Cybercrime
Financially motivated threat actors have started using new code signing tricks to increase the chances of their software evading detection on Windows systems, Google’s...
Hi, what are you looking for?
SecurityWeek
Cybercrime
Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Cybercrime
The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.
Cybercrime
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Cybercrime
A major U.S. port was the target last month of suspected nation-state hackers, according to officials.The Port of Houston, a critical piece of infrastructure...
Cybercrime
A U.S.-based private cybersecurity company said Wednesday it has uncovered evidence that an Indian media conglomerate, a police department and the agency responsible for...
Cybercrime
The internet is already being scanned for VMware vCenter servers affected by CVE-2021-22005, a critical vulnerability for which the virtualization giant announced patches just...
Cybercrime
Threat actors have targeted Russian government organizations with malicious documents designed to exploit the recently patched MSHTML zero-day flaw in Microsoft Office, security researchers...
Cybercrime
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and the NSA have issued a joint alert to warn organizations about an increase...
Cybercrime
The Biden administration sought Tuesday to choke the finances of criminal ransomware gangs, announcing sanctions against a Russia-based virtual currency brokerage that officials say...
Cybercrime
Cybercriminals are hoping to obtain millions of dollars from a major farmer cooperative in the United States after they breached its systems, encrypted files,...
Cybercrime
Attackers are increasingly targeting a remote code execution vulnerability in the Open Management Infrastructure (OMI) framework that Microsoft released patches for earlier this month.
Cybercrime
Spanish and Italian authorities have dismantled an organized crime group allegedly involved in online fraud, money laundering, and other illegal activities.
Cybercrime
Using Microsoft’s Windows Subsystem for Linux (WSL), attackers have leveraged Linux binaries to load payloads into Windows processes, according to researchers with Black Lotus...
Cyber Insurance
The Alaska health department has shared more information about the cyberattack detected earlier this year, and the organization says the attack was conducted by...
Cybercrime
Government departments in at least 7 countries in the Asia-Pacific (APAC) and Europe, the Middle East and Africa (EMEA) regions have been targeted in...
Cybercrime
A threat actor likely operating out of Nigeria has been engaged in various malicious campaigns for the past five years and it has mainly...
Cybercrime
An Illinois man who operated an infamous online service allowing users to launch distributed denial-of-service (DDoS) attacks on selected targets was found guilty of...
Cybercrime
Muhammad Fahd, a 35-year-old Pakistani national, has been sentenced to 12 years of prison in the United States for his role in a scheme...
Cybercrime
Microsoft on Thursday published additional guidance on addressing recently disclosed vulnerabilities in the Open Management Infrastructure (OMI) framework, along with new protections to resolve...
Cybercrime
Suspected hackers last month briefly disrupted the website of the authority running Germany's September 26 general election, a spokesman for the body told AFP...
Cybercrime
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Coast Guard Cyber Command (CGCYBER) have sounded the...
Cybercrime
Hackers stole the personal data of around 1.4 million people who took Covid-19 tests in the Paris region in the middle of 2020, hospital...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)