From sending phishing emails to posting fake listings, here’s how fraudsters hunt for victims while you’re booking your well-earned vacation.

The attack exploits the polyfill.io domain, which was recently acquired by Funnull, a China-based entity

Global law enforcers have share intelligence leading to the takedown of hundreds of IP addresses hosting Cobalt Strike

Twilio warned Authy users to beware of social engineering attacks, after the ShinyHunters gang listed 33 million records for sale on the dark web

Researchers claim the Volcano Demon ransomware group personally phone victims to pressure them into paying

The new NinjaOne partner initiative aims to prioritize partner advancement through new incentives and resources

Advanced solutions can simplify and strengthen data protection as well as boosting operational efficiency for enterprises facing modern cybersecurity challenges

Cyber insurance is becoming widespread, and many enterprises are making major investments to boost resilience in a bid to drive down their premiums

Innocuous little Windows programs were carrying cheap malware for weeks, exposing customers of the India-based software vendor to data theft.

Rates have declined by 15% since the market peak in 2022, according to Howden Insurance Brokers.

Law Enforcement Agencies can’t intercept communications without an agreement disabling PET in home routing

The action comes in response to concerns over the company’s updated privacy policy

Certik observed the loss of $1.1bn worth of cryptocurrency across Web3 platforms in the first half of 2024, with phishing the most common vector

Roll20 confirmed its administrative website account was accessed by a “bad actor,” leaving its users’ personal information exposed

Seven law enforcement agencies collaborated to put a dent in infrastructure supporting malicious uses of Cobalt Strike by hacking gangs

More than 20 offers for botnets for hire or sale have been discovered on dark web forums and Telegram channels this year

Experts will explore the oft-neglected necessity of AI safety and its integration with security practices at next month's Black Hat USA in Las Vegas.

As automation spreads and relieves security pros of time-consuming management tasks, their ability to articulate complex cybersecurity risks with the C-suite is increasingly valuable.

SOC 2 reports are a valuable tool for evaluating vendor security, but they shouldn't be the only piece of the puzzle.