Incident reporting: who got in, how long they stayed, and what it cost.
A Ukrainian man has received a four-year prison sentence for his involvement in Conti ransomware operations that targeted networks across the United States and internationally between 2021 and 2022.
As AI takes on more investigative duties in security operations centers, organizations face tough questions about how much autonomy to grant machines and where humans must retain final authority.
A dark web marketplace called Nexus is offering digital scans of over 153 million driver's licenses from the U.S. and Canada, apparently sourced from a Louisiana-based identity verification company whose clients include major retailers and car rental firms.
A new free service called DecryptAds aggregates publicly available advertising data to reveal which companies are serving ads and collecting information from websites and mobile apps—including those based in geopolitically sensitive regions.
A 26-year-old from Ontario has pleaded guilty to orchestrating a scheme that compromised customer data at over 165 firms using Snowflake, along with stealing records from more than 100 million AT&T customers.
Security researchers have uncovered that budget TV streaming devices engage in a dual operation: they function as residential proxies when users watch content, then switch to participating in large-scale ad fraud schemes when idle.
A six-month exposure of CISA's AWS keys and internal passwords in a public GitHub repository has prompted the agency to release a detailed postmortem highlighting systemic weaknesses in secret management and external reporting channels.
Two key members of the Scattered Spider cybercrime group pleaded guilty in UK court to charges related to the August 2024 disruption of Transport for London, with additional U.S. indictments revealing a sprawling operation targeting healthcare providers, retailers, and tech companies.
