Major intrusions by both China and Russia leave a lot to be answered for The US government wants to make Microsoft’s vice chair and president, Brad Smith, the latest tech figurehead to field questions from a House committee on its…
Category: The Register – Security
GhostStripe attack haunts self-driving cars by making them ignore road signs
Cameras tested are specced for Baidu’s Apollo Six boffins mostly hailing from Singapore-based universities have proven it’s possible to attack autonomous vehicles by exploiting the system’s reliance on camera-based computer vision and cause it to not recognize road signs.… This…
‘Four horsemen of cyber’ look back on 2008 DoD IT breach that led to US Cyber Command
‘This was a no sh*tter’ RSAC A malware-laced USB stick, inserted into a military laptop at a base in Afghanistan in 2008, led to what has been called the worst military breach in US history, and to the creation of…
Ex-White House election threat hunter weighs in on what to expect in November
Spoiler alert: We’re gonna talk about AI Interview Mick Baccio, global security advisor at Splunk, has watched the evolution of election security threats in real time.… This article has been indexed from The Register – Security Read the original article:…
US faith-based healthcare org Ascension says ‘cybersecurity event’ disrupted clinical ops
Sources claim ransomware is to blame Healthcare organization Ascension is the latest of its kind in the US to say its network has been affected by what it believes to be a “cybersecurity event.”… This article has been indexed from…
Global attackers targeting US critical infrastructure should be ‘wake-up call’
Having China, Russia, and Iran routinely rummaging around is cause for concern, says ex-NSA man RSAC Digital intruders from China, Russia, and Iran breaking into US water systems this year should be a “wake-up call,” according to former National Security…
Dell customer order database of ’49M records’ stolen, now up for sale on dark web
IT giant tries to downplay leak as just names, addresses, info about kit Dell has confirmed information about its customers and their orders has been stolen from one of its portals. Though the thief claimed to have swiped 49 million…
What do Europeans, Americans and Australians have in common? Scammed $50M by fake e-stores
BogusBazaar ripped off shoppers and scraped card details, but not in China A crime ring dubbed BogusBazaar has scammed 850,000 people out of tens of millions of dollars via a network of dodgy shopping websites.… This article has been indexed…
Undersea cables must have high-priority protection before they become top targets
It’s ‘essential to national security’ ex-Navy intel officer tells us Interview As undersea cables carry increasing amounts of information, cyber and physical attacks against them will cause a greater impact on the wider internet.… This article has been indexed from…
Undersea cables are high-priority targets – it’s high time to make these global pathways more resilient
It’s ‘essential to national security’ ex-Navy intel officer tells us Interview As undersea cables carry ever-increasing amounts of data, they become even higher priority targets for both cyber and physical attacks.… This article has been indexed from The Register –…
CISA boss: Secure code is the ‘only way to make ransomware a shocking anomaly’
And it would seriously inconvenience the Chinese and Russians, too RSAC There’s a way to vastly reduce the scale and scope of ransomware attacks plaguing critical infrastructure, according to CISA director Jen Easterly: Make software secure by design.… This article…
One year on, universities org admits MOVEit attack hit data of 800k people
Nearly 95M people in total snagged by flaw in file transfer tool Just short of a year after the initial incident, the state of Georgia’s higher education government agency has confirmed that it was the victim of an attack on…
UK opens investigation of MoD payroll contractor after confirming attack
China vehemently denies involvement UK Government has confirmed a cyberattack on the payroll system used by the Ministry of Defence (MoD) led to “malign” forces accessing data on current and a limited number of former armed forces personnel.… This article…
Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight
On the plus side, infosec’s a good bet for a long, stable career Interview This year is an unfortunate anniversary for information security: We’re told it’s a decade since ransomware started infecting corporations.… This article has been indexed from The…
From infosec to skunks, RSA Conference SVP spills the tea
Keynotes, physical security, playlists … the buck stops with Linda Gray Martin Interview The 33rd RSA Conference is underway this week, and no one feels that more acutely than the cybersecurity event’s SVP Linda Gray Martin.… This article has been…
UnitedHealth’s ‘egregious negligence’ led to Change Healthcare ransomware infection
‘I’m blown away by the fact that they weren’t using MFA’ Interview The cybersecurity practices that led up to the stunning Change Healthcare ransomware infection indicate “egregious negligence” on the part of parent company UnitedHealth, according to Tom Kellermann, SVP…
UnitedHealth’s ‘egregious negligence’ led to Change Healthcare infection
‘I’m blown away by the fact that they weren’t using MFA’ Interview The cybersecurity practices that led up to the stunning Change Healthcare ransomware infection indicate “egregious negligence” on the part of parent company UnitedHealth, according to Tom Kellermann, SVP…
America’s War on Drugs and Crime will be AI powered, says Homeland Security boss
Or at least it might well be if these trial programs work out, with some civil lib oversight etc etc etc RSAC AI is a double-edged sword in that the government can see ways in which the tech can protect…
Watch out for rogue DHCP servers decloaking your VPN connections
Avoid traffic-redirecting snoops who have TunnelVision A newly discovered vulnerability undermines countless VPN clients in that their traffic can be quietly routed away from their encrypted tunnels and intercepted by snoops on the network.… This article has been indexed from…
CISA’s early-warning system helped critical orgs close 852 ransomware holes
In the first year alone, that’s saved us all a lot of money and woe RSAC As ransomware gangs step up their attacks against healthcare, schools, and other US critical infrastructure, CISA is ramping up a program to help these…