Cybercrime
The Godfather Android banking trojan has been observed targeting over 400 banking and crypto applications in 16 countries, threat intelligence firm Group-IB warns.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cybercrime
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Cybercrime
The US Justice Department has announced the arrest of two men allegedly involved in a hacking scheme targeting the taxi dispatch system at John...
Cybercrime
Recent Play ransomware attacks targeting Exchange servers were observed using a new exploit chain that bypasses Microsoft’s ProxyNotShell mitigations.
Cybercrime
German industrial engineering and steel production giant Thyssenkrupp has again confirmed being targeted by cybercriminals.The company told SecurityWeek that ‘organized crime’ is believed to...
Cybercrime
Sports betting firm DraftKings says the personal data of 68,000 individuals has been compromised in a recent data breach.The incident, initially disclosed in November,...
Cybercrime
A recently identified information stealer named ‘RisePro’ is being distributed by pay-per-install malware downloader service ‘PrivateLoader’, cyberthreat firm Flashpoint reports.Written in C++, RisePro harvests...
Cybercrime
Security researchers with ReversingLabs warn of a new supply chain attack using a malicious PyPI module that poses as a software development kit (SDK)...
Cybercrime
An analysis conducted by OT and IoT cybersecurity firm Nozomi Networks shows that the Glupteba botnet is still active following Google’s efforts to disrupt...
Cybercrime
Social media analytics service Social Blade has confirmed a security breach after a hacker offered to sell a database allegedly stolen from the company’s...
Cybercrime
Australia’s TPG Telecom this week announced that a threat actor has gained unauthorized access to a service hosting the email accounts of 15,000 customers.
Cybercrime
A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of...
Cybercrime
The US Cybersecurity and Infrastructure Security Agency (CISA) has added two flaws affecting Veeam’s Backup & Replication product to its Known Exploited Vulnerabilities Catalog.
Cybercrime
Several cybersecurity firms have warned Microsoft that cybercriminals have been using signed malicious drivers to kill processes associated with antivirus (AV) and endpoint detection...
Cybercrime
Authorities in California have confirmed that a cybersecurity incident involving the Department of Finance is being investigated after a cybercrime group claimed to have...
Cybercrime
Security researchers with Juniper Networks’ Threat Labs warn of a new Python-based backdoor targeting VMware ESXi virtualization servers.
Cybercrime
Twitter has responded to recent data leak reports, confirming that the exposed information is the same as the one that was making the rounds...
Cybercrime
Information apparently belonging to ride-hailing giant Uber has been leaked online and the source of the data is likely a third-party IT vendor.Over the...
Cybercrime
The US Department of Justice has announced the arrest of four individuals for their alleged roles in a fraud scheme targeting businesses, banks, and...
Cybercrime
Fortinet’s security researchers have shared information on three new ransomware families named Aerst, ScareCrow, and Vohuk.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)