At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven't set up their new accounts. Experts say…

Sysdig said CRYSTALRAY used a variety of open source security tools to scan for vulnerabilities

The WordPress plugin has over 20,000 active installations and is used for site backups and update management

Millions of Trello users have been warned they could be at heightened risk of social engineering attacks following the data leak

The Russian security company will exit the US and cut staff ahead of a government-imposed sales ban

The tactic is not new, but there has been a steady increase in its use as of this spring.

North Korean espionage campaign delivers updated BeaverTail info stealer by spoofing legitimate video calling service, researcher finds.

Law enforcement managed to arrest numerous members of Black Axe, a notorious group engaged in a wide variety of criminal activity.

With AI use ramping up rapidly, a growing number of enterprise security teams have begun putting controls in place to protect sensitive data from accidental exposure and leaks.

Manipulated header info within files found in mobile Trojans like TeaBot and others makes it difficult for defenders to analyze and detect them.

A two-day presentation will examine the social-behavioral aspects of cybersecurity leadership to drive team success.

Credential management gets a boost with the latest infostealers' extortion campaign built on info stolen from cloud storage systems.

An AI consortium consisting of top tech companies will release a toolkit later this year for measuring the safety of generative AI models.

Russian threat actor FIN7 has shifted gears multiple times in recent years, focusing now on helping ransomware groups be even more covertly effective.

Israel's military computer systems have been under constant barrage in recent months.

SOC analysts should also cultivate skills like incident handling and response, threat hunting, digital forensics, Python, and bash scripting.

The gang already uses varied tools in its attacks, such as phishing, SIM swapping, and MFA fatigue.

As attackers set their sights on infrastructure, security teams need to reduce risk levels without compromising operational agility.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

The ransomware is rudimentary with basic functionalities, likely having been created by an inexperienced developer — but it's effective at locking up files and sucking up memory capacity.