The ‘young mastermind’ of the Twitter hack will serve three years in juvenile detention. [...]

The American Rescue Act is the latest zeitgeisty lure being circulated in an email campaign. [...]

Insider Risk Management builds a framework around the new paradigm of "risk tolerance," aiming to give security teams the visibility and context around data activity to protect that data, without putting rigid constraints on users. [...]

A Florida high-school student faces jail time for rigging her school's Homecoming Queen election. [...]

Public proof-of-concept (PoC) exploits for ProxyLogon could be fanning a feeding frenzy of attacks even as patching makes progress. [...]

Google has released the side-channel exploit in hopes of motivating web-application developers to protect their sites. [...]

At SafeDNS, we see three entangled hurdles for MSPs in 2021 and the coming years— tied with the current economic uncertainty and somewhat linked to the pandemic. [...]

A year after COVID-19 was officially determined to be a pandemic, the methods and tactics used by cybercriminals have drastically changed. [...]

A legitimate binary for creating shortcut keys in Windows is being used to help the malware sneak past defenses, in a rash of new campaigns. [...]

A spam campaign hides a malicious executable behind file archive extensions. [...]

At least 10 nation-state-backed groups are using the ProxyLogon exploit chain to compromise email servers, as compromises mount. [...]

The financial cyber-gang is running limited attacks ahead of broader offensives on point-of-sale systems. [...]

The security hole in the Plus Addons for Elementor plugin was used in active zero-day attacks prior to a patch being issued. [...]

Surveillance footage from companies such as Tesla as well as hospitals, prisons, police departments and schools was accessed in the hack. [...]

Microsoft's regularly scheduled March Patch Tuesday updates address 89 CVEs overall. [...]

The critical flaws exist in Adobe Framemaker, Connect and the Creative Cloud desktop application for Windows. [...]

Apple pushed out security updates for a memory-corruption bug to devices running on iOS, macOS, watchOS and for Safari. [...]

A phishing attack targeting Microsoft users leverages a bogus Google reCAPTCHA system. [...]

The lack of cybersecurity requirements in weapons contracts from the Department of Defense opens the door for dangerous cyberattacks. [...]

Website admins should patch all plugins, WordPress itself and back-end servers as soon as possible. [...]

The cyberattack on SITA, a nearly ubiquitous airline service provider, has compromised frequent-flyer data across many carriers. [...]

A new variant of the Gafgyt botnet - that's actively targeting vulnerable D-Link and Internet of Things devices - is the first variant of the malware to rely on Tor communications, researchers say. [...]

Researchers with Microsoft and FireEye found three new malware families, which they said are used by the threat group behind the SolarWinds attack. [...]

Elite Russian forums for cybercriminals have been hacked in a string of breaches, leaving hackers edgy and worried about law enforcement. [...]

Espionage attacks exploiting the just-patched remote code-execution security bugs in Microsoft Exchange servers are quickly spreading. [...]