Cybercrime
Security researchers with Kaspersky have analyzed a UEFI firmware rootkit that appears to target specific motherboard models from Gigabyte and Asus.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Cybercrime
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Cybercrime
The company says it took some of its systems offline to contain a security issue within its network.
Cybercrime
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
Cybercrime
T- Mobile has agreed to pay $350 million to customers affected by a class action lawsuit filed after the company disclosed last August that...
Cybercrime
A new cross-platform ransomware named Luna can encrypt files on Windows, Linux and ESXi, but its developers are only offering it to Russian-speaking affiliates.
Cybercrime
The United States Cyber Command (USCYBERCOM) this week released indicators of compromise (IoCs) associated with malware families identified in recent attacks targeting Ukraine.
Cybercrime
An actively exploited Chrome zero-day that Google patched on July 4 has been linked to an Israeli spyware company and used in targeted attacks...
Cybercrime
Russia-linked Turla threat actor spotted using Android malware for first timeGoogle and the European Union have issued separate warnings this week over Russian cyberattacks...
Cybercrime
California-based Nubeva is building technology to recover encrypted data without making ransomware payments
Cybercrime
The FBI and Justice Department recently disrupted the activities of a hacking group that was sponsored by the North Korean government and that targeted...
Cybercrime
A Chinese threat actor named Roaming Mantis has been targeting Android users in France with the MoqHao malware in a new smishing campaign, security...
Cybercrime
The Federal Bureau of Investigation (FBI) is warning financial institutions and investors of fraudulent cryptocurrency investment applications used to defraud victims of millions of...
Cybercrime
Security researchers with Palo Alto Networks have detailed a recent campaign targeting the Elastix system in Digium phones with a web shell that allows...
Cybercrime
Tools advertised as being capable of cracking passwords for HMIs, PLCs and other industrial products have been found to exploit a zero-day vulnerability, and...
Cybercrime
The Wordfence team at WordPress security company Defiant warns of an increase in attacks targeting an unpatched vulnerability in the Kaswara addon for the...
Cybercrime
Web protection firm Cloudflare warns that a small but powerful botnet has launched distributed denial-of-service (DDoS) attacks on roughly 1,000 organizations over the past...
Cybercrime
Microsoft this week sounded the alarm on a North Korean threat actor using the H0lyGh0st ransomware in attacks targeting small and midsize businesses worldwide.
Cybercrime
If Twitter's lawsuit over Elon Musk's $44 billion buyout bid ever reaches trial, the case will likely center on a ubiquitous and often unloved...
Cybercrime
Security researchers with threat intelligence firm Cyble have warned organizations about three new ransomware families named Lilith, RedAlert and 0mega.
Cybercrime
Japanese video game publisher Bandai Namco has confirmed being hit by a cyberattack that forced it to disconnect some systems from its network.Bandai Namco...
Cybercrime
Microsoft has warned users about a large-scale phishing campaign that has been targeting over 10,000 organizations to perform follow-on business email compromise (BEC).
Cybercrime
The cybercriminals behind the ALPHV ransomware have created a searchable database where employees and customers of their victims can search for their data.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)