Microsoft’s new Surface Laptop Ultra features Nvidia’s RTX Spark processor, up to 128GB of unified memory, and a premium starting price for power users.
The FBI reports that attackers continue to exploit the FortiBleed vulnerability to deny legitimate administrators access to Fortinet devices.
The NBA star disclosed his security breach at a NordVPN event, highlighting the risks of digital identity theft for high-profile individuals.
The executive behind ransomware recovery firm MonsterCloud faces charges for allegedly paying attackers to decrypt data while claiming to use proprietary technology.
A security researcher has demonstrated a novel method to invoke JavaScript functions by overwriting Error.prepareStackTrace, bypassing traditional syntax restrictions.
The tensorlake TypeScript SDK was hijacked in a supply chain attack, with version 0.5.144 distributing malware that steals credentials and executes remote code.
Ivan Milenkovic details how security leaders can build economic models to quantify risk and justify spending to CFOs.
Federal prosecutors accuse the firm's founder of defrauding victims by paying attackers to decrypt data while claiming proprietary recovery methods.
The State Department is seeking information on a Chinese national charged in the 2021 Microsoft Exchange Server breaches known as HAFNIUM.
Threat actors are abusing a Fortinet vulnerability to delete legitimate administrator accounts and passwords, effectively locking victims out of their security devices.
Federal authorities accuse Zohar Pinhasi of defrauding clients by paying ransomware gangs while billing them exorbitant recovery fees.
Federal agencies alert administrators that Fortinet systems remain under active targeting for lockout attacks via the FortiBleed vulnerability.
Law enforcement and oversight bodies warn that delayed adoption of quantum-resistant security measures risks exposing sensitive data to future decryption.
Researchers reveal a campaign using stolen maintainer credentials to inject malicious GitHub Actions into hundreds of open-source repositories.
Attackers are leveraging legitimate Bing search redirects within Google Ads to trick users into downloading fake Claude installers that deploy the ClickFix malware.
Anas Hattab launched a Telegram group to help drivers avoid checkpoints and dangers in the occupied West Bank.
Security firm ESET has documented the evolution of MATCHBOIL, a downloader used by the UAC-0099 threat group to install spying backdoors on Windows systems in Ukraine.
An investigation reveals a fraudster paid ransoms for decryption keys, then charged victims significantly more for remediation services using fake tools.
Rapid progress in quantum computing necessitates immediate federal preparation for post-quantum cryptographic defenses.
Black Lotus Labs reports a cryptomining botnet using a GitHub poem to hide command-and-control addresses, compromising over 3,400 servers.
A co-founder of the dark web marketplace Empire Market has been sentenced to 40 years in prison for enabling hundreds of millions in illegal transactions.
Analysis reveals Wazza phishkit employs advanced session management to target banking, government, and manufacturing entities across three continents.
Online retailer ASOS confirms attackers used social engineering to steal credentials and access customer personal data in a recent incident.
Christiaan Beek of Rapid7 Intelligence discusses how the BPFDoor malware uses magic packets to evade detection on mail gateways and telecom infrastructure.