Cybercrime
GambleForce uses SQL injections to hack gambling, government, retail, and travel websites to steal sensitive information.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cybercrime
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Cybercrime
Microsoft disrupts Storm-1152, a cybercrime-as-a-service business facilitating phishing, identity theft, and DDoS attacks.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: fake Lockdown Mode, a new Linux RAT, jailbreaking AI, and an entire country’s DNS hijacked.
Cybercrime
The US and UK announce charges and sanctions against two hackers working with Russia’s FSB security service.
Cybercrime
Nissan Oceania says it has been working on restoring its systems after falling victim to a cyberattack.
Cybercrime
BlackBerry attributes cyberattack against an aerospace organization in the US to a new threat actor named AeroBlade.
Cybercrime
Russian national Vladimir Dunaev pleaded guilty to involvement in the development and use of the TrickBot malware that caused tens of millions of dollars...
Cybercrime
Recorded Future calculates that North Korean state-sponsored threat actors are believed to have stolen more than $3 billion in cryptocurrency.
Cybercrime
Office supply retail giant confirms security incident disrupted online orders, communications channels and customer service lines.
Cybercrime
US Treasury sanctions Sinbad, saying the cryptocurrency mixer is laundering funds for North Korean hacking group Lazarus.
Cybercrime
Amir Golshan of Los Angeles was sentenced to 96 months in prison for perpetrating multiple cybercrime schemes.
Cybercrime
Hacktivism is evolving. It is important for both the law and cyber defenders to understand the current and potential activity of hacktivism to better...
Cybercrime
Cybercriminals hacked into the Kansas court system, stole sensitive data and threatened to post it on the dark web in a ransomware attack that...
Cybercrime
Two environmentalists told a judge that the public was the real victim of a global computer hacking campaign that targeted those fighting big oil...
Cybercrime
Wisconsin teenager Joseph Garrison has admitted in court to launching a credential stuffing attack on a betting website.
Cybercrime
Under the new rules, wireless carriers are required to notify customers of any SIM transfer requests, a measure designed to thwart fraudulent attempts by...
Cybercrime
Researchers uncover the activities of Appin, a hack-for-hire Indian firm involved in espionage, surveillance, and disruptive attacks.
Cybercrime
Aviram Azari, an Israeli man who made nearly $5 million from a hacking scheme, has been sentenced to 80 months in prison in the...
Cybercrime
The top five categories of Bad Bot attacks are fake account creation, account takeovers, scraping, account management, and in-product abuse.
Cloud Security
Researchers warn attackers are targeting MySQL servers and Docker hosts to plant malware capable of launching distributed DDoS attacks.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)