Cyber Security
State-Sponsored Hackers Abuse Google’s Gemini AI for Attacks
Apple CPU Side-Channel Attacks (SLAP & FLOP) Threaten Safari Browser Security
Top 15 Networking Certifications to Supercharge Your Career in 2025
Top 10 Ransomware Groups of 2024: The Year’s Most Active Cyber Threats
Top 15 Cyberattacks of 2024: The Worst Incidents for Enterprise
Nuclei Vulnerability Allows Signature Bypass and Code Execution
This Week In Cybersecurity: 30th December to 03rd January
US Treasury Hack: Escalating Cyber Warfare Between US and China
Massive Healthcare Breaches Prompt Overhaul of US Cybersecurity Rules
WhatsApp Wins Against NSO Group: Judge Finds NSO Liable for Pegasus
This Week In Cybersecurity: 16th December to 20th December
4 Crucial Automation Use Cases for Enterprise Security Automation
This Week In Cybersecurity: 9th December to 13th December
Krispy Kreme Cyberattack Disrupts Online Orders, Impacts US Operations
Salt Typhoon: Chinese Hacking Group Behind Metadata Theft Targets US Telecoms
Colonial Behavioral Health Files Data Breach Notice: October 2024 Incident Impacts Consumer Data
9 Steps to Remove Malware from Your Windows PC
This Week In Cybersecurity: 25th November to 29th November
LifeLabs Data Breach Report Finally Public After Four-Year Legal Battle
Thala Recovers $25.5 Million After Security Breach
WolfsBane Linux Malware Unleashed by Chinese Hackers
This Week In Cybersecurity: 18th to 22nd November
HeptaX Cyberattack: A Deep Dive into the Multi-Stage RDP Exploitation Targeting Enterprises
Manufacturers Under Cyberattack: An Unprecedented Enterprise Cyberthreat
This Week In Cybersecurity: 11th November to 15th November
₹2,000 Crore WazirX Cyberattack Culprit Arrested
Singtel Data Breach: Volt Typhoon’s Test Run Before Targeting US Telecoms
How the Dark Web Has Fueled the 32% Rise in Healthcare Cyberattacks
Central Bank Cyprus Says 14.3% of Businesses Hit by Cyberattacks
This Week In Cybersecurity: 28th October to 1st November
LiteSpeed Cache Vulnerability Exposes 6 Million WordPress Sites to Takeover Attacks: A Critical Security Flaw
Cybersecurity
LiteSpeed Cache Vulnerability Exposes 6 Million WordPress Sites to Takeover Attacks: A Critical Security Flaw
A critical severity vulnerability has been discovered in LiteSpeed Cache, a popular caching plugin used by over 6 million WordPress sites. The flaw, tracked as ...
Russian Military Hackers Linked to Critical Infrastructure Attacks: A Deep Dive into GRU Unit 29155
News
Russian Military Hackers Linked to Critical Infrastructure Attacks: A Deep Dive into GRU Unit 29155
GRU Unit 29155: A Growing Threat to Global Security
Critical Remote Code Execution Flaw in Progress LoadMaster: A 10/10 Severity Vulnerability
Cybersecurity
Critical Remote Code Execution Flaw in Progress LoadMaster: A 10/10 Severity Vulnerability
This vulnerability, tracked as CVE-2024-7591, allows attackers to remotely execute commands on vulnerable devices, posing a significant risk to organizations relying on these products.
Ransomware Attacks Continue to Take a Major Toll on Critical Infrastructure Organizations
Blog
Ransomware Attacks Continue to Take a Major Toll on Critical Infrastructure Organizations
Ransomware attacks targeting critical national infrastructure (CNI) organizations have reached alarming heights, with costs soaring to unprecedented levels. A new ...
Clearview AI Fined €30.5 Million for Unlawful Data Collection
Cybersecurity
Clearview AI Fined €30.5 Million for Unlawful Data Collection
Dutch Data Protection Authority Takes Action Against Clearview AI Facial Recognition Company
VK Data Leak Exposes 390 Million Users: HikkI-Chan Strikes Again
News
VK Data Leak Exposes 390 Million Users: HikkI-Chan Strikes Again
HikkI-Chan Claims Responsibility for VK Data Breach
North Korean Hackers Target Job Seekers with Fake FreeConference App: Contagious Interview Campaign
Cybersecurity
North Korean Hackers Target Job Seekers with Fake FreeConference App: Contagious Interview Campaign
North Korean threat actors, known for their sophisticated cyberattacks, have been targeting job seekers with a fake Windows video conferencing application disguised as FreeConference.com.
