A live, filtered feed drawn from regulators and industry press. Every headline is on-topic: business email compromise, wire and ACH fraud, check fraud, AML, banking risk, and consumer scams.
IDScan.net , a provider of identity verification models, has posted a notification of data security incident on its website. In the notification, IDScan.net said it received information on or around Sept. 1 that some of its data may have been accessed without
The Justice Department’s new National Fraud Enforcement Division is preparing to use vast government and commercial datasets to identify suspected fraud before receiving a whistleblower complaint, agency referral or corporate disclosure, potentially changing h
Starting Friday, European organizations will have just 24 hours to notify the EU government any time they discover serious product security incidents.
Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.
A Chinese-language group is compromising government and education sites to create a reverse-proxy network with gambling-themed sites.
Threat actors behind the "Phantom Deal" campaign are studying companies in extreme detail, aiming to dupe midlevel employees into initiating large financial transfers.
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the latest antics of ShinyHunters to new research about the prevalence (or lack thereof) of AI-generated malware.
The incident demonstrates how frontier AI agents can dramatically compress an attack timeline and coordinate a large-scale breach, according to researchers.
The "Spring Ring" operation aims to compromise users of the collaboration suite to remotely access their sessions, spread malware, and even take over infrastructure.
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on th
Some security researchers have observed an uptick in insider-assisted ransomware attacks, but malicious insiders pose other threats that cost companies millions.
The frustrating reality after an OT cyberattack: no data, no trail, and no history.
GoCaracal is a new modular malware framework that broadens Dark Caracal's capabilities to steal data and maintain access to victims.
Threat actors behind a notorious click-fraud botnet have set their sights on vehicle infotainment modules and are abusing legitimate functionality to spread infections.
The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more than just user credentials.
The West African nation launched financing, procurement, and infrastructure policies to boost its sovereign cloud initiative and increase domestic technical knowledge.
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake . Connor Riley
