Attacks/Breaches

An academic analysis of website defacement behavior by 241 new hackers shows there are four clear trajectories they can take in future, researchers say.

Highlighting continued attacks on game developers, attackers stole source code from and issued a ransom demand to the maker of League of Legends.

Hackers don't need a key to get past your defenses if they can essentially teleport using RMMs, warns CISA and the NSA.

The accused sold an enormous data set stolen from the Austrian radio and television licensing authority — to an undercover cop.

After Berlin pledged tanks for Ukraine, some German websites were knocked offline temporarily by Killnet DDoS attacks.

The rapid maturation and rebranding of ransomware groups calls for relentless preparation and flexibility in response, according to one view from the trenches.

Zacks Elite sign-ups for the period 1999–2005 were accessed, including name, address, email address, phone number, and the password associated with Zacks.com.

Encrypted backups for several GoTo remote work tools were exfiltrated from LastPass, along with encryption keys.

Don't make perfect the enemy of good in vulnerability management. Context is key — prioritize vulnerabilities that are actually exploitable. Act quickly if the vulnerability is on a potential attack path to a critical asset.

Despite economic headwinds and layoffs in other areas, most retail and hospitality CISOs expect to add staff in 2023, according to a new report.

Report identifies 1.75m cyberattacks were stopped by BlackBerry in the last 90 days.

Ticketmaster testified in the Senate that a cyberattack was to blame for the high-profile Taylor Swift concert sales collapse, but some senators aren't so sure.

Restoration teams must be part of a collaborative, initial response team to address costly downtime.