Cybercrime
The function of cybersecurity is not to eliminate all attacks and compromises – that’s impossible – but to make the attack so expensive and...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
Users are urged to immediately patch an Apache HTTP Server zero-day vulnerability that has been exploited in the wild. More than 100,000 servers appear...
Cybercrime
Superheroes may be able to save everyone in a fantasy world, but they can’t keep online accounts secure in the digital era, Mozilla warns.With...
Cyber Insurance
Syniverse, a company whose connectivity services are used by nearly all mobile carriers in the world, said hackers had access to its information technology...
Cybercrime
Two individuals who were allegedly part of a “prolific” ransomware group have been arrested in Ukraine, Europol and Ukraine’s Cyber Police announced on Monday.
Cybercrime
Coinbase last week sent out notification letters to thousands of users to inform them that funds were stolen from their accounts during an attack...
Cybercrime
Computer systems are being restored in Pottawatomie County are after hackers launched a ransomware attack on Sept. 17, county officials said Friday.The county resolved...
Cybercrime
An Alabama woman whose 9-month-old daughter died has filed suit against the hospital where she was born claiming it did not disclose that its...
Cybercrime
New "ChamelGang" APT group group has not been associated with any existing threat actor
Cybercrime
U.S. senators this week introduced a bill that would require critical infrastructure organizations to inform the Cybersecurity and Infrastructure Security Agency (CISA) if they...
Cybercrime
A Turkish national has been indicted in the Northern District of Illinois for launching a distributed denial-of-service (DDoS) attack against a hospitality company headquartered...
Cybercrime
The COVID-19 pandemic has enlarged the threat landscape for all industry sectors; but none more so than healthcare. The primary areas of concern include...
Cybercrime
Russia on Wednesday detained the head of one of the country's leading cybersecurity firms on charges of treason, in a move that targets a...
Cybercrime
Microsoft on Monday published a blog post detailing a piece of malware used by the threat actor behind the SolarWinds attack to exfiltrate data...
Cybercrime
Enterprise users have been warned that cybercriminals may be trying to phish their credentials by luring them with fake emails that appear to be...
Cybercrime
A prominent American cryptocurrency promoter and former hacker has pleaded guilty to advising North Korea on using virtual money to avoid international controls, a...
Cybercrime
Controversial web services provider Epik last week confirmed that sensitive information pertaining to its customers was stolen in a data breach.
Cybercrime
VMware has confirmed that the recently patched vCenter Server vulnerability tracked as CVE-2021-22005 has been exploited in the wild, and some researchers say it...
Cybercrime
A threat actor is employing commercial remote access Trojans (RATs) in a series of malicious attacks targeting Indian government and military personnel, Cisco’s Talos...
Cybercrime
A cyberespionage group active since at least 2019 started exploiting ProxyLogon one day after the Microsoft Exchange vulnerability was publicly disclosed, ESET security researchers...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)