A ‘very large percentage’ of Pixel phones have a hidden security vulnerability

An app for store employees to show off devices had privileges it didn’t need. A fix is on the way.

Latest stories for ZDNET in Security – ​Read More

Russian Hacker Jailed 3+ Years for Selling Stolen Credentials on Dark Web

A 27-year-old Russian national has been sentenced to over three years in prison for peddling financial information, login credentials, and other personally identifying information (PII) on a now-defunct dark web marketplace called Slilpp.
Georgy Kavzharadze, 27, of Moscow, Russia, pleaded guilty to one count of conspiracy to commit bank fraud and wire fraud earlier this February. In addition to

The Hacker News – ​Read More

The AI Balancing Act: Unlocking Potential, Dealing with Security Issues, Complexity

Many organizations struggle with AI literacy, cautious adoption, and risks of immature implementation, leading to disruptions in security, including data threats and AI misuse.

Cyware News – Latest Cyber News – ​Read More

Report: Ransomware Gangs Rake in More Than $450 Million in First Half of 2024

Ransomware groups have earned over $450 million in H1 2024 by extorting victims through cryptocurrency payments, according to a report by Chainalysis. It has risen from the previous year, with a record ransom payment of $75 million reported.

Cyware News – Latest Cyber News – ​Read More

Russian Hackers Using Fake Brand Sites to Spread DanaBot and StealC Malware

Cybersecurity researchers have shed light on a sophisticated information stealer campaign that impersonates legitimate brands to distribute malware like DanaBot and StealC.
The activity cluster, orchestrated by Russian-speaking cybercriminals and collectively codenamed Tusk, is said to encompass several sub-campaigns, leveraging the reputation of the platforms to trick users into downloading the

The Hacker News – ​Read More

Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign

Security researchers at Palo Alto Networks discover a threat actor extorting organizations after compromising their cloud environments using inadvertently exposed environment variables.

The post Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign appeared first on SecurityWeek.

SecurityWeek – ​Read More

In Other News: 400 CNAs, Crash Reports, Schlatter Cyberattack

Noteworthy stories that might have slipped under the radar: there are 400 CVE Numbering Authorities, crash reports can be a valuable source of information, and Schlatter was hit by a cyberattack.

The post In Other News: 400 CNAs, Crash Reports, Schlatter Cyberattack appeared first on SecurityWeek.

SecurityWeek – ​Read More

Russian Citizen Sentenced in US for Selling Stolen Financial Data on Criminal Marketplace

A Russian citizen, known by various online names like “TeRorPP,” has been sentenced to 40 months in a U.S. prison for selling financial data and login credentials on the criminal marketplace Slilpp.

Cyware News – Latest Cyber News – ​Read More

Why Are Organizations Losing the Ransomware Battle?

Institutionalizing and sustaining fundamental cybersecurity practices requires a commitment to ongoing vigilance, active management, and a comprehensive understanding of evolving threats.

darkreading – ​Read More

Consolidation vs. Optimization: Which Is More Cost-Effective for Improved Security?

Security leaders are facing big decisions about how they use their monetary and people resources to better secure their environments.

The post Consolidation vs. Optimization: Which Is More Cost-Effective for Improved Security? appeared first on SecurityWeek.

SecurityWeek – ​Read More