Cybercrime
The US Justice Department on Thursday indicted two Chinese hackers tied to Beijing's security services who allegedly targeted companies and agencies in a dozen...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Cybercrime
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons.
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
Researchers continue to analyze the recent Shamoon 3 attacks and they have discovered more links to Iran and additional components of the malware.
Cybercrime
The U.S. Treasury Department on Wednesday announced sanctions against nearly two dozen Russia-related individuals and entities over their roles in election interference, hacking the...
Cybercrime
An out-of-band update released by Microsoft on Wednesday for its Internet Explorer web browser patches a zero-day vulnerability exploited by malicious actors in targeted...
Cloud Security
A malicious email campaign targeting employees of banks and financial services companies in the United States and the United Kingdom has been abusing Google...
Cybercrime
One in four (27%) employees of healthcare organizations in North America admit to being aware of a ransomware attack targeting their employer over the...
Cybercrime
ATHENS, Greece (AP) — Greece's supreme court has accepted a French extradition request for a Russian bitcoin fraud suspect, whom the same court has,...
Cybercrime
Hackers apparently connected to China accessed thousands of sensitive EU diplomatic cables, the New York Times reported Wednesday, in the latest embarrassing data breach...
Cybercrime
Social security numbers and other personal information belonging to employees of the U.S. National Aeronautics and Space Administration (NASA) may have been stolen after...
Cybercrime
While investigating an information disclosure flaw affecting one of its support forms, Twitter discovered a possible attack coming from IP addresses that may be...
Cybercrime
Los Altos, California-based startup 4iQ, which describes its self as the "identity intelligence company", this week announced that it has secured $18 million in Series B...
Cybercrime
A wave of bomb threats emailed Thursday to hundreds of schools, businesses and government buildings across the U.S. triggered searches, evacuations and fear —...
Cybercrime
LONDON — As U.S. President Donald Trump re-imposed harsh economic sanctions on Iran last month, hackers scrambled to break into personal emails of American...
Cybercrime
A recent campaign attributed to the Russian cyber-espionage group Sofacy hit government agencies in four continents in an attempt to infect them with malware,...
Cybercrime
The French foreign ministry said Thursday its travel alert registry website had been pirated and citizens' personal data "could be misused".In a statement the...
Cybercrime
Researchers from Group-IB have discovered more than 40,000 user accounts on the Dark Web that appear to be compromised credentials for online government websites...
Cybercrime
Experts believe that the Windows kernel zero-day vulnerability fixed this week by Microsoft with its Patch Tuesday updates has been exploited by several threat...
Cybercrime
Several critical infrastructure organizations in Russia have been targeted by hackers believed to be financially-motivated cybercriminals rather than state-sponsored cyberspies.
Cybercrime
Organizations are getting better at detecting intrusions on their own, but it still takes them a long time to do it, according to a...
Cybercrime
7,000 Twitter Amplification Bots Found in One Day's Search
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)