Cloud Security
Cloud software provider Blackbaud has admitted that it paid cybercriminals to regain control of data following a ransomware attack in May 2020.The company, which...
Hi, what are you looking for?
SecurityWeek
Incident Response
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Artificial Intelligence
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
Incident Response
As alert volumes outpace human capacity, organizations are turning to AI, automation, and deeper context to separate real threats from the noise.
Cybercrime
Social media platform Twitter has confirmed that attackers downloaded user data from some of the accounts compromised in last week’s security incident.
Cybercrime
Several high-profile Twitter accounts were targeted recently in an attack that involved the hackers accessing internal Twitter systems and tools.
Cybercrime
Approximately 130 accounts were targeted during the recent attack on Twitter, the social media giant has revealed.
Cybercrime
Britain, the United States and Canada accused Russian hackers on Thursday of trying to steal information from researchers seeking a coronavirus vaccine, warning scientists...
Cybercrime
A breach in Twitter’s security that allowed hackers to break into the accounts of leaders and technology moguls is one of the worst attacks...
Cybercrime
Twitter has confirmed that hackers leveraged internal tools to take over high-profile accounts and use them to post scam tweets.
Cybercrime
Citrix on Wednesday denied claims that its systems have been breached and says the information being sold on the dark web actually comes from...
Incident Response
For Most Organizations, the Full Capabilities of Security Automation Are Still Untapped
Cybercrime
At the behest of the U.S. government, German authorities have seized a computer server that hosted a huge cache of files from scores of...
Cybercrime
Renewable energy company EDP Renewables North America (EDPR NA) has started informing customers that its internal systems were breached by cybercriminals.
Cybercrime
The threat actor behind the Sodinokibi (REvil) ransomware is demanding a $14 million ransom from Brazilian-based electrical energy company Light S.A.
Compliance
China on Wednesday demanded Washington stop “oppressing Chinese companies” after U.S. regulators declared telecom equipment suppliers Huawei and ZTE to be national security threats.
Cyberwarfare
Australia unveiled the "largest-ever" boost in cybersecurity spending Tuesday, days after Prime Minister Scott Morrison spoke out about a wave of state-sponsored attacks suspected...
Cybercrime
Late last week, the University of California San Francisco (UCSF) revealed that it paid roughly $1.14 million to cybercriminals to recover data encrypted during...
Cybercrime
A data breach has impacted Maine State Police’s information sharing database for federal, state and local law enforcement officials, the agency confirmed late Friday.
Incident Response
Despite the Importance of Security Operations Centers, Performance is Poor
Cybercrime
Australian beverage company Lion says it has found no evidence that hackers have stolen information from its systems, but the hackers claim they have...
Cybercrime
The cybercriminals behind the ransomware known as Maze claim to have breached the systems of LG Electronics and obtained highly sensitive information.The operators of...
Incident Response
Morocco said Wednesday it is investigating a journalist for receiving "foreign funding" for "intelligence services" days after rights group Amnesty alleged the government had...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)