Security world reacts as NIST does a lot less of oft criticized, ‘almost always thankless’ work Opinion The United States National Institute of Standards and Technology (NIST) has almost completely stopped adding analysis to Common Vulnerabilities and Exposures (CVEs) listed…
Category: The Register – Security
Truck-to-truck worm could infect – and disrupt – entire US commercial fleet
The device that makes it possible is required in all American big rigs, and has poor security Vulnerabilities in common Electronic Logging Devices (ELDs) required in US commercial trucks could be present in over 14 million medium- and heavy-duty rigs,…
FBI v the bots: Feds urge denial-of-service defense after critical infrastructure alert
You better watch out, you better not cry, better not pout, they’re telling you why The US government has recommended a series of steps that critical infrastructure operators should take to prevent distributed-denial-of-service (DDoS) attacks.… This article has been indexed…
Microsoft faces bipartisan criticism for alleged censorship on Bing in China
Redmond says it does what it’s told, but still thinks users are better off Microsoft is the subject of growing criticism in the US over allegations that its Bing search engine censors results for users in China that relate to…
Congress votes unanimously to ban brokers selling American data to enemies
At least we can all agree on something The US House of Representatives has passed a bill that would prohibit data brokers from selling Americans’ data to foreign adversaries with an unusual degree of bipartisan support: It passed without a…
Yacht dealer to the stars attacked by Rhysida ransomware gang
MarineMax may be in choppy waters after ‘stolen data’ given million-dollar price tag The Rhysida ransomware group claims it was responsible for the cyberattack at US luxury yacht dealer MarineMax earlier this month.… This article has been indexed from The…
UK council won’t say whether two-week ‘cyber incident’ impacted resident data
Security experts insist ransomware is involved but Leicester zips its lips Leicester City Council continues to battle a suspected ransomware attack while keeping schtum about the key details.… This article has been indexed from The Register – Security Read the…
Exposed: Chinese smartphone farms that run thousands of barebones mobes to do crime
Operators pack twenty phones into a chassis – then rack ’em and stack ’em ready to do evil Chinese upstarts are selling smartphone motherboards – and kit to run and manage them at scale – to operators of outfits that…
It’s 2024 and North Korea’s Kimsuky gang is exploiting Windows Help files
New infostealer may indicate a shift in tactics – and maybe targets too, beyond Asia North Korea’s notorious Kimsuky cyber crime gang has commenced a campaign using fresh tactics, according to infosec tools vendor Rapid7.… This article has been indexed…
It’s tax season, and scammers are a step ahead of filers, Microsoft says
Phishing season started early with crims intent on the hooking early filers As the digital wolves dress in sheep’s tax forms, Microsoft has thrown a spotlight on a crafty 2024 phishing expedition, unraveled in January, that preys on the unsuspecting…
US task force aims to plug security leaks in water sector
From a trickle to a flood, threats now seen as too great to ignore US government is urging state officials to band together to improve the cybersecurity of the country’s water sector amid growing threats from foreign adversaries.… This article…
London Clinic probes claim staffer tried to peek at Princess Kate’s records
First: not being able buy a meat pie with a credit card. Now this. The London Clinic where the Princess of Wales had surgery at the start of this year says it is investigating claims that an employee had tried…
Serial extortionist of medical facilities pleads guilty to cybercrime charges
Robert Purbeck even went as far as threatening a dentist with the sale of his child’s data A cyberattacker and extortionist of a medical center has pleaded guilty to federal computer fraud and abuse charges in the US.… This article…
Stalkerware usage surging, despite data privacy concerns
At least 31,031 people affected last year Stalkerware has reached “pandemic proportions,” according to Kaspersky, which documented a total of 31,031 people affected by the intrusive software in 2023 – up almost six percent on the prior year.… This article…
Five Eyes tell critical infra orgs: take these actions now to protect against China’s Volt Typhoon
Unless you want to be the next Change Healthcare, that is The Feds and friends yesterday issued yet another warning about China’s Volt Typhoon gang, this time urging critical infrastructure owners and operators to protect their facilities against destructive cyber…
Australian techie jailed for accessing museum’s accounting system and buying himself stuff
Also down under, researchers find security-cleared workers leaking details of their gigs An Australian IT contractor has been sentenced to 30 months jail for ripping off the National Maritime Museum.… This article has been indexed from The Register – Security…
Crypto scams more costly to the US than ransomware, Feds say
Latest figures paint grim picture of how viciously the elderly are targeted The FBI says investment fraud was the form of cybercrime that incurred the greatest financial loss for Americans last year.… This article has been indexed from The Register…
Beijing-backed cyberspies attacked 70+ orgs across 23 countries
Plus potential links to I-Soon, researchers say Chinese cyberspies have compromised at least 70 organizations, mostly government entities, and targeted more than 116 victims across the globe, according to security researchers.… This article has been indexed from The Register –…
Crypto scams more costly to the US than ransomware, feds say
Latest figures paint grim picture of how viciously the elderly are targeted The Federal Bureau of Investigations (FBI) says investment fraud was the form of cybercrime that incurred the greatest financial loss for Americans last year.… This article has been…
Crypto wallet providers urged to rethink security as criminals drain them of millions
Innovative Ethereum feature exploited as victims say goodbye to assets Infosec researchers are noting rising cryptocurrency attacks and have encouraged wallet security providers to up their collective game.… This article has been indexed from The Register – Security Read the…