Cybercrime
A group of cybercriminals used mobile emulators to spoof thousands of mobile devices , which enabled them to steal millions of dollars within days.Targeting...
Hi, what are you looking for?
SecurityWeek
Fraud & Identity Theft
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Fraud & Identity Theft
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.
Data Breaches
Hackers recently obtained non-sensitive customer information and other documents from the company.
Fraud & Identity Theft
US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater of war”.
Fraud & Identity Theft
Data and Evidence Are Important to Properly Detecting, Preventing, and Investigating Both Security and Fraud Incidents
Application Security
The OpenSSL Project today warned that the widely deployed TLS/SSL toolkit is vulnerable to a serious security flaw that exposes users to denial-of-service attacks.
Endpoint Security
Looking to beef up its portfolio of consumer security software, NortonLifeLock on Monday announced an all-cash $360 million deal to snap up German anti-virus...
Cybercrime
A man pleaded guilty Thursday to his role in a computer protection services scam that cheated victims out of nearly $1 million by misleading...
Cybercrime
The Federal Bureau of Investigation (FBI) has issued a notification to warn organizations of scammers setting up auto-forwarding email rules to facilitate business email...
Fraud & Identity Theft
Like many markets in technology, the fraud detection and prevention category is a crowded one. With different types of solutions approaching the fraud problem...
Cybercrime
Three Nigerian nationals have been arrested in Lagos for their suspected involvement in Business Email Compromise (BEC) scams.The three — identified only as OC,...
Cybercrime
The Federal Bureau of Investigation (FBI) this week issued an alert to warn the public of spoofed FBI-related Internet domains.According to the agency, “unattributed...
Audits
Cybersecurity solutions provider Trend Micro this week announced the release of a free tool designed to help users boost their privacy online and fight...
Cybersecurity Funding
Forter Becomes Unicorn After $125 Million Series E Funding RoundE-commerce fraud prevention company Forter announced on Thursday that it has achieved “unicorn” status after...
Fraud & Identity Theft
Two election committees of the U.S. Department of Homeland Security (DHS) issued a joint statement on Thursday saying there was no evidence of voting...
Cybercrime
A threat actor specializing in business email compromise (BEC) attacks has been observed exploiting a vulnerability to spoof the domains of Rackspace customers as...
Cybercrime
Malwarebytes security researchers have identified a new campaign in which tech support scammers are exploiting a cross-site scripting (XSS) vulnerability and are relying exclusively...
Cybercrime
The email from a political action committee seemed harmless: if you support Joe Biden, it urged, click here to make sure you’re registered to...
Cyber Insurance
A Russian goes on trial in Paris Monday accused of having defrauded nearly 200 victims across the world of 135 million euros using ransomware.
Cybercrime
The United States this week announced that it seized a total of 92 domain names that an Iran-linked adversary was leveraging in a global...
Fraud & Identity Theft
The United States Department of Justice on Monday unsealed an indictment that charges John David McAfee with tax evasion.
Cybercrime
Hackers associated with the “Fullz House” group have compromised the website of Boom! Mobile and planted a web skimmer, Malwarebytes reports.
Cybercrime
Facebook on Thursday released a detailed technical report on a malware campaign that targeted its ad platform for years.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)