Despite warnings from Health-ISAC and the NCC Group, the remote access software maker says defense-in-depth kept customers' data safe from Midnight Blizzard.

Though the Chicago-area hospital did not pay a ransom, a host of sensitive medical information is now at risk.

Just because mainframes are old doesn't mean they're not in use. Mainframe Security Posture Management brings continuous monitoring and vigilance to the platform.

The combined skills from Beazley's cybersecurity services team and Lodestone will go into the company's new managed extended detection and response (MXDR) service.

Episode 2: Incident response experts-turned-ransomware negotiators Ed Dubrovsky, COO and managing partner of CYPFER, and Joe Tarraf, chief delivery officer of Surefire Cyber, explain how they interact with cyber threat actors who hold victim organizations' systems and data for ransom. Among their fascinating stories: how they negotiated with cybercriminals to restore operations in a hospital NICU where lives were at stake, and how they helped a church, where the attackers themselves "got a little religion."

CISA outlines how modern cybersecurity relies on network visibility to defend against threats and scams.

The vulnerability affects not only AirPods, but also AirPods Max, Powerbeats Pro, Beats Fit Pro, and all models of AirPods Pro.

More than 200 regional and national government agencies have been impacted by the ransomware attack, and few of them are once again operational.

In an incident with direct parallels to the recent Ticketmaster compromise, an Aussie live events giant says it was breached via a third-party cloud provider, as ShinyHunters takes credit.

The notorious cyber espionage group has been harrying French interests for years, and isn't flagging now as the Paris Olympics approach.

Cops decimate cybercrime infrastructure used to steal data from nearly 2,000 people in Singapore last year.

Threat actors were able to breach Blackbaud's systems and compromise sensitive data, largely because of the company's poor cybersecurity practices and lack of encrypted data, the AG said.

The company has emerged from stealth with an AI-powered platform designed to give organizations visibility into unmanaged data.

Threat actors were able to breach the department using the credentials accessed through phishing emails.

The Arid Viper APT group is deploying AridSpy malware with Trojanized messaging applications and second-stage data exfiltration.

Though the company is informing affected individuals of a breach, it's keeping the nature and scope of the cybersecurity incident that led to it under wraps.

More claims are being made across the US and Canada compared with previous years, with healthcare organizations leading the way.

As city officials continue to investigate, it's unclear which systems were affected and whether it was a ransomware attack.

Accused cybercriminal has special skills that helped Conti and LockBit ransomware evade detection, according to law enforcement.

Lacework has been looking for a buyer for some time. The deal gives Fortinet a boost in the cloud security space.

London cops make arrests in connection with scam SMS messages, purportedly from official organizations, being sent out from bespoke phone mast.

The latest platform update from SolarWinds includes patches for three vulnerabilities, including two high-severity bugs.

Four suspects were taken into custody, accused of paying intermediaries in Moldova to inform criminals of their Red Notice status and wipe law-enforcement flags from the system.

Hijacking malware gets spread through TikTok's direct messaging and doesn't require the victim to click links or download anything.

Because of the role the Confluence Server plays in managing documentation and knowledge data bases, the researchers recommend users upgrade to patch CVE-2024-21683 as soon as possible.

International law enforcement Operation Endgame shifts its crackdown to focus on individual adversaries.

The previously unknown threat actor uses tools similar to those used by North Korean APT groups, according to Cisco Talos.

Though information such as dates of birth, email addresses, and home addresses were compromised, "the Beeb" assures individuals that financial information is still protected.

The political consultant who wrote the script and paid for the deepfake audio used in robocalls was fined $6 million by the FCC.

Corporate admins should patch the max-severity CVE-2024-23108 immediately, which allows unauthenticated command injection.

The committee is being set up as the ChatGPT creator begins to train its latest large language model, GPT-5, which will reach "a new level of capabilities."

Users get duped into downloading malicious files disguised to look like an application that uses artificial intelligence to alter voices.

The tech company has rolled out fixes for a type confusion vulnerability that has already been exploited by malicious actors.

The spyware is able to capture screenshots of a user's device every few seconds from any location globally.

Upgrade, an ARPA-H program, will focus on automating cybersecurity for healthcare institutions so that providers can focus on patient care.

The max-severity bug affects versions using the SAML single sign-on mechanism.

The startup's new platform addresses AI privacy, governance, and security so that enterprises can use AI safely and effectively.

As a newly independent company, SAGE Cyber will offer a platform that helps CISOs make data-driven decisions and optimize their security defenses.

Personalized phishing emails with fake collaboration opportunities and compromised video descriptions linking to malware are just some of the new tricks.

The Siren email mailing list will focus on operational impact and response, acting as a central location to provide information about threats and necessary post-disclosure activities.

The acquisition gives CyberArk new IoT identity and certificate life-cycle management, cryptographic code-signing, and other services to secure the enterprise cloud.

Financial firms covered under new regulations will be required to establish a clear response and communications plan for customer data breaches.

Google has rolled an emergency patch for CVE-2024-4947, the third Chrome zero-day it's addressed in the past week.

Instead of online contraband, the website now asks anyone with information that could help with the investigation to contact authorities.

At least 15 television channels were interrupted in Ukraine alone, which, reportedly, is not out of the norm in this "information war."

Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddit, to the table.

The city is still investigating the attack, and neither the group nor city officials have offered details about the ransomware demands.

Instead of building a list of users and identifying which systems each user can access, Token Security starts with a list of machines and determines who can access each system.

The research shows a significant drop in the number of tech CISOs that got a base salary increase in the past year — roughly 18% year-over-year.