Attacks/Breaches

The 14th defendant behind The Infraud Organization contraband marketplace has been sentenced, this time for one count of racketeering.

The malware’s abuse of PowerShell makes it more dangerous, allowing for more advanced attacks such as ransomware, fileless malware, and malicious code memory injections.

Twitter is charged with using emails and phone numbers ostensibly collected for account security to sell targeted ads.

Global ransomware incidents target everything from enterprise servers to grounding an airline, with one India-based group even taking a Robin Hood approach to extortion with the "GoodWill" strain.

Credential-stuffing attacks against online accounts are still popular, and they work thanks to continuing password reuse.

New threat hunting and risk identification service provides organizations with an enterprise-wide baseline of their threat landscape and risk exposure.

A sprawling, multiyear operation nabs a suspected SilverTerrier BEC group ringleader, exposing a massive attack infrastructure and sapping the group of a bit of its strength.

Experience Centre features emerging Mastercard products and solutions for securing digital payments on a global scale, including those developed locally in Vancouver.

According to the findings, vishing attacks have overtaken business email compromise as the second most reported response-based email threat since Q3 2021.

With manufacturing ranking as the fourth most targeted sector, manufacturers that understand their exposure will be able to build the necessary security maturity.

A DDoS campaign observed by Akamai from actors claiming to be REvil would represent a major pivot in tactics for the gang.

Ransomware has become so efficient, and the underground economy so professional, that traditional monetization of stolen data may be on its way out.

Notable new infection chain uses PDF to embed malicious files, load remote exploits, shellcode encryption, and more, new research shows.

Decentralized finance lost $1.8 billion to cyberattacks last year — and 80% of those events were the result of vulnerable code, analysts say.

Company to debut its AD capabilities at the 2022 RSA Conference.