Cyberwarfare
Kaspersky is warning of a previously unknown espionage campaign targeting the Persian-speaking religious minority Bahaʼi with Android spyware.As part of the campaign, victims were...
Hi, what are you looking for?
SecurityWeek
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cyberwarfare
The 17 members of the Mabna Institute targeted hundreds of universities and organizations in the US and abroad.
Cyberwarfare
CrowdStrike co-founder Dmitri Alperovitch discusses how cyber operations support kinetic warfare, signal coming conflicts, and reshape the global battlefield.
Cyberwarfare
The move targeted people and entities accused of links to an online spying network that the EU claims targeted governments and carried out sabotage...
Cybercrime
UK opposition politicians called for an investigation Saturday after a newspaper reported that suspected Kremlin agents had hacked ex-Prime Minister Liz Truss's cell phone...
Cybercrime
Cyberattacks hit the Slovak and Polish parliaments on Thursday, bringing down the voting system in Slovakia's legislature, parliamentary authorities said."The attack was multi-directional, including...
Cyberwarfare
Albanian Prime Minister Edi Rama arrived in Israel on Sunday for an official visit that will include a meeting with Israeli cyber defense officials,...
Cyberwarfare
Iran's Atomic Energy Organisation said Sunday an email server of its subsidiary was hacked in a "foreign" attack aimed at drawing "attention" amid protests...
Cybercrime
The Federal Bureau of Investigation on Thursday issued an alert to warn that Iranian cyber group Emennet Pasargad is targeting organizations to steal their...
Application Security
Cybersecurity firm SafeBreach has issued a warning about a new PowerShell backdoor that disguises itself as part of the Windows update process to remain...
Cyberwarfare
The Chinese state-sponsored threat group Winnti has been observed targeting governmental entities in Sri Lanka and Hong Kong in recent campaigns.
Audits
California startup Bolster, Inc. has raised $15 million in venture capital funding to build a fraud prevention platform for businesses.The early-stage funding round was...
Cyberwarfare
Germany's cybersecurity chief was sacked on Tuesday after a TV satire show accused him of having ties to Russian intelligence services, with the country...
Application Security
European venture capital and private equity firm Smartfin on Tuesday announced a deal to acquire Hex-Rays, the Belgian company behind the widely deployed IDA...
Application Security
Messaging and collaboration software maker Zimbra has rushed out patches to provide cover for a code execution flaw that has already been exploited to...
Application Security
Video messaging technology powerhouse Zoom has rolled out a high-priority patch for macOS users alongside a warning that hackers could abuse the software flaw...
Cyber Insurance
ESET has published an analysis of the seven backdoors that Lebanese advanced persistent threat (APT) actor Polonium has been using since September 2021 in...
Cyberwarfare
A newly identified cyberespionage group operating out of China has been targeting IT services providers and telecommunications companies with signed malware.
Cyberwarfare
A China-linked cyberespionage group was recently observed targeting a state legislature in the United States, Symantec warns.
Cyberwarfare
Fortinet has confirmed that the critical vulnerability whose existence came to light last week is a zero-day flaw that has been exploited in at...
Cyberwarfare
Britain's GCHQ spy agency chief will warn Western countries Tuesday of the "huge threat" from China seeking to exploit its tech dominance to control...
Application Security
It’s officially a venture capital funding frenzy in the software supply chain security space.
Cybercrime
Germany's cyber security agency chief is facing the sack over alleged ties with Russian intelligence services, government sources told AFP on Monday, amid heightened...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)