Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. The U.S. government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct…

Everyone knows to patch vulnerabilities for internet-facing assets, but what about internal ones? One botnet is counting on your complacency.

Threat actors linked to the People's Republic of China, such as Volt Typhoon, continue to "pre-position" themselves within the critical infrastructure of the United States, according to military and law enforcement officials.

The attack, associated with Shuckworm, employs TTPs observed in prior campaigns against the Ukrainian military, predominantly utilizing PowerShell.

The China-backed APT was using the botnet, made up of mostly end-of-life, patchless routers from Cisco and Netgear, to set up shop inside US critical infrastructure.

The threat actor behind the campaign is still unknown, but it shares some similarities with other cyptojacking groups.

ESET researchers discovered several Android apps that posed as messaging tools but carried VajraSpy, a RAT used by the Patchwork APT group

The last quarter of 2023 saw an 80% year-on-year increase in ransomware victim claims, according to ReliaQuest

Cloudflare revealed suspected nation-state attackers compromised its systems and accessed source code using credentials stolen in the Okta breach

The study involved monitoring email reminders and login prompts sent to almost 10,000 faculty and staff members

What will the end of passwords look like in practice and what can businesses do to prepare?

The cyberattackers, believed to be state sponsored, didn't get far into Cloudflare's global network, but not for lack of trying.

The ransomware landscape has become more diversified, with major players like LockBit losing ground to smaller, more dynamic collectives