Fraud & Identity Theft
The recent takedown of the xDedic marketplace—where threat actors had been buying and selling access to compromised remote desktop protocol (RDP) servers since at...
Hi, what are you looking for?
SecurityWeek
Fraud & Identity Theft
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Fraud & Identity Theft
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.
Data Breaches
Hackers recently obtained non-sensitive customer information and other documents from the company.
Fraud & Identity Theft
US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater of war”.
Cybercrime
Companies that sold fake social media activity have reached a settlement with the state of New York in a case that, for the first...
Data Protection
The State Bank of India is the latest large organization to leave a database full of personal information exposed and accessible on the internet.
Fraud & Identity Theft
False positives are one of the biggest problems for security controls. In malware detection they interrupt work and divert incident response away from real...
Cybercrime
Bangladesh will Wednesday file a lawsuit in New York against a Philippine bank over its involvement in one of the biggest-ever cyber heists, the...
Fraud & Identity Theft
WhatsApp, the popular messaging application that has roughly 1.5 billion users, now only allows messages to be forwarded to a maximum of 5 people...
Cybercrime
Facebook announced Thursday that it has removed more than 500 pages, groups and accounts originating in Russia for engaging in what the social network...
Cybercrime
Cyber-attacks that have been ongoing since at least mid-2017 hit financial institutions in West Africa, Symantec security researchers report.
Cybercrime
A new threat actor operating under the “Magecart” umbrella landed a malicious skimmer on hundreds of websites through a supply chain attack, security firms...
Email Security
Payroll Diversion Scams Attempt to Steal Employee Pay
Fraud & Identity Theft
United States Senator Ron Wyden (D-OR) on Friday expressed concerns that the federal government shutdown could expose taxpayers to various risks.
Cybercrime
BevMo is warning that a data breach may have allowed a hacker to steal credit card numbers and other information from more than 14,000...
Cybercrime
A wave of bomb threats emailed Thursday to hundreds of schools, businesses and government buildings across the U.S. triggered searches, evacuations and fear —...
Compliance
A new class action filed against Marriott following the massive data breach alleges that the hotel giant’s systems are affected by a serious vulnerability...
Compliance
Attorneys General from 12 U.S. states this week filed a lawsuit against a healthcare tech solutions provider over a data breach suffered by the...
Cybercrime
Law enforcement, cybersecurity companies, Google and other tech firms have worked together on dismantling a sophisticated ad fraud scheme that earned its operators tens...
Cybercrime
Europol on Friday announced that it has signed a cybersecurity-focused memorandum of understanding (MoU) with Diebold Nixdorf, one of the world’s largest providers of...
Email Security
Google on Wednesday announced several new tools and protection mechanisms designed to help users secure their accounts and recover them in case they have...
Cybercrime
Hong Kong flag carrier Cathay Pacific said Wednesday it had suffered a major data leak affecting up to 9.4 million passengers.The airline admitted data...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)