Credit reporting company Experian plc is in the news for the wrong reasons again, with a report claiming that identity thieves exploited a security weakness on its website to obtain credit reports. KrebsOnSecurity reported today that identity thieves are successfully exploiting the Experian website to obtain credit reports by using a person’s name, address, birthday and ...

Researchers at Division Seven, SafeGuard Inc.’s threat intelligence team today detailed how customers at a cryptocurrency firm they work with were targeted by a threat actor using a social engineering attack with a twist: The hackers were pretending to be a well-known employee. The investigation was launched following a report by Microsoft Security in December into targeted ...

Hackers and those in cybercrime can never be accused of not being creative and a new credential theft campaign highlights the fact: It uses Facebook copyright notices to obtain user credentials. Detailed today by researchers at Avanan, a Check Point Software Technologies Ltd. company, hackers are leveraging Facebook copyright infringement notices to steal credentials. The attack ...

Apple Inc.’s long-awaited mixed reality headset could finally debut later this year, with a new report suggesting that the device may be launched in the northern spring ahead of Apple’s Worldwide Developers Conference. Mark Gurman at Bloomberg today reported that the device has already been shared with a few high-profile developers for testing and software development, ...

Venture capital exits slowed to a halt as the rest of the market continued to struggle, according to a first look at the fourth-quarter PitchBook-NVCA Venture Monitor released ahead of a full report next week. For the full year, angel and seed stage deal activity continued to buck the overall downward market trend, with $21 ...

Security intelligence firm LogRhythm Inc. today announced a series of expanded capabilities and integrations that propel its service’s ability to be a much-needed force multiplier for security teams who are expected to confidently, effectively and efficiently defend against cyberattacks. Following the launch of the cloud-native security operations platform Axon in October, LogRythm is introducing new visualizations and analytics ...

Two cryptocurrency-related companies have announced significant job cuts as the effects of both the collapse of FTX Trading Ltd. and the broader macroeconomic outlook continue to hit the industry particularly hard. Leading the list today was an announcement from New York Stock Exchange-listed cryptocurrency banking platform Silvergate Capital Corp. The company said that it was ...

Cloud security startup Netskope Inc. said today it has raised $401 million in new funding through convertible notes to boost its platform development and expand go-to-market activities. Morgan Stanley Tactical Value led the convertible note raise, with Goldman Sachs Asset Management, Ontario Teachers’ Pension Plan and CPP Investments also participating. Founded in 2012, Netskope offers a Secure ...

Security researchers at Symantec today detailed a new cybercrime group that’s actively targeting the financial sector in Francophone countries in Africa. Dubbed “Bluebottle,” the group is said to make extensive use of Living off the Land, dual-use tools and commodity malware, with no custom malware deployed. A LotL attack is a cyberattack where intruders use ...

Data relating to more than 200 million Twitter Inc. users have been published on a hacking forum two weeks after data relating to 400 million Twitter users was offered for sale on the same forum. The data is available to download from BreachForums, the successor site to the now-shuttered RaidForums. The listing describes the data as a “DB/Scrape Leak,” ...