Trend Micro’s Zero Day Initiative, a major player in the vulnerability disclosure ecosystem, is ramping up the pressure on software vendors that consistently ship faulty security patches.
SEC Charges 18 Over Scheme Involving Hacked Brokerage Accounts
The US Securities and Exchange Commission this week announced charges against 18 individuals and entities for their roles in a pump-and-dump scheme that involved account hacking.
Fugitive Arrested After 3 Years on Charges Related to BEC Scheme
The United States Department of Justice (DoJ) has announced the arrest of Njuh Valentine Fombe, who was wanted for his role in a business email compromise (BEC) scheme.
Indicted in 2019, Fombe was a fugitive for three years until he was arrested on August 6. He is charged with conspiracy to commit wire fraud and money laundering, and with aggravated identity theft.
Three Nigerian BEC Fraudsters Extradited From UK to US
Three Nigerians have been extradited from the United Kingdom to the United States to face charges in relation to their roles in business email compromise (BEC) fraud schemes, the US Department of Justice announced.
Microsoft Announces Disruption of Russian Espionage APT
Microsoft on Monday announced another major disruption of an APT actor believed to be linked to the Russian government, cutting off access to accounts used for pre-attack reconnaissance, phishing, and email harvesting.
How Bot and Fraud Mitigation Can Work Together to Reduce Risk
Onions are great for analogies, as are buckets full of stuff from the beach. In this piece, I’d like to take a look at how both of these analogies can help us understand how bot and fraud mitigation can work together to help enterprises both improve their security postures and lower their fraud losses.
Twilio Hacked After Employees Tricked Into Giving Up Login Credentials
Enterprise software vendor Twilio (NYSE: TWLO) has been hacked by a relentless threat actor who successfully tricked employees into giving up login credentials that were then used to steal third-party customer data.
Greece Flies Russian Money Launderer to US: Lawyer
Greece has extradited a Russian money launderer to the US, hours after his release from a French jail, his lawyer said Friday.
Ghost Security Snags $15M Investment for API Security Tech
Texas startup Ghost Security has joined the list of early-stage companies in the API and application security space attracting venture capital funding.
The Austin-based company emerged from stealth this week with $15 million in investments from 468 Capital, DNX Ventures, and Munich Re Ventures.
Slack Forces Password Resets After Discovering Software Flaw
Workplace productivity software giant Slack on Friday forced password resets for a tiny fraction of its users after the discovery of a security flaw that exposed Slack credentials.
Slack’s security response team alerted users to the issue via email and followed up with a blog post warning about the risk of passwords leaking to a skilled attacker.
