Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

The ShrinkLocker ransomware exploits the BitLocker feature on enterprise PCs to encrypt the entire local drive and remove recovery options.

Law enforcement agencies in the United States and Europe today announced Operation Endgame, a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed "the largest ever operation…

The cyber-attack, which occurred in December 2023, forced First American to shut down some systems

This time it's the identity management service provider's cross-origin authentication feature that's being targeted by adversaries.

CIRCIA and its newly published Notice of Proposed Rulemaking will have many implications for how organizations must report ransomware attacks.

The operation targeted several significant malware droppers, including IcedID, SystemBC, Pikabot, Smokeloader and Bumblebee

Europol undertook dropper malware botnet takedown while US law enforcement dismantled a sprawling cybercrime botnet for hire.

Companies are looking to large language models to help their employees glean information from unstructured data, but vulnerabilities could lead to disinformation and, potentially, data leaks.

This new report also indicates an increasing attack surface as putting pressure on CISOs. One positive note is CISOs' improving relationships with board members.

Voters are gearing themselves for the 2024 U.S. presidential elections. Whether you’re a new voter or a parent looking to guide your family members on exercising their right to vote, consumers can be certain about one thing: election security should be top…

Much digital ink has been spilled on artificial intelligence taking over jobs, but what about AI shaking up the hiring process in the meantime?

The large volume of attendees mixed with interconnected infrastructure provides opportunities for threat actors to wreak havoc during the Paris Olympics

The BBC said that personally identifiable information of current and former employees has been breached following an incident affecting its pension scheme

The start of 2024 saw a relative decline in phishing attacks as security hygiene and endpoint defenses broadly improve