Attacks/Breaches

If you haven't properly addressed the issue, you're already behind. But even if you've had a false start, it's never too late to get back up.

CISA tells organizations running VMware servers without Log4Shell mitigations to assume compromise.

Bronze Starlight’s use of multiple ransomware families and its victim-targeting suggest there’s more to the group’s activities than just financial gain, security vendor says.

The concept might make us sharp and realistic, but it's not enough on its own.

Malicious invoices coming from the accounting software's legitimate domain are used to harvest phone numbers and carry out fraudulent credit-card transactions.

To prevent these attacks, businesses must have complete visibility into, and access and management over, disparate devices.

The credential-phishing attack leverages social engineering and brand impersonation techniques to lead users to a spoofed MetaMask verification page.

A voicemail-themed phishing campaign is hitting specific industry verticals across the country, bent on scavenging credentials that can be used for a range of nefarious purposes.

Researchers have spotted the threat group, also known as Fancy Bear and Sofacy, using the Windows MSDT vulnerability to distribute information stealers to users in Ukraine.

Don't sleep on Magecart attacks, which security teams could miss by relying solely on automated crawlers and sandboxes, experts warn.

In the wake of devastating attacks, here are some of the best techniques and policies a company can implement to protect its data.

ToddyCat's Samurai and Ninja tools are designed to give attackers persistent and deep access on compromised networks, security vendor says.

After the Raccoon Stealer Trojan disappeared, the RIG Exploit Kit seamlessly adopted Dridex for credential theft.

Experts tell teams to prepare for more regulation, platform consolidation, management scrutiny, and attackers with the ability to claim human casualties.

AI can help companies more effectively identify and respond to threats, as well as harden applications.