Audits
Microsoft on Tuesday pushed out patches for at least 55 documented security vulnerabilities in a wide range of products and called urgent attention to...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.
Cybercrime
Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.
Cybercrime
Dutch authorities seized command-and-control servers tied to a botnet of infected computers, smartphones, and tablets that was allegedly used to power a residential proxy...
Cybercrime
The FBI has issued an alert warning of Silent Ransom Group attacks targeting law firms.
Incident Response
Mexican prosecutors said Monday that they had detained a man accused of spying on a journalist using the Pegasus software at the center of...
Cybercrime
A suspected Ukrainian hacker has been arrested and charged in the United States in connection with a string of costly ransomware attacks, including one...
Application Security
The U.S. government’s aggressive anti-ransomware crackdown is showing no signs of slowing down with the Treasury Department announcing sanctions against a cryptocurrency exchange and...
Cybercrime
Europol on Monday announced that law enforcement agencies in several countries have arrested a total of seven people allegedly linked to REvil and GandCrab...
Cybercrime
Six individuals allegedly associated with the Clop ransomware operation were arrested in a global law enforcement operation, Interpol announced.Authorities in South Korea, Ukraine, and...
Mobile & Wireless
Security researchers disclosed Monday that spyware from the notorious Israeli hacker-for-hire company NSO Group was detected on the cellphones of six Palestinian human rights...
Cybercrime
The Justice Department is stepping up actions to combat ransomware and cybercrime through arrests and other actions, its No. 2 official told The Associated...
Application Security
Software supply chain security jitters escalated again Friday with new “critical severity” warnings about malware embedded in two npm package managers widely used by...
Cybercrime
The Federal Bureau of Investigation (FBI) this week issued an alert on fraud schemes that direct victims to use cryptocurrency ATMs and Quick Response...
Tracking & Law Enforcement
A senior official in Hungary’s governing party acknowledged for the first time on Thursday that the government purchased a powerful spyware tool, which was...
Cyberwarfare
Ukraine’s security service, the SBU, on Thursday revealed the identities of five individuals allegedly involved in cyberattacks attributed to a Russia-linked threat group named...
Tracking & Law Enforcement
The Biden administration announced Wednesday it is putting new export limits on Israel’s NSO Group, the world’s most infamous hacker-for-hire company, saying its tools...
Cybercrime
The Federal Bureau of Investigation (FBI) has published a flash alert to share details on the tactics, techniques and procedures (TTPs) and indicators of...
Compliance
Signal says it can provide only a couple of timestamps in response to a grand jury subpoena for user data that it recently received...
Cybercrime
A Russian national has been extradited from South Korea to the United States to face charges for his alleged role in the cybercriminal organization...
Cybercrime
Europol and Norwegian Police on Friday announced the arrests of 12 individuals suspected of being involved in ransomware attacks launched against companies around the...
Application Security
The Federal Bureau of Investigation (FBI) this week released a Flash report to publicly share indicators of compromise (IOCs) for the Ranzy Locker ransomware.
Application Security
Google on Wednesday announced the Minimum Viable Secure Product (MVSP) initiative, partnering with some of tech's biggest names to create a vendor-neutral minimum baseline...
Cybercrime
The United States urged two senior British judges on Wednesday to clear the extradition of WikiLeaks founder Julian Assange and reject a lower court's...
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)