A comprehensive analysis of ransomware negotiation dynamics and what really works when you’re staring down the barrel of an extortion demand.

Dismantled Cyber Safety Review Board was investigating Salt Typhoon telecom hack.

New documents reveal flurry of intelligence activity following Luigi Mangione's arrest

With this executive order, the Biden White House is looking to boost digital security in the U.S. for the government and the private sector.

​On Monday, the United Nations' International Civil Aviation Organization (ICAO) announced it was investigating what it described as a "reported security incident."

This document provides advice on the naming of threat actors (also known as malicious actors). The objective is to provide practical advice for organizations such as security vendors or organizations ...

French tech giant Atos, which secures communications for the country's military and secret services, has denied claims made by the Space Bears ransomware gang that they compromised one of its database...

Three patched Dynamics 365 and Power Apps vulnerabilities exposed sensitive data, highlighting risks of API flaws.

2024 was a big year for cybersecurity, with significant cyberattacks, data breaches, new threat groups emerging, and, of course, zero-day vulnerabilities. Below are fourteen of what BleepingComputer b...

LockBit's developer charged for enabling global ransomware attacks netting $500M; U.S. leads extradition effort.

GitHub, the de-facto platform for open-source software development, provides a set of social-media-like features to signal high-quality repositories. Among them, the star count is the most widely used...

The Play ransomware gang has claimed responsibility for a cyberattack that impacted the business operations of the U.S. doughnut chain Krispy Kreme in November.

Privileged access management company BeyondTrust suffered a cyberattack in early December after threat actors breached some of its Remote Support SaaS instances.

Iranian-linked IOCONTROL malware targets IoT, OT, and SCADA systems with advanced evasion tactics.

Class action could foil Photobucket’s plan to turn old photos into AI goldmine.

Microsoft’s MFA flaw, AuthQuake, let attackers bypass protections in 3 minutes. Fixed October 2024.

US doughnut chain Krispy Kreme suffered a cyberattack in November that impacted portions of its business operations, including placing online orders.

Law enforcement agencies from 15 countries have taken 27 DDoS-for-hire services offline, also known as "booters" or "stressers," arrested three administrators, and identified 300 customers of the plat...

​Artivion, a leading manufacturer of heart surgery medical devices, has disclosed a November 21 ransomware attack that disrupted its operations and forced it to take some systems offline.

CERT-UA warns of Russian-linked phishing attacks exploiting a NATO alignment conference to target Ukraine's defense sector.

Chinese hackers targeting large IT service providers in Southern Europe were seen abusing Visual Studio Code (VSCode) tunnels to maintain persistent access to compromised systems.

Microsoft is investigating a widespread and ongoing Microsoft 365 outage impacting Office web apps and the Microsoft 365 admin center.

Black Basta evolves ransomware attacks with email bombing, QR codes, and social engineering, targeting credentials and VPNs.

Eight members of an international cybercrime network that stole millions of Euros from victims and set up Airbnb fraud centers were arrested in Belgium and the Netherlands.

DeepSeek flaw enabled XSS attacks, allowing hackers to hijack accounts via prompt injection.

The student-led paper for Tokyo University says a graduate program used an HTML trick to prevent mainland Chinese students from applying.

Romania restarts presidential elections after TikTok-linked interference, cyberattacks, and alleged Russian meddling spark global scrutiny.

Announcing the Adaptive Prompt Injection Challenge (LLMail-Inject)

Gamaredon uses Cloudflare Tunnels to hide GammaDrop malware staging, targeting Ukraine with HTML smuggling tactics.

Critical flaws in MLflow, PyTorch, and more enable remote code execution, threatening AI and ML security.

Mozilla isn’t just another tech company — we’re a global crew of activists, technologists and builders, all working to keep the internet free, op

Ransomware group Brain Cipher has alleged a significant breach of Deloitte UK, claiming to have stolen over 1TB of data.

An Indian AI startup that helps businesses build custom chatbots has leaked almost 350,000 sensitive files after the data was left unsecured on the web.

Chinese hackers targeted a U.S. firm in a four-month cyberattack, harvesting emails and stealing data.

A large number of Americans' metadata has been stolen in the sweeping cyberespionage campaign carried out by a Chinese hacking group dubbed "Salt Typhoon," a senior U.S. official told journalists on Wednesday.

Autonomous patching streamlines discovery to remediation, with customizable controls that prevent problematic updates...

U.K. authorities said more than 80 people have been arrested in Operation Destabilise, which uncovered a sprawling Russian money laundering system connecting the drug trade, cybercrime, Moscow compani...

US officials urge citizens to use encrypted messaging and calls wherever they can—here’s what you need to know.

The mobile device security firm iVerify has been offering a tool since May that makes spyware scanning accessible to anyone—and it's already turning up victims.

A new Enron website appeared on Monday to proclaim its relaunch. It's been 23 years since the energy company went up in smoke.

The U.S. consumer protection agency said it's closing the loophole to block the "widespread evasion" of federal law by data brokers.

ENISA is the EU agency dedicated to enhancing cybersecurity in Europe. They offer guidance, tools, and resources to safeguard citizens and businesses from cyber threats.

<p>Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for <span style="color: black;">remote </span>code execution. Android is an operating system...

Storm-1811's latest help desk scam begins with email bombing leading to IT impersonation and ends with Black Basta ransomware

South Korean police have arrested a CEO and five employees for manufacturing over 240,000 satellite receivers pre-loaded or later updated to include DDoS attack functionality at a purchaser's request.