Cybercrime
The sprawling cybercrime operation abuses major providers to prevent takedowns and distance itself from sanctions.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Cybercrime
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Cybercrime
The company says it took some of its systems offline to contain a security issue within its network.
Cybercrime
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
Cybercrime
Law enforcement in the US, UK and Canada identified more than $45 million in cryptocurrency and froze $12 million.
Cybercrime
Tracked as UNC6783, the threat actor is likely linked to Mr. Raccoon, the hacker behind the alleged theft of Adobe data from a BPO.
Cybercrime
A hacker transferred more than 50 bitcoin from the Bitcoin ATM operator’s wallets after stealing credentials.
Cybercrime
The FBI received over 1 million complaints of malicious activity in 2025, with investment, BEC, and tech support scams causing the highest losses.
Cybercrime
Signature Healthcare was forced to cancel some services, and pharmacies are unable to fill prescriptions due to the hacker attack.
Cybercrime
Shchukin is accused of extorting more than $2 million as the head of the GandCrab and REvil ransomware operations.
Cybercrime
The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults.
Cybercrime
The company is investigating the full scope of the incident, including whether any files have been compromised.
Cybercrime
Jonathan Spalletta exploited smart contract vulnerabilities to steal approximately $55 million in cryptocurrency and cause Uranium to shut down.
Cybercrime
Report shows how industrialized credential theft underpins ransomware, SaaS breaches, and geopolitical attacks, shifting security focus from prevention to detecting misuse of legitimate access.
Cybercrime
The group that it was making available for download emails and other documents from Patel’s account.
Cybercrime
Hambardzum Minasyan of Armenia has been accused of being involved in the development and administration of the infostealer malware.
Cybercrime
Ilya Angelov was a member of the cybercrime group tracked as TA-551, Shathak, Gold Cabin, Monster Libra, and ATK236.
Cybercrime
Aleksei Volkov has been sentenced to 81 months in prison for his role in Yanluowang ransomware attacks.
Cybercrime
The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025.
Cybercrime
Other noteworthy stories that might have slipped under the radar: vulnerabilities found in KVM devices, Claudy Day Claude vulnerabilities, The Gentlemen ransomware group.
Artificial Intelligence
The men violated U.S. export controls laws by scheming to divert massive quantities of the high-performance servers assembled in the United States to China.
Cybercrime
The attacks started on February 27 and have targeted e-commerce platforms, global brands, and government services.
Cybercrime
The lesser-known JackSkid and Mossad botnets have also been targeted in the operation.
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)