Cybercrime
The FBI has observed an increase in attacks targeting healthcare payment processors in an effort to divert significant amounts of money to accounts controlled...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.
Cybercrime
Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.
Cybercrime
Dutch authorities seized command-and-control servers tied to a botnet of infected computers, smartphones, and tablets that was allegedly used to power a residential proxy...
Cybercrime
The FBI has issued an alert warning of Silent Ransom Group attacks targeting law firms.
Cybercrime
The US Department of Justice announced an indictment Wednesday against three Iranian hackers who used ransomware to extort a battered women's shelter and a...
Tracking & Law Enforcement
Cyberwarfare
Apple this week has started rolling out iOS 16 with several security and privacy improvements meant to keep users protected from malware, state-sponsored attackers,...
ICS/OT
The FBI is warning healthcare facilities of the risks associated with unpatched and outdated medical devices.Security flaws in medical devices could adversely impact the...
Cybercrime
Law enforcement authorities have seized the domains of an online marketplace for stolen login credentials and other personally identifying information (PII).
Cybercrime
A man employed as a cleaner in Israeli Defence Minister Benny Gantz's home was sentenced to three years' prison for attempting to spy for...
Tracking & Law Enforcement
Local law enforcement agencies from suburban Southern California to rural North Carolina have been using an obscure cellphone tracking tool, at times without search...
Cybercrime
The FBI is warning of an increase in attacks targeting decentralized finance (DeFi) platforms to steal cryptocurrency.According to the agency, miscreants are taking advantage...
Application Security
Password management software firm LastPass has suffered a data breach that led to the theft of source code and proprietary technical information.
Cyberwarfare
Leaked documents appear to show a little-known spyware company offering services that include Android and iOS device exploits for €8 million (roughly $8 million).
Application Security
Remote code execution vulnerability fixed in GitLab Community Edition (CE) and Enterprise Edition (EE) updates.
Application Security
The Federal Bureau of Investigation (FBI) has raised an alarm for cybercriminals using proxies and configurations to hide and automate credential stuffing attacks against...
Application Security
Apple on Wednesday rolled out emergency patches for a pair of already exploited zero-day vulnerabilities in its flagship macOS and iOS platforms.Apple confirmed in-the-wild...
Application Security
Microsoft on Monday announced another major disruption of an APT actor believed to be linked to the Russian government, cutting off access to accounts...
Tracking & Law Enforcement
Lawyers for WikiLeaks founder Julian Assange sued the US Central Intelligence Agency and its former director Mike Pompeo on Monday, alleging it recorded their...
Cybercrime
The US Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a joint advisory detailing the Zeppelin ransomware.
Cybercrime
The United States placed sanctions Monday on Tornado Cash, a leading "crypto mixer" for transactions in virtual currency that US officials describe as a...
Mobile & Wireless
An Israeli government investigation into the use of powerful eavesdropping technology by the police found that they only used it after securing a judicial...
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)