Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 122 stories in 24 hours
Phishing & Scams
Malware, exploited flaws, phishing and botnets, from the researchers who found them.
41stories this week
2today
the last seven days
Most fromBitdefender, Help Net Security, KnowBe4, BleepingComputer
In the news hereGoogle8Microsoft4Apple2Meta1Qilin1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data.
BleepingComputer
-
The owner of a US ransomware remediation company allegedly promised businesses he could recover their files without paying cybercriminals. Prosecutors say he secretly paid the hackers instead — and charged victims substantially more. Imagine your company has just been hacked with ransomware. You hire a cybersecurity firm that says it can recover your files without…
Bitdefender
-
Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US,…
The Hacker News
-
Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.
Cisco Talos
-
I timed an attacker once. From registering a domain to having it delegated, certificated and serving a live credential-harvesting page took under 24 minutes, and 12 of those were spent waiting on nameservers. I keep coming back to that number, because it quietly indicts most of what we do about phishing. We block domains. We…
CSO Online UK
-
Cofense’s Beyond Human Risk: Measuring Secure Behavior with an AI-Driven Platform webinar examined how Secure Behavior Management (SBM) closes that gap through competency measurement, which shows what employees can actually demonstrate rather than what they have completed. The Cofense platform brings together employee competency, real-world phishing behavior, and the actions organizations can take to improve…
Cofense
-
The company presented new data about the prevalence of different forms of social-engineering attacks, saying identity fundamentals still matter in the AI era.
Cybersecurity Dive
-
There’s another TikTok trend making the rounds called the bathroom swearing trend, where parents send their children into the bathroom, give them permission to swear freely and film their reactions. Rather than deciding whether parents should or shouldn’t do it, we wanted to look at what these videos bring to the surface: Why are kids…
Bitdefender
-
An infrastructure engineer used his knowledge of his employer’s network to lock administrators out, disrupt servers and demand $750,000 in Bitcoin. He will now spend almost three years behind bars. A former infrastructure engineer who turned his privileged access against his employer, sabotaging its computer network before demanding ransom, has been sentenced to 32 months…
Bitdefender
-
A recent phishing campaign abused Microsoft Power BI links to deliver multiple rogue ScreenConnect clients.
Huntress
-
BlueKit puts account-hijacking tools in more criminals’ hands, making it easier to target you with convincing fake login pages and scam messages.
Malwarebytes
-
A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme.
BleepingComputer
