Incubated at Cambridge University’s engineering department, Featurespace’s algorithmic-based solutions analyze transaction data to detect fraud cases.
The post Visa to Acquire Fraud Protection Firm Featurespace appeared first on SecurityWeek.
Meta Hit With $102 Million Privacy Fine From European Union Over 2019 Password Security Lapse
Meta fined more than $100 million by a European Union privacy regulator over a security lapse involving Facebook passwords.
The post Meta Hit With $102 Million Privacy Fine From European Union Over 2019 Password Security Lapse appeared first on SecurityWeek.
In Other News: Salt Typhoon Hacks US ISPs, China Doxes Hackers, New Tool for AI Attacks
Noteworthy stories that might have slipped under the radar: China’s Salt Typhoon has hacked US ISPs, China has doxed Taiwanese hackers, and Bishop Fox has a new tool for AI attacks.
The post In Other News: Salt Typhoon Hacks US ISPs, China Doxes Hackers, New Tool for AI Attacks appeared first on SecurityWeek.
US Announces Charges, Sanctions Against Russian Administrator of Carding Website
US offers up to $10 million for information on Timur Shakhmametov, charging him with running the carding website Joker’s Stash.
The post US Announces Charges, Sanctions Against Russian Administrator of Carding Website appeared first on SecurityWeek.
Critical Linux CUPS Printing System Flaws Could Allow Remote Command Execution
A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit remote command execution under certain conditions.
“A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print
“A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print
Progress urges admins to patch critical WhatsUp Gold bugs ASAP
Progress Software warned customers to patch multiple critical and high-severity vulnerabilities in its WhatsUp Gold network monitoring tool as soon as possible. […]
Sophistication of AI-Backed Operation Targeting Senator Points to Future of Deepfake Schemes
Experts believe schemes like this will become more common now that the technical barriers that once existed around generative artificial intelligence have decreased.
The post Sophistication of AI-Backed Operation Targeting Senator Points to Future of Deepfake Schemes appeared first on SecurityWeek.
Tor Merges With Security-Focused OS Tails
The Tor Project announced that it has merged operations with the security-focused operating system Tails.
The post Tor Merges With Security-Focused OS Tails appeared first on SecurityWeek.
How to Plan and Prepare for Penetration Testing
As security technology and threat awareness among organizations improves so do the adversaries who are adopting and relying on new techniques to maximize speed and impact while evading detection.
Ransomware and malware continue to be the method of choice by big game hunting (BGH) cyber criminals, and the increased use of hands-on or “interactive intrusion” techniques is especially alarming.
Ransomware and malware continue to be the method of choice by big game hunting (BGH) cyber criminals, and the increased use of hands-on or “interactive intrusion” techniques is especially alarming.
Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware Attacks
The threat actor known as Storm-0501 has targeted government, manufacturing, transportation, and law enforcement sectors in the U.S. to stage ransomware attacks.
The multi-stage attack campaign is designed to compromise hybrid cloud environments and perform lateral movement from on-premises to cloud environment, ultimately resulting in data exfiltration, credential theft, tampering, persistent
The multi-stage attack campaign is designed to compromise hybrid cloud environments and perform lateral movement from on-premises to cloud environment, ultimately resulting in data exfiltration, credential theft, tampering, persistent