Cybercrime
A Russian man this week pleaded guilty in a Manhattan federal court to the hacking of various financial institutions in the United States, including...
Hi, what are you looking for?
SecurityWeek
Fraud & Identity Theft
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Fraud & Identity Theft
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.
Data Breaches
Hackers recently obtained non-sensitive customer information and other documents from the company.
Fraud & Identity Theft
US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater of war”.
Cybercrime
It could be a manipulated video embarrassing a candidate. Or a computer voting system locked by ransomware. Or doubts about electronic voting machines with...
Compliance
Twitter said Friday it has closed down thousands of accounts across the world for spreading fake news as well as pro-government propaganda, including in...
Cybercrime
The United States Department of Justice this week announced the arrest of two individuals charged for participating in a long-term tech support fraud scheme.
Cybercrime
A Magecart threat actor has compromised the websites of two hotel chains to inject scripts targeting Android and iOS users, Trend Micro’s security researchers...
Cybercrime
Philippines immigration agents, backed by troops, have arrested more than 300 Chinese for alleged cyber crimes, a week after a similar number were detained...
Compliance
Facebook this week announced that it removed multiple pages, groups, and accounts engaged in misleading behavior on the social platform.
Cybercrime
Nigerian and US authorities said Tuesday that nearly 300 people had been arrested in a months-long global crackdown on online scams to hijack wire...
Fraud & Identity Theft
Twitter announced on Wednesday that it has decided to temporarily disable the feature that allows users to post tweets via SMS, in an effort...
Cybercrime
Even with considerable security precautions in place, Twitter chief executive Jack Dorsey became the victim of an embarrassing compromise when attackers took control of...
Data Protection
Visa this week announced a new set of capabilities aimed at improving fraud prevention and cybersecurity of payment systems.The new payment security services are...
Cybercrime
Two Florida men have pleaded guilty to wire fraud charges filed in southern Illinois, where they targeted people with fake technical support services.Michael Austin...
Cybercrime
A Pakistani national has been charged by U.S. authorities for his role in a scheme that involved bribing employees of telecommunications giant AT&T to...
Cybercrime
A panel monitoring U.N. sanctions says North Korean cyber experts have illegally raised money for the country’s weapons of mass destruction programs “with total...
Fraud & Identity Theft
Equifax 2017. Marriott 2018. Capital One 2019.
Email Security
Cybercriminals managed to divert $2.5 million in a business email compromise (BEC) scam targeting Cabarrus County, North Carolina. $1.7 million of that has not...
Cybercrime
Many more healthcare companies in the United States published press releases last week to inform customers that they had been impacted by the data...
Cybercrime
Flashpoint security researchers have discovered a new malware framework that managed to gather over one billion fraudulent ad impressions in the past three months.
Cybercrime
Microsoft says it has detected more than 740 infiltration attempts by nation-state actors in the past year targeting U.S.-based political parties, campaigns and other...
Cybercrime
US telecoms company Sprint has informed some customers that their Sprint accounts have been accessed by hackers via a Samsung website.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)