SecurityWeek (1 hour ago)
Threat actors have been observed delivering cryptocurrency miners and proxy software.
Read the full story on SecurityWeek.
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified accounts.
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
A cybersecurity researcher watched a Chinese-speaking hacker break into the websites of more than 100 companies, leaving almost all the work to AI agents.
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned.
The services remain unavailable as the company continues remediation and security validation.
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.
72 active sources
27 Turkish · 45 English
All sources
