How Soccer's 2022 World Cup in Qatar Was Nearly Hacked

A China-linked threat actor had access to a router configuration database that could have completely disrupted coverage, a security vendor says.

Oil & Gas Sector Falls for Fake Car Accident Phishing Emails

Effective Rhadamanthys phishing campaign spoofs nonexistent "Federal Bureau of Transportation" to compromise recipients, analysts discover.

Omni Hotel IT Outage Disrupts Reservations, Digital Key Systems

Guests affected by the companywide disruption vented their frustrations on social media.

The Biggest Mistake Security Teams Make When Buying Tools

Security teams often confuse tool purchasing with program management. They should focus on what a security program means to them, and what they are trying to accomplish.

NIST Wants Help Digging Out of Its NVD Backlog

The National Vulnerability Database can't keep up, and the agency is calling for a public-private partnership to manage it going forward.

HHS Plans for Cyber 'One-Stop Shop' After United Healthcare Attack

The initiative is meant to provide more resources and better strategies for healthcare entities that face an increasing amount of cybersecurity challenges.

Iran's Evolving Cyber-Enabled Influence Operations to Support Hamas

Understanding Iran's techniques, coupled with comprehensive threat intel, can give organizations an edge in identifying and defending against these attacks.