Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 115 stories in 24 hours
Phishing & Scams
Malware, exploited flaws, phishing and botnets, from the researchers who found them.
41stories this week
0today
the last seven days
Most fromBitdefender, Help Net Security, KnowBe4, BleepingComputer
In the news hereGoogle10Microsoft3Apple2Cloudflare2Qilin1
MyCyberWay trainingSomeone will report this email. Know exactly what to do next.See the Analyst curriculum
-
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.
Cybersecurity Dive
-
An OpenAI engineer has been arrested after a hidden recording device was discovered in a conference room used for sensitive discussions about the company’s AI technology. Investigators say the suspect researched how to build and conceal the device using an AI chatbot. The FBI have arrested OpenAI engineer for allegedly installing a sophisticated listening device…
Bitdefender
-
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting domains that were part of the infrastructure underlying YAM Store, CoGUI and Iron Man.
The Record
-
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide.
BleepingComputer
-
Microsoft is tracking phishing campaigns that use various lures to deliver MSP360, a legitimate RMM tool that attackers are abusing to gain a foothold on compromised systems.
KnowBe4
-
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
SecurityWeek
-
In less than 10 months, cybercriminals used the arsenal of customized, targeted phishing kits to send more than 1 billion malicious messages to more than 75,000 organizations globally.
CyberScoop
-
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement agencies and other partners worldwide, Microsoft’s Digital Crimes Unit (DCU) facilitated a disruption of the ecosystem.
Microsoft Threat Intelligence
-
The Joint Economic Committee on Tuesday released the results of a year-long investigation into Tinder, Hinge, Match, Plenty of Fish and several other dating sites owned by Match Group.
The Record
-
Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe…
ESET WeLiveSecurity
-
The Democratic People’s Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Dark Reading
-
Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters.
KnowBe4
