Notification omits a number of key details Popular flight-tracking app FlightAware has admitted that it was exposing a bunch of users’ data for more than three years.… This article has been indexed from The Register – Security Read the original…
Category: The Register – Security
Iran named as source of Trump campaign phish, leaks
Political stirrer Roger Stone may have been a weak link after personal emails cracked US authorities have named Iran as the likely source of a recent attack on the campaign of the US Republican Party’s presidential nominee, Donald Trump.… This…
Digital wallets can allow purchases with stolen credit cards
Researchers find it’s possible to downgrade authentication checks, and shabby token refresh policies Digital wallets like Apple Pay, Google Pay, and PayPal can be used to conduct transactions using stolen and cancelled payment cards, according to academic security researchers.… This…
OpenAI kills Iranian accounts using ChatGPT to write US election disinfo
12 on X and one on Instagram caught in the crackdown OpenAI has banned ChatGPT accounts linked to an Iranian crew suspected of spreading fake news on social media sites about the upcoming US presidential campaign.… This article has been…
Multiple flaws in Microsoft macOS apps unpatched despite potential risks
Windows giant tells Cisco Talos it isn’t fixing them Cisco Talos says eight vulnerabilities in Microsoft’s macOS apps could be abused by nefarious types to record video and sound from a user’s device, access sensitive data, log user input, and…
National Public Data tells officials ‘only’ 1.3M people affected by intrusion
Investigators previously said the number was much, much higher The data broker at the center of what may become one of the more significant breaches of the year is telling officials that just 1.3 million people were affected.… This article…
RansomHub-linked EDR-killing malware spotted in the wild
Also: Your external-facing NetSuite sites need a review; five popular malware varieties for Q2, and more in brief Malware that kills endpoint detection and response (EDR) software has been spotted on the scene and, given it’s deploying RansomHub, it could…
After nearly 3B personal records leak online, Florida data broker confirms it was ransacked by cyber-thieves
Names, addresses, Social Security numbers, more all out there A Florida firm has all but confirmed that millions of people’s sensitive personal info was stolen from it by cybercriminals and publicly leaked.… This article has been indexed from The Register…
Unicoin hints at potential data meddling after G-Suite compromise
Attacker locked out all staff for four days The cryptocurrency offshoot of reality TV and entrepreneurship show Unicorn Hunters has confirmed that an unknown attacker compromised its G-Suite, locking all staff out of their accounts.… This article has been indexed…
Navigating the future of cybersecurity
Take a deep dive into the world of emerging cyber threats and defense strategies with Cloudflare Webinar In a world where cyber threats are continually evolving, staying informed is critical for IT and security professionals.… This article has been indexed…
DARPA, ARPA-H award $14m to 7 AIxCC semifinalists, with a catch
Teams wanting the cash have to commit to handing their models to OpenSSF after next year’s final One year after it began, the DARPA AI Cyber Challenge (AIxCC) has whittled its pool of contestants down to seven semifinalists.… This article…
Google raps Iran’s APT42 for raining down spear-phishing attacks
US politicians and Israeli officials among the top targets for the IRGC’s cyber unit Google has joined Microsoft in publishing intel on Iranian cyber influence activity following a recent uptick in attacks that led to data being leaked from the…
Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail
He’ll also have to pay back $1.2 million from fraudulent transactions he facilitated A Russian national is taking a trip to prison in the US after being found guilty of peddling stolen credentials on a popular dark web marketplace.… This…
Mad Liberator extortion crew emerges on the cyber-crook scene
Anydesk is its access tool of choice A new extortion gang called Mad Liberator uses social engineering and the remote-access tool Anydesk to steal organizations’ data and then demand a ransom payment, according to Sophos X-Ops.… This article has been…
Over 40 million Kakao Pay users’ data somehow ended up with Alipay
Payment arm of Korean messaging app denies any illegal activity Kakao Pay, a subsidiary of Korea’s WhatsApp analog Kakao, handed over data from more than 40 million users to the Singaporean arm of Chinese payment platform Alipay, without user consent,…
China-linked cyber-spies infect Russian govt, IT sector
No, no, go ahead, don’t let us stop you, Xi Cyber-spies suspected of connections with China have infected “dozens” of computers belonging to Russian government agencies and IT providers with backdoors and trojans since late July, according to Kaspersky.… This…
Russian cyber snoops linked to massive credential-stealing campaign
Citizen Lab also spots a COLDWASTREL swimming in the Rivers of Phish Russia’s Federal Security Service (FSB) cyberspies, joined by a new digital snooping crew, have been conducting a massive online phishing espionage campaign via phishing against targets in the…
Texas sues GM for selling driver data to analytics, insurance companies
Lone Star State alleges GM cashed in with “millions in lump sum payments” from the sale Texas has sued General Motors for what it said is a years-long scheme to collect and sell drivers’ data to third parties – including…
Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster
Three state attorneys general probed the company and found plenty to chastise Biotech biz Enzo Biochem is being forced to pay three state attorneys general a $4.5 million penalty following a 2023 ransomware attack that compromised the data of more…
Palo Alto Networks execs apologize for ‘hostesses’ dressed as lamps at Black Hat booth
Company admits turning human women into faceless, sexualized furniture was a ‘tone deaf’ marketing ploy If you attended the Black Hat conference in Vegas last week and found yourself over in Palo Alto Networks’ corner of the event, you may…