Cyberwarfare
The United States on Tuesday banned China Telecom from operating in the country citing "significant" national security concerns, further straining already tense relations between...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.
Cybercrime
Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.
Cybercrime
Dutch authorities seized command-and-control servers tied to a botnet of infected computers, smartphones, and tablets that was allegedly used to power a residential proxy...
Cybercrime
The FBI has issued an alert warning of Silent Ransom Group attacks targeting law firms.
Application Security
The United States Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday announced the appointment of Washington Secretary of State Kim Wyman as its Senior...
Application Security
When FireEye (now Mandiant) disclosed the SolarWinds breach in December 2020, the security world was forced to accept the reality that given the motivation,...
Cybercrime
Law enforcement officials in the U.S. and Europe have arrested 150 people and seized more than $31 million in an international drug trafficking investigation...
Cybercrime
The United States Department of Justice this week announced that two individuals involved in providing bulletproof hosting to various malware families were sentenced to...
Cybercrime
South Korea said Friday it’s asked Interpol for help to arrest two foreigners it alleges played a leading role in cyberattacks and large-scale extortion...
Application Security
Technology giants Intel Corp. and VMware joined the Patch Tuesday parade this week, rolling out fixes for security defects that expose users to malicious...
Application Security
At SecurityWeek's 2021 CISO Forum, a high-powered panel of experts discussed specific ways an SBOM can improve supply chain security and where expectations may be overblown. ...
Cyberwarfare
Human rights organization Amnesty International last week reported identifying a link between an Indian cybersecurity company and the infrastructure used by a hacking group...
Application Security
Mondoo, a startup that provides security tools for DevOps teams, has raised $15 million in funding ($12 million in a new Series A round,...
Data Protection
Mozilla this week released Firefox 93 to the stable channel with several security improvements, including better privacy protections, patches, and anti-tracking capabilities.Starting with Firefox...
Incident Response
Understanding the naming conventions of various threat groups can help us better understand the overall threat landscape
Cloud Security
Major cloud services providers last week formally introduced the Trusted Cloud Principles, an initiative aimed at bringing standardization and consistencies across platforms.
Cybercrime
Two individuals who were allegedly part of a “prolific” ransomware group have been arrested in Ukraine, Europol and Ukraine’s Cyber Police announced on Monday.
Cybercrime
U.S. senators this week introduced a bill that would require critical infrastructure organizations to inform the Cybersecurity and Infrastructure Security Agency (CISA) if they...
Application Security
Facebook's security team on Wednesday pulled the curtain on Mariana Trench, an open-source tool that it has been using internally to identify vulnerabilities in...
Application Security
Threat hunters at Kaspersky have intercepted a new cyberespionage implant being delivered via targeted DNS hijacking of government zones in Eastern Europe and published...
Cybercrime
Russia on Wednesday detained the head of one of the country's leading cybersecurity firms on charges of treason, in a move that targets a...
Application Security
Apple on Thursday confirmed a new zero-day exploit hitting older iPhones and warned that the security vulnerability also affects the macOS Catalina platform.
Compliance
Facebook said Wednesday that Apple's iPhone privacy changes, which allow users to block tracking, significantly affected its advertising revenues because less data could be...
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)