Application Security
Trend Micro’s Zero Day Initiative, a major player in the vulnerability disclosure ecosystem, is ramping up the pressure on software vendors that consistently ship...
Hi, what are you looking for?
SecurityWeek
Cybercrime
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
Cyberwarfare
The 17 members of the Mabna Institute targeted hundreds of universities and organizations in the US and abroad.
Cyberwarfare
CrowdStrike co-founder Dmitri Alperovitch discusses how cyber operations support kinetic warfare, signal coming conflicts, and reshape the global battlefield.
Cyberwarfare
The move targeted people and entities accused of links to an online spying network that the EU claims targeted governments and carried out sabotage...
Cybercrime
Mandiant has been tracking an activity cluster from what it believes is a single Iranian threat group that has been targeting Israeli interests, especially the shipping industry. The activity...
Application Security
Microsoft on Monday announced another major disruption of an APT actor believed to be linked to the Russian government, cutting off access to accounts...
Cybercrime
China-linked cyberespionage group Iron Tiger was observed using the compromised servers of a chat application for the delivery of malware to Windows and macOS...
Cyberwarfare
On August 1, Lockheed Martin was supposedly targeted with a DDoS attack delivered by the pro-Russian hacker group Killnet. The information came via the...
Cybercrime
A new zero-day vulnerability affecting Zimbra has been exploited to hack more than 1,000 enterprise email servers, according to incident response firm Volexity.
Cloud Security
The threat actor that recently breached Twilio systems also targeted Cloudflare, and a few of the web security company’s employees fell for the phishing...
Application Security
Enterprise software vendor Twilio (NYSE: TWLO) has been hacked by a relentless threat actor who successfully tricked employees into giving up login credentials that...
Cyberwarfare
Facebook’s parent company Meta took action earlier this year against two cross-platform cyberespionage operations that relied on various online services for malware distribution.
Cyberwarfare
A recent cyberespionage operation aimed at industrial enterprises and public institutions in Eastern Europe and Afghanistan has been linked to a threat actor that...
Cyberwarfare
The recent cyberattacks that disrupted government systems in NATO member Albania have been linked by threat intelligence giant Mandiant to Iran.
Cybersecurity Funding
Social media threat protection firm ZeroFox will begin trading on the Nasdaq Stock Market today as a result of the previously announced deal by...
Cybercrime
Major Taiwanese government websites were temporarily forced offline by cyber attacks believed to be linked to China and Russia during US House Speaker Nancy...
Cybercrime
Austria said Friday that it was investigating a report that an Austrian company developed spyware targeting law firms, banks and consultancies in at least...
Application Security
Cybersleuths at Microsoft have found a link between the recent 'Raspberry Robin' USB-based worm attacks and EvilCorp, a notorious Russian ransomware operation sanctioned by...
Cyberwarfare
Over the past year, North Korean advanced persistent threat (APT) actor Kimsuky has been observed using a browser extension to steal content from victims’...
Application Security
Cybersecurity professionals from Google's threat hunting unit and the University of Toronto's Citizen Lab are upping the pressure on mercenary hacking firms selling high-end...
Cybercrime
The US House of Representatives this week passed two cybersecurity bills: the Energy Cybersecurity University Leadership Act and the RANSOMWARE Act.RANSOMWARE is an acronym...
Application Security
Malware hunters at Microsoft have caught an Austrian hack-for-hire company exploiting zero-day flaws in Windows and Adobe software products in "limited and targeted attacks"...
Audits
A study commissioned by IBM Security says the global average cost of a data breach reached an all-time high of $4.35 million and warned...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)