
Cybersecurity

Under lock and key: Protecting corporate data from threat actors in 2025
Data breaches can cause a loss of revenue and market value as a result of diminished customer trust and reputational damage 21 Jan 2025 • , 5 min. read There were over 3,200 data compromises in the United States in 2023, with 353 million victims, including those affected multiple times, according to the US Identity…

Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025
As IT environments grow more complex, IT professionals are facing unprecedented pressure to secure business-critical data. With hybrid work the new standard and cloud adoption on the rise, data is increasingly distributed across different environments, providers and locations, expanding the attack surface for emerging cyberthreats. While the need for a strong data protection strategy has…

Who is the DOGE and X Technician Branden Spikes? – Krebs on Security
At 49, Branden Spikes isn’t just one of the oldest technologists who has been involved in Elon Musk’s Department of Government Efficiency (DOGE). As the current director of information technology at X/Twitter and an early hire at PayPal, Zip2, Tesla and SpaceX, Spikes is also among Musk’s most loyal employees. Here’s a closer look at…

The state of ransomware: Fragmented but still potent despite takedowns
Increased law enforcement actions, improved international collaboration, and a growing refusal by victims to pay extortion demands has led a drop in ransomware payments by around a third. Total volume of ransom payments dropped from $1.25 billion in 2023 to $811million last year, according to a recent study by blockchain data analytics firm Chainalysis. In…

Incident response for web application attacks | TechTarget
As long as web application attacks are successful, malicious actors will continue to target them. Even with strong security programs, organizations will fall victim to such attacks. To come out the other side as unscathed as possible, it is important for organizations to have a web application incident response plan in place. Incident response…

Cloud IMS: The Confluence of Innovation and Security in Modern Telecommunications
The telecom industry is at a major turning point. With 5G, IoT, and AI reshaping global connectivity, the need for scalable, secure, and smart networks is higher than ever. Cloud IMS is stepping up as a game-changer, combining the flexibility of cloud technology with the reliability of traditional IMS systems. Virtualizing core network functions helps…

How to safely dispose of old tech without leaving a security risk – Help Net Security
Every year, millions of old tech are thrown away due to age, malfunctions, or to make way for new ones, which creates security risks related to the data on these devices. The data can often still be recovered if devices are erased without proper tools and procedures. Here’s why securely disposing of old tech is…

PlushDaemon compromises supply chain of Korean VPN service
ESET researchers provide details on a previously undisclosed China-aligned APT group that we track as PlushDaemon and one of its cyberespionage operations: the supply-chain compromise in 2023 of VPN software developed by a South Korean company, where the attackers replaced the legitimate installer with one that also deployed the group’s signature implant that we have…

What PCI DSS v4 Really Means – Lessons from A&F Compliance Journey
Mar 07, 2025The Hacker NewsPayment Security / Compliance Access on-demand webinar here Avoid a $100,000/month Compliance Disaster March 31, 2025: The Clock is Ticking. What if a single overlooked script could cost your business $100,000 per month in non-compliance fines? PCI DSS v4 is coming, and businesses handling payment card data must be prepared. Beyond…

Feds Link $150M Cyberheist to 2022 LastPass Hacks – Krebs on Security
In September 2023, KrebsOnSecurity published findings from security researchers who concluded that a series of six-figure cyberheists across dozens of victims resulted from thieves cracking master passwords stolen from the password manager service LastPass in 2022. In a court filing this week, U.S. federal agents investigating a spectacular $150 million cryptocurrency heist said they had…