Verkada to Pay $2.95 Million for Security Failures Leading to Breaches
Cybersecurity
Verkada to Pay $2.95 Million for Security Failures Leading to Breaches
Security Camera Vendor Faces FTC Action for Lax Security Practices
CBIZ Discloses Data Breach Affecting Nearly 36,000 Individuals
News
CBIZ Discloses Data Breach Affecting Nearly 36,000 Individuals
CBIZ Benefits & Insurance Services (CBIZ), a leading provider of financial, benefits, and insurance services, has disclosed a data breach that impacted nearly 36,000 individuals
TfL Cyberattack: Transport for London Under Attack
News
TfL Cyberattack: Transport for London Under Attack
Transport for London (TfL), the city's transportation authority, is currently investigating an ongoing cyberattack. While the attack is ongoing, TfL has assured the public that ...
This Week in Cybersecurity: 26th August to 30th August, BlackSuit Ransomware Stole Data
Cybersecurity
This Week in Cybersecurity: 26th August to 30th August, BlackSuit Ransomware Stole Data
BlackSuit Ransomware disrupts software vendor, Cyberattack on airport, nonprofit and government websites, credit union customers impacted by data breach.
DICK'S Sporting Goods Cyberattack Shuts Down Email and Locks Employee Accounts
Cybersecurity
DICK’S Sporting Goods Cyberattack Shuts Down Email and Locks Employee Accounts
A Major Data Breach Impacts the Retail Giant DICK'S Sporting Goods in a Cyberattack
North Korean Hackers Exploit Chrome Zero-Day to Deploy Rootkit
Cybersecurity
North Korean Hackers Exploit Chrome Zero-Day to Deploy Rootkit
North Korean hackers have successfully exploited a recently patched Google Chrome zero-day vulnerability (CVE-2024-7971) to deploy the FudModule rootkit.
Voldemort Malware: A New Threat Abusing Google Sheets for Data Exfiltration
Cybersecurity
Voldemort Malware: A New Threat Abusing Google Sheets for Data Exfiltration
A new malware campaign has emerged, targeting organizations across the globe with a previously undocumented backdoor named "Voldemort."
Park 'N Fly Data Breach Impacts Nearly a Million Customers: Sensitive Information Compromised in Cyberattack
News
Park ‘N Fly Data Breach Impacts Nearly a Million Customers: Sensitive Information Compromised in Cyberattack
Park 'N Fly, a Canadian airport parking service, has confirmed a data breach affecting nearly a million customers. The cyberattack, occurring between July 11-13, 2024, ...
Cucamonga Valley Water District Hit by Ransomware Attack
News
Cucamonga Valley Water District Hit by Ransomware Attack
The Cucamonga Valley Water District (CVWD) is investigating a ransomware attack that paralyzed its phone system earlier this month, preventing customers from making phone payments. ...
US Marshals Service Disputes Ransomware Gang's Breach Claims
News
US Marshals Service Disputes Ransomware Gang’s Breach Claims
US Marshals Service Denies Recent Breach
BlackSuit Ransomware Exposes Data of 950,000 Individuals in Software Vendor Breach
News
BlackSuit Ransomware Exposes Data of 950,000 Individuals in Software Vendor Breach
A Major Data Breach Hits Atlanta-Based Software Solutions Provider, BlackSuit Ransomware Exposes Data of 950,000.
McDonald's Instagram Hacked in $700,000 Fake Crypto Scheme
News
McDonald’s Instagram Hacked in $700,000 Fake Crypto Scheme
A brazen cyberattack targeting McDonald's social media accounts has resulted in a $700,000 loss for unsuspecting investors.
Connecticut Nonprofit Pays $1 Million Ransom After Sophisticated Cyberattack
News
Connecticut Nonprofit Pays $1 Million Ransom After Sophisticated Cyberattack
A Connecticut-based nonprofit, the National Association for Amateur Radio (ARRL), has fallen victim to a sophisticated cyberattack that cost them $1 million in ransom.

TOP CYBERSECURITY HEADLINES

SECURITYWEEK INDUSTRY EXPERTS

Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Feature Videos​

  • All
  • Application Security
  • Blog
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Information Security
  • Network Security
  • News
  • Phishing
  • Ransomware
  • Resources
  • Security Spotlight
  • Threat Actors
  • Threat Detection Tools
  • Uncategorized
Critical Flaw in NVIDIA Container Toolkit Allows Full Host Takeover
A critical flaw (CVE-2024-0132) in NVIDIA Container Toolkit allows container escape, granting full host access and enabling attackers to execute commands and exfiltrate data.
