Security News
![The password attacks of 2023: Lessons learned and next steps](/static/build/img/news/the-password-attacks-of-2023-lessons-learned-and-next-steps-small.jpg)
Password attacks take many forms: from phishing schemes that dupe employees into handing over their login information, to underground markets where bad actors can sell or purchase stolen credentials. Nearly half of incidents cited in Verizon's 2023 Data Breach Investigations Report involved compromised passwords.
![German police takes down Kingdom Market cybercrime marketplace](/static/build/img/news/german-police-takes-down-kingdom-market-cybercrime-marketplace-small.jpg)
The Federal Criminal Police Office in Germany and the internet-crime combating unit of Frankfurt have announced the seizure of Kingdom Market, a dark web marketplace for drugs, cybercrime tools, and fake government IDs. The law enforcement operation also included authorities from the United States, Switzerland, Moldova, and Ukraine, while one of the administrators has been arrested in the US. Kingdom Market was an English-speaking marketplace on the dark web with international reach that has operated since March 2021.
![Remote Encryption Attacks Surge: How One Vulnerable Device Can Spell Disaster](/static/build/img/news/remote-encryption-attacks-surge-how-one-vulnerable-device-can-spell-disaster-small.jpg)
Ransomware groups are increasingly switching to remote encryption in their attacks, marking a new escalation in tactics adopted by financially motivated actors to ensure the success of their...
![8220 gang exploits old Oracle WebLogic vulnerability to deliver infostealers, cryptominers](/static/build/img/news/8220-gang-exploits-old-oracle-weblogic-vulnerability-to-deliver-infostealers-cryptominers-small.jpg)
The 8220 gang has been leveraging an old Oracle WebLogic Server vulnerability to distribute malware, the Imperva Threat Research team has found. Active since 2017, the 8220 gang has been known for deploying cryptocurrency miners on Linux and Windows hosts by exploiting known vulnerabilities.
![GCHQ Christmas Codebreaking Challenge](/static/build/img/news/alt/cyberattack-costs-scaled-small.jpg)
About Bruce Schneier I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.
![Product Explained: Memcyco's Real-Time Defense Against Website Spoofing](/static/build/img/news/product-explained-memcyco-s-real-time-defense-against-website-spoofing-small.jpg)
Hands-On Review: Memcyco’s Threat Intelligence Solution Website impersonation, also known as brandjacking or website spoofing, has emerged as a significant threat to online businesses. Malicious...
![Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers](/static/build/img/news/citrix-bleed-leveraged-to-steal-data-of-35-million-comcast-xfinity-customers-small.jpg)
Telecommunications company Comcast has confirmed a breach that exposed personal information of more than 35.8 million of Xfinity customers. CVE-2023-4966 - an information disclosure vulnerability in Citrix NetScaler ADC/Gateway devices - was disclosed on October 10, when Citrix issued a patch to fix the vulnerability.
![Manchester's finest drowning in paperwork as Freedom of Information requests pile up](/static/build/img/news/manchester-s-finest-drowning-in-paperwork-as-freedom-of-information-requests-pile-up-small.jpg)
Greater Manchester Police must clear the backlog of hundreds of Freedom of Information Act requests - some years old - or find itself in contempt of court. The cop shop has 850 FOI requests to process, including upwards of 800 that are over six months old, 580 made more than 12 months ago, and the oldest submitted over two-and-a-half years ago.
![Alert: Chinese-Speaking Hackers Pose as UAE Authority in Latest Smishing Wave](/static/build/img/news/alert-chinese-speaking-hackers-pose-as-uae-authority-in-latest-smishing-wave-small.jpg)
The Chinese-speaking threat actors behind Smishing Triad have been observed masquerading as the United Arab Emirates Federal Authority for Identity and Citizenship to send malicious SMS messages...
![3,500 Arrested in Global Operation HAECHI-IV Targeting Financial Criminals](/static/build/img/news/3500-arrested-in-global-operation-haechi-iv-targeting-financial-criminals-small.jpg)
A six-month-long international police operation codenamed HAECHI-IV has resulted in the arrests of nearly 3,500 individuals and seizures worth $300 million across 34 countries. The exercise, which...