Email Security
BEC scammers use residential IP addresses in attacks to make them seem locally generated and evade detection.
Hi, what are you looking for?
SecurityWeek
Fraud & Identity Theft
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Fraud & Identity Theft
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud.
Data Breaches
Hackers recently obtained non-sensitive customer information and other documents from the company.
Fraud & Identity Theft
US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater of war”.
Fraud & Identity Theft
Google is now letting Gmail users in the US run scans to learn whether their Gmail ID appears on the dark web.
Fraud & Identity Theft
Token has raised a total of $53 million to work on a biometrics-powered wearable device featuring multi-factor authentication technologies.
Fraud & Identity Theft
Strivacity, a Virginia startup working on technology to simplify and secure customer logins, has attracted $20 million in funding to fuel global expansion plans.
Cybercrime
While there are likely many different approaches, here are a few points that are important for enterprises to consider when evaluating bot solutions.
Cybercrime
Solomon Ekunke Okpe was sentenced to four years in prison in the US for his role in a BEC fraud ring.
Fraud & Identity Theft
443ID is refocusing its solution to tackle account fraud detection and prevention, and has changed its name to Verosint.
Cybercrime
Spanish and US authorities have dismantled a cybercrime ring that defrauded victims of more than $5.3 million.
Cybercrime
Australian authorities sentence Sydney man for using leaked data stolen from wireless carrier Optus to conduct SMS scams.
Cybercrime
Pig Butchering, also known as Sha Zhu Pan and CryptoRom, is an ugly name for an ugly scam.
Cybercrime
A digital ad fraud scheme dubbed "VastFlux" spoofed over 1,700 apps and peaked at 12 billion ad requests per day before being shut down.
Application Security
Hack The Box Raises $55 Million in Funding Round Led by Carlyle
Application Security
Software maker Adobe has rolled out its first batch of security patches for 2023 with fixes for at least 29 security vulnerabilities in a...
Application Security
Security researchers at Microsoft are flagging ransomware attacks on Apple’s flagship macOS operating system, warning that financially motivated cybercriminals are abusing legitimate macOS functionalities...
Application Security
Microsoft has silently fixed an important-severity security flaw in its Azure Cognitive Search (ACS) after an external researcher warned that a buggy feature allowed cross-tenant network...
Application Security
Password management firm LastPass says the hackers behind an August data breach stole a massive stash of customer data, including password vault data that...
Application Security
Foxit Software has rolled out a critical-severity patch to cover a dangerous remote code execution flaw in its flagship PDF Reader and PDF Editor...
Application Security
The Federal Bureau of Investigation (FBI), the Food and Drug Administration Office of Criminal Investigations (FDA OCI), and the US Department of Agriculture (USDA)...
Application Security
After skipping last month, Adobe returned to its scheduled Patch Tuesday cadence with the release of fixes for at least 38 vulnerabilities in multiple...
Application Security
Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)