UMC Hospital Lubbock Still Crippled by Devastating Ransomware Attack
UMC hospital in Lubbock faces a crippling ransomware attack, diverting ambulances and impacting patient care. The emergency room remains open, but the IT outage persists. ...
What is DNS Spoofing/DNS Cache Poisoning and How Can It Compromise Your Network?
DNS spoofing, also known as DNS cache poisoning, is a malicious technique that exploits vulnerabilities in the DNS system to redirect users to fraudulent websites, ...
This Week In Cybersecurity: 23rd September to 27th September
Harvey Nichols Data Breach: High-End Retailer Confirms Customer Data Exposure in Cyberattack Harvey Nichols has confirmed a data breach affecting its customers, exposing personal information ...
Meta Fined €91 Million: DPC Concludes Inquiry into Data Breach
Meta Platforms Ireland Limited has been fined €91 million by the Data Protection Commission for failing to protect user passwords adequately, highlighting the importance of ...
MC2 Data Leak: Over 100 Million Americans Exposed in Massive Data Breach
The MC2 Data breach has exposed the sensitive personal information of over 100 million Americans, representing nearly a third of the US population.
FBI and Homeland Security Investigate Critical Water Facility Cyberattack in Kansas
FBI and Homeland Security investigate a Kansas water facility cyberattack, forcing manual operations but ensuring uninterrupted service. The incident highlights critical infrastructure vulnerabilities.
AutoCanada Ransomware Attack: Employee Data Compromised
AutoCanada's August ransomware attack, claimed by Hunters International, may have exposed employee data including payroll, addresses, and social security numbers.
US Capitol Dark Web Cyber Attack: Thousands of Staffers’ Data Leaked
A massive Dark Web Cyber Attack on the US Capitol has exposed personal information of over 3,000 congressional staffers.
MoneyGram Cyberattack: Outage Enters Day Three, Ransomware Suspected
MoneyGram, a leading global money transfer company, is facing a major outage that has disrupted its systems and payment services for three days. The company ...
Dell Data Breached Again! Hackers Claim Second Attack Within a Week, Exposing 3.5GB of Data
Hackers claim a second Dell data breach within a week, accessing 3.5GB of company data, including internal infrastructure information and user credentials.
The Chaser Cyberattack: Hong Kong Diaspora Media in Britain Reports ‘Government-Backed’ Attacks
A Hong Kong diaspora news website in Britain, The Chaser, has reported a "government-backed" cyberattack targeting its company email, raising concerns about the growing pressure ...
Kansas Water Facility Cyberattack: Arkansas City Water Treatment Plant Targeted
Hackers targeted the water treatment plant in Arkansas City, Kansas, prompting a federal investigation. The city assured residents that the water supply is safe, and ...
Dell Investigates Data Breach Claims After Hacker Leaks Employee Info
Dell Data Breach: Hacker Leaks Employee Information, Company Investigates
23andMe Board Resigns Amidst CEO’s Takeover Bid: A Battle for Control
All independent directors of 23andMe have resigned, citing disagreements with CEO Anne Wojcicki's plan to take the company private. This leaves Wojcicki as the sole ...
CrowdStrike Outage Sparks Security Vendor Switches: Businesses Seek Resilience After Widespread Downtime
A CrowdStrike outage in July left millions of Windows devices offline, prompting some businesses to switch security vendors.
Change Healthcare Data Breach Class Action Lawsuits Update
Change Healthcare, a major healthcare technology company, suffered a massive data breach in February 2024, exposing the personal and medical information of an estimated 100 ...
Change Healthcare Data Breach Letter: What You Need to Know and How to Protect Yourself
Many in the Ozarks have received letters from Change Healthcare notifying them of a data breach. The letter details the breach, which occurred in February, ...
Disney’s Slack Data Breach Forces Disney’s to Ditch Slack
Disney is severing ties with Slack after a major data breach exposed sensitive company information, highlighting the growing cybersecurity threat landscape.
DFA Data Breach: Cybersecurity Issues Put 28 Million Passports at Risk
The Department of Foreign Affairs (DFA) in the Philippines faces a potential DFA data breach affecting over 28 million passport holders due to a lack ...