Cybercrime
A week before Oregon’s primary election, the secretary of state’s office is moving to protect the integrity of its online system where campaign finance...
Hi, what are you looking for?
SecurityWeek
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cybercrime
New malware samples and a new Tor-based leak website suggest that the REvil ransomware operation has resumed.
Cybercrime
BlackBerry’s security researchers have performed a deep analysis of the DarkCrystal RAT and the dark web activity of its developer.
Cybercrime
Indicators of compromise (IoCs) and other resources have been released to help defenders deal with the actively exploited F5 BIG-IP vulnerability tracked as CVE-2022-1388.
Cybercrime
Eager to hunt down key leaders of the Conti ransomware gang, the United States Government is willing to pay up to $10 million for information...
Cybercrime
Agricultural equipment giant AGCO says its business operations have been impacted after falling victim to a ransomware attack last week.AGCO designs, makes, and distributes...
Application Security
Platform-as-a-service company Heroku this week shared additional details on an April cyberattack that resulted in unauthorized access to multiple customers’ GitHub repositories.
Cybercrime
The Federal Bureau of Investigation says business email compromise (BEC) and email account compromise (EAC) losses have surpassed $43 billion globally.
Cybercrime
"CuckooBees" campaign operated by Chinese cyber espionage group went undetected since 2019
Cybercrime
Researchers at cybersecurity firm SentinelOne have observed a Chinese hacking group taking a trial-and-error approach to abusing antivirus applications for the sideloading of malicious...
Cybercrime
Sixt, a major car rental company that has more than 2,000 locations across over 110 countries, has been targeted in a cyberattack that caused...
Cybercrime
Deepfakes, left unchecked, are set to become the cybercriminals’ next big weapon
Cybercrime
A California man was convicted last week for his role in a multi-million dollar phishing scheme targeting the US Department of Defense (DoD).
Cybercrime
A Michigan community college has cancelled classes indefinitely following a ransomware attack over the weekend.
Application Security
Microsoft-owned code hosting platform GitHub says the recent cyberattack that resulted in the cloning of private repositories was highly targeted in nature.
Cybercrime
A new ransomware operation named Black Basta has targeted at least a dozen companies and some researchers believe there may be a connection to...
Cybercrime
Cybersecurity companies have analyzed “Bumblebee,” a relatively new custom malware downloader that appears to have been used by several cybercrime groups.
Cloud Security
Security and web performance services provider Cloudflare recently mitigated the largest HTTPS distributed denial-of-service (DDoS) attack it has seen to date.
Cybercrime
Elon Musk’s sudden deal to purchase Twitter has triggered optimism in some quarters that the mission to “authenticate all humans” and defeat spam bots...
Cybercrime
Coca-Cola has launched an investigation after a cybercrime group claimed to have breached the company’s systems, but the hackers’ previous claims have been called...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)