Cybercrime
Hackers rely on evolved vishing and login harvesting to compromise SSO credentials for unauthorized MFA enrollment.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Cybercrime
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Cybercrime
The company says it took some of its systems offline to contain a security issue within its network.
Cybercrime
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
Cybercrime
A total of 87 individuals, mostly Venezuelan nationals, have been charged for their role in the ATM jackpotting scheme.
Cybercrime
Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork.
Cybercrime
The WorldLeaks cybercrime group claims to have stolen information from the footwear and apparel giant’s systems.
Cybercrime
Dozens of Venezuelan nationals have been charged by the US for their role in ATM jackpotting attacks.
Cybercrime
Threat actors may have wanted to take advantage of the holiday weekend in the United States to increase their chances of success.
Cybercrime
Operating as an access broker, the defendant sold unauthorized access to compromised networks to an undercover agent.
Cybercrime
Nicholas Moore pleaded guilty to repeatedly hacking the U.S. Supreme Court’s filing system and illegally accessing computer systems belonging to AmeriCorps and the Department...
Cybercrime
Other noteworthy stories that might have slipped under the radar: BodySnatcher agentic AI hijacking, Telegram IP exposure, shipping systems hacked by researcher.
Artificial Intelligence
We've known that social engineering would get AI wings. Now, at the beginning of 2026, we are learning just how high those wings can...
Cybercrime
RedVDS enables threat actors to set up servers that can be used for phishing, BEC attacks, account takeover, and fraud.
Cybercrime
Using fake accounts and synthetic data to lure the hackers, the researchers gathered information on their servers.
Cybercrime
Flights across Greece were impacted for several hours after noise was reported on multiple air traffic communication channels.
Cybercrime
Central computer systems at French national postal service La Poste were knocked offline Monday in DDoS attack.
Cybercrime
The cybercriminals attempted to steal $28 million from compromised bank accounts through phishing.
Cybercrime
Authorities in Senegal, Ghana, Benin, and Cameroon dismantled BEC, ransomware, and other cyber-fraud networks.
Cybercrime
A cyberattack knocked France’s national postal service offline, blocking and delaying package deliveries and online payments.
Cybercrime
Shannon Miller shares her approach to creating domestic safety and a call to the cyber community to help reduce harm.
Cybercrime
The Department of Justice charged 54 individuals, including leaders and members of the Venezuelan crime syndicate Tren de Aragua.
Cybercrime
Artem Stryzhak pleaded guilty to conspiracy to commit computer fraud after he was extradited earlier this year.
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)