Simon Hendery

The DPRK's Lazarus threat group allegedly breached over 100 devices in several countries, including the U.S., Canada, Japan and Taiwan, according to Microsoft.

The newly discovered InfectedSlurs botnet is being built through the exploitation of two zero-day RCE vulnerabilities in routers and network video recorder devices.

The medical transcription company Perry Johnson & Associates provides services to multiple U.S. healthcare organizations and the breach is the sector’s second largest this year.

The global botnet proxy service, run by a Russian and Moldovan national, compromised over 23,000 devices and earned him more than $550,000.

After targeting more than 350 victims in 13 months, the prolific Royal ransomware group indicates it may change its identity, according to CISA and the FBI.

The short-lived ransomware gang’s assets are going cheap, its affiliates are expected to move on to other extortion activities.

After exploiting MOVEit, GoAnywhere and PaperCut vulnerabilities the prolific Clop ransomware gang pivots and targets a SysAid zero-day server bug.

Researchers duped the Nokoyawa ransomware-as-a-service operator "farnetwork" into disclosing more about themselves than they probably intended.

After years of generous funding and inflated valuations, cybersecurity startups are finding it harder to raise capital, but the best ones will still prosper, VCs say.

The FBI warns the gang is up to its old tricks, initiating ransomware attacks by executing a complex but effective social-engineering scam.