PLUS: Cyber-exec admits selling secrets to Russia; LastPass isn’t checking to see if you’re dead; Nation-state backed Windows malware; and more Infosec in brief Australia’s Signals Directorate (ASD) last Friday warned that attackers are installing an implant named “BADCANDY” on…
Category: The Register – Security
Russia finally bites the cybercrooks it raised, arresting suspected Meduza infostealer devs
Rare case of the state turning on its own, but researchers say it may be doing so more often Russia’s Interior Ministry says police have arrested three suspects it believes helped build and spread the Meduza infostealer.… This article has…
Attackers dig up $11M in Garden Finance crypto exploit
Bitcoin bridge biz offers 10 percent reward to attackers if they play nice Blockchain company Garden admits it was compromised and temporarily shut down its app after approximately $11 million worth of assets were stolen.… This article has been indexed…
Resilience, not sovereignty, defines OpenStack’s next chapter
Price hikes, politics, and platform fatigue drive organizations back toward open alternatives OpenInfra Summit Sovereignty might be the word of the hour, but the OpenStack community has another – resilience.… This article has been indexed from The Register – Security…
NHS left with sick PCs as suppliers resist Windows 11 treatment
Hospitals told to upgrade, but some medical device makers haven’t prescribed compatibility yet NHS hospitals are being blocked from fully upgrading to Windows 11 by a small number of suppliers that have yet to make their medical devices compatible with…
Europe preps Digital Euro to enter circulation in 2029
Because fewer people like banknotes, and payment sovereignty is a problem The Governing Council of the European Central Bank (ECB) has decided the bloc needs a digital version of the Euro, and ordered work that could see it enter circulation…
Suspected Chinese snoops weaponize unpatched Windows flaw to spy on European diplomats
Expired security cert, real Brussels agenda, plus PlugX malware finish the job Cyber spies linked to the Chinese government exploited a Windows shortcut vulnerability disclosed in March – but that Microsoft hasn’t fixed yet – to target European diplomats in…
Proton trains new service to expose corporate infosec cover-ups
Service will tell on compromised organizations, even if they didn’t plan on doing so themselves Some orgs would rather you not know when they’ve suffered a cyberattack, but a new platform from privacy-focused tech firm Proton will shine a light…
Docker Compose vulnerability opens door to host-level writes – patch pronto
Windows Desktop installer also fixed after DLL hijack flaw rated 8.8 severity Docker Compose users are being strongly urged to upgrade their versions of the orchestration tool after a researcher uncovered a flaw that could allow attackers to stage path…
Invisible npm malware pulls a disappearing act – then nicks your tokens
PhantomRaven slipped over a hundred credential-stealing packages into npm A new supply chain attack dubbed PhantomRaven has flooded the npm registry with malicious packages that steal credentials, tokens, and secrets during installation. The packages appear safe when first downloaded, making…
Cyberpunks mess with Canada’s water, energy, and farm systems
Infosec agency warns hacktivists broke into critical infrastructure systems to tamper with controls Hacktivists have breached Canadian critical infrastructure systems to meddle with controls that could have led to dangerous conditions, marking the latest in a string of real-world intrusions…
Postcode Lottery’s lucky dip turns into data slip as players draw each other’s info
Biz says ‘technical error’ caused short-lived leak affecting small number of users A major UK lottery organization says it has resolved a technical error that exposed customer data to other users.… This article has been indexed from The Register –…
France jacks into the Matrix for state messaging – and pays too
Governments eye comms alternatives as sovereignty worries mount Comment Decentralized communications network Matrix is hoping to be the beneficiary as European public and private sector organizations ponder alternatives to the messaging status quo.… This article has been indexed from The…
This security hole can crash billions of Chromium browsers, and Google hasn’t patched it yet
Edge, Atlas, Brave among those affected Exclusive A critical, currently unpatched bug in Chromium’s Blink rendering engine can be abused to crash many Chromium-based browsers within seconds, causing a denial-of-service condition – and, in some tests, freezing the host system.……
EY exposes 4TB+ SQL database to open internet for who knows how long
The Big Four biz’s big fat fail exposed a boatload of secrets online A Dutch cybersecurity outfit says its lead researcher recently stumbled upon a 4TB+ SQL Server backup file belonging to EY exposed to the web, effectively leaking the…
Marketing giant Dentsu warns staff after Merkle data raid
Emails confirm payroll and bank details lifted in cyberattack on US subsidiary Global marketing giant Dentsu is writing to current and former staff after a cyberattack on a subsidiary led to bank, payroll, and other sensitive data being stolen.… This…
Sole trader dispatched almost 1M spam texts to hard-up Brits, says watchdog
ICO fined Bharat Singh Chand £200,000 after receiving 19,138 complaints Britain’s data watchdog has fined a sole trader £200,000 for nearly a million spam texts targeting people in debt – almost 20 pence per message.… This article has been indexed…
UK government on the lookout for bargain-priced CTO
Dangles £100K for someone to fix £23B tech mess The UK government is on the hunt for a new CTO after incumbent David Knott announced his departure, citing family reasons.… This article has been indexed from The Register – Security…
9 in 10 Exchange servers in Germany still running out-of-support software
Cybersecurity agency urges organizations to upgrade or risk total network compromise Germany’s infosec office (BSI) is sounding the alarm after finding that 92 percent of the nation’s Exchange boxes are still running out-of-support software, a fortnight after Microsoft axed versions…
Australian police building AI to translate emoji used by ‘crimefluencers’
Five Eyes intel alliance has created a team to target these scum who prey on kids Australia’s Federal Police (AFP) is working on an AI to interpret emojis and the slang used online by Generation Z and Generation Alpha, so…