Cybercrime
Video games developer Riot Games says source code was stolen from its development environment in a ransomware attack
Hi, what are you looking for?
SecurityWeek
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cybercrime
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Artificial Intelligence
Artificial intelligence is competing in another endeavor once limited to humans — creating propaganda and disinformation.
Cybercrime
Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.
Cybercrime
A digital ad fraud scheme dubbed "VastFlux" spoofed over 1,700 apps and peaked at 12 billion ad requests per day before being shut down.
Application Security
PayPal is alerting roughly 35,000 individuals that their accounts have been targeted in a credential stuffing campaign.
Cybercrime
Cybercriminals earned significantly less from ransomware attacks in 2022 compared to 2021 as victims are increasingly refusing to pay ransom demands.
Cybercrime
The owner of China-based cryptocurrency exchange Bitzlato was arrested in Miami along with five associates in Europe
Cybercrime
Most internet-exposed Cacti installations have not been patched against a critical-severity command injection vulnerability that is being exploited in attacks.
Cybercrime
A Pro-Russian cybercrime group named NoName057(16) is actively launching distributed denial-of-service (DDoS) attacks against organizations in Ukraine and NATO countries.
Cybercrime
British news organization The Guardian has confirmed that personal information was compromised in a ransomware attack in December 2022.
Cybercrime
Exploitation of a critical vulnerability affecting the widely used SugarCRM customer relationship management system was seen just days after someone made public an exploit.
Cybercrime
A cybercrime group tracked as Scattered Spider has been observed exploiting an old vulnerability in an Intel Ethernet diagnostics driver for Windows in recent...
Cybercrime
UK-based manufacturing company Morgan Advanced Materials revealed on Tuesday that it’s investigating a cybersecurity incident.The company has launched an investigation after detecting unauthorized activity...
Cyber Insurance
Third-party administrator of insurance products Bay Bridge Administrators (BBA) is informing roughly 250,000 individuals that their personal information might have been compromised in a...
Cybercrime
Software supply chain security firm Phylum has identified a malicious attack targeting Python Package Index (PyPI) users with the PoweRAT backdoor and information stealer.
Cybercrime
Iowa’s largest school district cancelled classes for Tuesday after determining there was a cyber attack on its technology network.Des Moines Public Schools announced Monday...
Cybercrime
Franco-Dutch airline company Air France-KLM has started informing Flying Blue customers of a data breach involving their user accounts.Air France-KLM was formed in 2004,...
Compliance
The Federal Communications Commission (FCC) is proposing tighter rules on the reporting of data breaches by wireless carriers.The updated rules, the FCC says, will...
Cybercrime
More than a dozen new Mac malware families were discovered in 2022, including information stealers, cryptocurrency miners, loaders, and backdoors, and many of them...
Cybercrime
The cybercriminals behind the Dridex banking trojan have adopted a new tactic in recent attacks targeting macOS devices, overwriting the victim’s document files to...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)