Cybercrime
Brazil does not have a highly organized hacker underground in the same way as Russia and eastern Europe. Most of the malicious activity by...
Hi, what are you looking for?
SecurityWeek
Fraud & Identity Theft
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Fraud & Identity Theft
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.
Data Breaches
Hackers recently obtained non-sensitive customer information and other documents from the company.
Fraud & Identity Theft
US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater of war”.
Cybercrime
An underground invitation-based private marketplace for stolen digital fingerprints offers more than 60,000 stolen bot profiles at the moment, Kaspersky Lab reports.
Cybercrime
AeroGrow International, the company that makes the popular AeroGarden smart countertop gardens, recently informed customers that their payment card information may have been compromised...
Cyberwarfare
Canada's foreign minister warned Friday that outside interference in the country's upcoming parliamentary election was "very likely"."We are very concerned. Our judgement is that...
Fraud & Identity Theft
An Israeli cyber watchdog said Monday it has uncovered a network of fake online accounts backing Prime Minister Benjamin Netanyahu and slandering opponents ahead...
Cybercrime
Earl Enterprises on Friday admitted that cybercriminals had stolen payment card data from tens of the restaurants it owns over a period of 10...
Cybercrime
Microsoft on Wednesday announced that it had taken control of 99 domains used by an Iran-linked cyberespionage group it tracks as Phosphorus.
Data Protection
The Federal Emergency Management Agency wrongly released to a contractor the personal information of 2.3 million survivors of devastating 2017 hurricanes and wildfires, potentially...
Cybercrime
A 50-year-old Lithuanian citizen has pleaded guilty over his role in a business email compromise (BEC) scheme in which Google and Facebook employees were...
Compliance
Google this week revealed that it took down 2.3 billion bad ads last year, including 58.8 million phishing ads.The ads were taken down for...
Cloud Security
Over the past several months, threat actors have been increasingly targeting Office 365 and G Suite cloud accounts that are using the legacy IMAP...
Cybercrime
SSL and TLS certificates and related services can be easily acquired from dark web marketplaces, according to an academic study sponsored by Venafi, a...
Compliance
California Attorney General Xavier Becerra and Assemblymember Marc Levine last week introduced a new piece of legislation that would require organizations to notify consumers...
Cybersecurity Funding
Armorblox emerged from stealth mode on Wednesday with a platform that uses natural language understanding (NLU) to detect cyber threats hidden in emails and...
Cybercrime
Point-of-sale (PoS) solutions provider North Country Business Products, whose products are used at over 6,500 locations across the United States, recently disclosed a data...
Cybercrime
Fintech security firm nsKnox on Tuesday announced that it raised $15 million in a Series A funding round.The round was led by Microsoft’s M12...
Cybercrime
US fast food restaurant chain Wendy’s announced recently that it has reached a settlement with the thousands of financial institutions impacted by the data...
Cybercrime
Malta's largest bank was the target of a cyber attack Wednesday, with hackers attempting to withdraw 13 million euros ($14.7 million), Prime Minister Joseph...
Fraud & Identity Theft
UK-based Identity Data Intelligence specialist GBG has agreed to acquire the Atlanta-based identity verification and fraud prevention services provider IDology for $300 million in...
Cybercrime
Huddle House, an Atlanta-based restaurant chain with over 300 locations across the United States, informed customers recently that their payment card information may have...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)