Cybercrime
After compromising large websites or third-party services they use in order to steal credit card information, the Magecart hackers have now turned to vulnerable...
Hi, what are you looking for?
SecurityWeek
Fraud & Identity Theft
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Fraud & Identity Theft
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.
Data Breaches
Hackers recently obtained non-sensitive customer information and other documents from the company.
Fraud & Identity Theft
US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater of war”.
Compliance
Google says it recently blocked a new ad fraud scheme spread across a large number of applications and websites and monetizing with numerous advertising...
Fraud & Identity Theft
A former Equifax manager was sentenced Tuesday to serve eight months home confinement for engaging in insider trading in the wake of the company’s...
Cybercrime
A report published on Wednesday by FireEye details the activities of a financially motivated threat actor believed to be operating on behalf of the...
Cybercrime
North Korea’s nuclear and missile tests have stopped, but its hacking operations to gather intelligence and raise funds for the sanction-strapped government in Pyongyang...
Cybercrime
A 22-year-old man from Springfield, Massachusetts, has been sentenced to prison for his role in an ATM jackpotting scheme.Argenys Rodriguez will spend 12 months...
Cybercrime
Forter, a company that specializes in preventing e-commerce fraud, on Wednesday announced that it raised $50 million in a series D funding round.
Cybercrime
U.S.-based online fashion retailer SHEIN informed customers recently that their personal information was stolen by hackers who gained access to the company’s systems.
Cybercrime
A previously unknown financially motivated threat group is believed to be behind a series of attacks whose goal was to obtain payment card data...
Cybercrime
Three individuals who last year admitted creating and using the notorious Mirai botnet have avoided prison after helping the FBI in other cybercrime investigations,...
Cybercrime
Symantec on Tuesday announced the launch of a new service that aims to make elections more secure by helping candidates and political organizations improve...
Cybercrime
President Donald Trump signed an executive order Wednesday authorizing sanctions against foreigners who meddle in U.S. elections, acting amid criticism that he has not...
Cybercrime
Greece's Supreme Court on Friday said a Russian held in Greece for allegedly laundering $4 billion using the bitcoin digital currency should be extradited...
Fraud & Identity Theft
Mobile, as a financial fraud threat vector, is growing dramatically. Fifty-eight percent of digital transactions now originate from mobile devices, and one-third of attacks...
Compliance
Google announced late last week that it’s preparing a new verification program designed to keep tech support scams off its advertising platform.
Cyberwarfare
Threat actors apparently working out of Iran have been conducting an operation whose goal is to influence the opinions of people in the United...
Fraud & Identity Theft
Cybercrime
Duo Security has created open source tools and disclosed techniques that can be useful in identifying automated Twitter accounts, which are often used for...
Cybercrime
The U.S. Justice Department’s Cyber-Digital Task Force made public its first report on Thursday, covering the threat to elections, cybercrime schemes, and various other...
Cybercrime
The losses and potential losses reported as a result of business email compromise (BEC) and email account compromise (EAC) scams exceed $12 billion globally,...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)