Cybercrime
A federal jury on Friday convicted a former Seattle tech worker of several charges related to a massive hack of Capital One bank and...
Hi, what are you looking for?
SecurityWeek
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cybercrime
The personal information of millions of individuals may have been stolen by threat actors as a result of a data breach at Eye Care...
Cybercrime
HR consulting firm Robert Half has started informing customers that their personal and financial information might have been compromised after hackers targeted their RobertHalf.com...
Cybercrime
The United States on Thursday announced the takedown of a botnet operated by Russian cybercriminals that ensnared millions of devices worldwide.
Cybercrime
More than one million WordPress websites were potentially impacted by a critical Ninja Forms plugin vulnerability that appears to have been exploited in the...
Cybercrime
Teachers unable to get paychecks. Tax and customs systems paralyzed. Health officials unable to access medical records or track the spread of COVID-19. A...
Cybercrime
Interpol announced on Wednesday that many individuals have been arrested and a significant amount of criminal assets have been seized as part of an...
Cybercrime
Security and web performance services provider Cloudflare this week announced that it has mitigated a record-breaking distributed denial-of-service (DDoS) attack that peaked at 26...
Cybercrime
Microsoft on Tuesday announced that it’s acquiring Miburo, a New York-based cyber threat analysis and research company that specializes in foreign information operations.Miburo provides...
Cybercrime
Microsoft has fixed roughly 50 vulnerabilities with its June 2022 Patch Tuesday updates, including the actively exploited flaw known as Follina and CVE-2022-30190.
Cybercrime
The operator of an infamous service that allowed users to launch distributed denial-of-service (DDoS) attacks was sentenced on Monday to 24 months in prison.
Application Security
Cybercriminals likely operating out of China are distributing backdoored versions of iOS and Android Web3 wallets in an effort to steal users’ seed phrase.
Cybercrime
A recently patched Confluence Server vulnerability is being exploited by multiple cybercrime and state-sponsored threat groups, according to Microsoft.
Cybercrime
Several malware families are being delivered using the recently disclosed Windows vulnerability identified as Follina and CVE-2022-30190, which remains without an official patch.
Cybercrime
Several US government agencies have issued a joint cybersecurity advisory to provide information on the techniques and tactics that China-linked threat actors have been...
Cybercrime
Threat actors have already started exploiting a severe vulnerability that Owl Labs addressed in its video conferencing devices earlier this week.
Cybercrime
It doesn’t pay to pay. This advice on ransomware payment is often given, but rarely enumerated. Now it has been. A new study finds...
Cybercrime
Shields Health Care Group has informed roughly two million individuals of a cybersecurity incident that potentially impacted their personal data.The Massachusetts-based firm provides management...
Cybercrime
US law enforcement on Tuesday announced the takedown of SSNDOB Marketplace, a series of websites selling personally identifiable information (PII).For years, the SSNDOB Marketplace...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)