis and HatMan has targeted another critical infrastructure facility.
Cybercrime
Two Romanians have been convicted in the United States for their role in a longstanding online fraud operation that incurred millions of dollars in...
Cybercrime
Using cryptography and virtual drop boxes, Julian Assange's WikiLeaks created a revolutionary new model for media to lure massive digitized leaks from whistleblowers, exposing...
Cybercrime
The US government has regarded WikiLeaks founder Julian Assange as a dangerous national security threat ever since he and his organization opened a decade-long...
Cybercrime
A large portion of the infrastructure related to a Middle Eastern threat actor known as Gaza Cybergang was taken down after their latest operations...
Cybercrime
WikiLeaks founder Julian Assange was arrested in London on a US warrant charging him over his alleged role in a massive leak of military...
Cybercrime
Notorious North Korean hackers are using a new Trojan in their attacks, the United States Department of Homeland Security (DHS) and Federal Bureau of...
Cybercrime
WikiLeaks founder Julian Assange's nearly seven-year stay at Ecuador's embassy in London came to an abrupt end on Thursday when police entered the building...
Cybercrime
Kaspersky Lab security researchers have discovered a sophisticated advanced persistent threat (APT) framework that provides a full set of spying capabilities.
Cybercrime
An underground invitation-based private marketplace for stolen digital fingerprints offers more than 60,000 stolen bot profiles at the moment, Kaspersky Lab reports.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)