First glimpse at attack financials reveals huge pain UnitedHealth, parent company of ransomware-besieged Change Healthcare, says the total costs of tending to the February cyberattack for the first calendar quarter of 2024 currently stands at $872 million.… This article has…
Category: The Register – Security
Google location tracking deal could be derailed by politics
$62 million settlement plan challenged over payments to progressive nonprofits Google’s plan to pay $62 million to settle allegations that it tracked people even when their Location History setting was switched off may have to be renegotiated based on several…
CISA in a flap as Chirp smart door locks can be trivially unlocked remotely
Hard-coded credentials last thing you want in home security app Some smart locks controlled by Chirp Systems’ software can be remotely unlocked by strangers thanks to a critical security vulnerability.… This article has been indexed from The Register – Security…
Roku makes 2FA mandatory for all after nearly 600K accounts pwned
Streamer says access came via credential stuffing Streaming giant Roku is making 2FA mandatory after attackers accessed around 591,000 customer accounts earlier this year.… This article has been indexed from The Register – Security Read the original article: Roku makes…
Delinea Secret Server customers should apply latest patches
Attackers could nab an org’s most sensitive keys if left unaddressed Customers of Delinea’s Secret Server are being urged to upgrade their installations “immediately” after a researcher claimed a critical vulnerability could allow attackers to gain admin-level access.… This article…
US senator wants to put the brakes on Chinese EVs
Fears of low-cost invasion and data spies spark call for ban Electric vehicles may become a new front in America’s tech war with China after a US senator called for Washington DC to block Chinese-made EVs to protect domestic industries…
Identifying third-party risk
The prima facie case for real-time threat intelligence Webinar Cybercriminals are always on the hunt for new ways to breach your privacy, and busy supply chains often look like a good way to get in under the wire.… This article…
US House approves FISA renewal – warrantless surveillance and all
PLUS: Chinese chipmaker Nexperia attacked; A Microsoft-signed backdoor; CISA starts scanning your malware; and more Infosec in brief US Congress nearly killed a reauthorization of FISA Section 702 last week over concerns that it would continue to allow warrantless surveillance…
Zero-day exploited right now in Palo Alto Networks’ GlobalProtect gateways
Out of the PAN-OS and into the firewall, a Python backdoor this way comes Palo Alto Networks on Friday issued a critical alert for an under-attack vulnerability in the PAN-OS software used in its firewall-slash-VPN products.… This article has been…
Google One VPN axed for everyone but Pixel loyalists … for now
Another one bytes the dust In an incredibly rare move, Google is killing off one of its online services – this time, VPN for Google One.… This article has been indexed from The Register – Security Read the original article:…
Microsoft breach allowed Russian spies to steal emails from US government
Affected federal agencies must comb through mails, reset API keys and passwords The US Cybersecurity and Infrastructure Security Agency (CISA) warns that Russian spies who gained access to Microsoft’s email system were able to steal sensitive data, including authentication details…
French issue alerte rouge after local governments knocked offline by cyber attack
Embarrassing, as its officials are in the US to discuss Olympics cyber threats Several French municipal governments’ services have been knocked offline following a “large-scale cyber attack” on their shared servers.… This article has been indexed from The Register –…
Apple stops warning of ‘state-sponsored’ attacks, now alerts about ‘mercenary spyware’
Report claims India’s government, which is accused of using Pegasus at home, was displeased Apple has made a significant change to the wording of its threat notifications, opting not to attribute attacks to a specific source or perpetrator, but categorizing…
Space Force boss warns ‘the US will lose’ without help from Musk and Bezos
China, Russia have muscled up, and whoever wins up there wins down here The commander of the US Space Force (USSF) has warned that America risks losing its dominant position in space, and therefore on Earth too.… This article has…
96% of US hospital websites share visitor info with Meta, Google, data brokers
Could have been worse – last time researchers checked it was 98.6% Hospitals – despite being places where people implicitly expect to have their personal details kept private – frequently use tracking technologies on their websites to share user information…
Global taxi software vendor exposes details of nearly 300K across UK and Ireland
High-profile individuals including MPs said to be caught up in leak Exclusive Taxi software biz iCabbi recently fixed an issue that exposed the personal information of nearly 300,000 individuals via an unprotected database.… This article has been indexed from The…
It’s 2024 and Intel silicon is still haunted by data-spilling Spectre
Go, go InSpectre Gadget Intel CPU cores remain vulnerable to Spectre data-leaking attacks, say academics at VU Amsterdam.… This article has been indexed from The Register – Security Read the original article: It’s 2024 and Intel silicon is still haunted…
Rust rustles up fix for 10/10 critical command injection bug on Windows
BatBadBut hits Erlang, Go, Python, Ruby as well Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on Windows machines.… This…
X fixes URL blunder that could enable convincing social media phishing campaigns
Poorly implemented rule allowed miscreants to deceive users with trusted URLs Elon Musk’s X has apparently fixed an embarrassing issue implemented earlier in the week that royally bungled URLs on the social media platform formerly known as Twitter.… This article…
Turning the tide on third-party risk
Using threat intelligence to mitigate against security breaches Webinar There are some unhappy projections out there about the prevalence of third-party security breaches.… This article has been indexed from The Register – Security Read the original article: Turning the tide…