Cybercrime
China-linked cyber-espionage group APT10 has targeted companies in the United States and Europe to steal intellectual property or gain commercial advantage, Recorded Future security...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
Huddle House, an Atlanta-based restaurant chain with over 300 locations across the United States, informed customers recently that their payment card information may have...
Cybercrime
Recorded Future says that its security researchers were able to identify the hacker who first distributed the recently surfaced database of 773 million email...
Cybercrime
Amy Spiro is one of many Israeli journalists who recently received a direct message on her Twitter account linking to a sensational news story.The...
Cybercrime
Home remodeling and design platform Houzz informed customers this week of a data breach that involved some personal information.
Cybercrime
Facebook said Thursday it took down hundreds of "inauthentic" accounts from Iran that were part of a vast manipulation campaign operating in more than...
Cybercrime
Companies that sold fake social media activity have reached a settlement with the state of New York in a case that, for the first...
Cybercrime
U.S. Government Announces Initiative to Disrupt Joanap Botnet Associated With North Korean Regime
Cybercrime
Aircraft maker Airbus on Wednesday revealed that information on some of its employees was compromised as a result of a data breach.
Compliance
A U.S. judge has rejected the settlement between Yahoo and users impacted by the massive data breaches suffered by the company, citing, among other...
Cybercrime
Bangladesh will Wednesday file a lawsuit in New York against a Philippine bank over its involvement in one of the biggest-ever cyber heists, the...
Cybercrime
Russia and China are capable of disrupting critical infrastructure in the United States, and Iran is not far behind, according to the Worldwide Threat...
Cybercrime
An Iran-linked cyber-espionage group responsible for widespread theft of data is using a broad range of custom and off-the-shelf tools, FireEye security researchers say.
Cybercrime
The US Justice Department on Monday unveiled sweeping charges against Chinese telecommunications giant Huawei in two cases likely to ratchet up tensions between the...
Cybercrime
Law enforcement agencies in the United States and Europe today announced the seizure of xDedic, an underground online marketplace selling access to hacked servers...
Cybercrime
If you see a video of a politician speaking words he never would utter, or a Hollywood star improbably appearing in a cheap adult...
Cybercrime
The researchers who reported that Israeli software was used to spy on Washington Post journalist Jamal Khashoggi's inner circle before his gruesome death are...
Cybercrime
Researchers from Kaspersky Lab’s Industrial Control Systems Cyber Emergency Response Team (ICS CERT) have found significant overlaps in GreyEnergy and Zebrocy activity, both of...
Audits
The U.S. Department of Homeland Security (DHS) on Tuesday issued an emergency directive instructing federal agencies to prevent and respond to DNS hijacking attacks.
Cybercrime
Nearly 100,000 malware distribution websites have been identified and taken down over the course of 10 months as part of an abuse.ch project called...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)