Application Security
The Industrialization of Hacking Has Created a Wave of Threats That are Increasingly Sophisticated
Hi, what are you looking for?
SecurityWeek
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cybercrime
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Cybercrime
Universities face unique challenges keeping their servers and networks secure from cyber-criminals while accommodating the influx of student and faculty-owned devices each year. A...
Cybercrime
A recent report from Blue Coat Systems, has revealed that the number of malicious networks – or "Malnets" – has tripled in the last...
Cybercrime
Professional, coordinated attackers with a plan, breached a server maintained by Northwest Florida State College (NWFSC) and walked off with nearly 300,000 records, and...
Cybercrime
The Irish version of Google and Yahoo briefly went offline on Tuesday when unknown perpetrators managed to change the sites' Domain Name Server records,...
Cybercrime
A Russian cyber-criminal going by the handle vorVzakone may be behind the plan to launch a series of Trojan attacks against financial institutions, Brian...
Cybercrime
MANILA - The Philippine Supreme Court Tuesday suspended a controversial cybercrime law, the government said, amid huge online protests over fears it would impose...
Cybercrime
Late Sunday, a report surfaced from the US House Intelligence Committee, compiled after nearly a yearlong investigation, that said two Chinese telecom equipment makers "cannot...
Cybercrime
Crime may not always pay, but it is always costly. At least that is the case for companies in the U.S., according to a...
Cybercrime
NullCrew, known for their attack against the University of Cambridge last month, as well as Sony’s mobile division, has now targeted one of the...
Cybercrime
MANILA - Hackers incensed by the Philippines' controversial cybercrime law have attacked government sites that deliver emergency information during natural disasters, an official said...
Cybercrime
During a Wave of Trojan Attacks, a Virtual-machine-synching Module Would "Duplicate" Victim PCs and Use a Genuine IP Address When Compromising Accounts...A gang of...
Cybercrime
MANILA - Philippine President Benigno Aquino defended a new cybercrime law Friday amid a storm of protests from critics who say it will severely...
Cybercrime
MOSCOW - Russian diplomats and security chiefs denied Thursday sending their spies to the United States to purchase high-tech military electronics and detonators in...
Cybercrime
Banking Trojans offered up via the BlackHole exploit kit created pages dominated the malware scene over the third quarter, according to a new threat...
Cybercrime
Microsoft Settles with 3322.org Operators in Nitol Botnet Case
Cybercrime
WASHINGTON - US officials said Wednesday they shut down a series of so-called tech support scams, mostly operating from India, which duped consumers into...
Cybercrime
Google: "Tens of Thousands of Users" Will See New State-sponsored Attack Warnings
Cybercrime
MANILA - The Philippine government faced a barrage of Internet protests on Wednesday as a cybercrime law went into effect that could see people...
Cybercrime
The Federal Trade Commission (FTC) said today that a federal court has inflicted a judgment of more than $163 million on the final defendant...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)