IT systems encrypted, personal data pilfered from North Face parent, we’re told A digital break-in has disrupted VF Corp’s operations and its ability to fulfill orders, according to the apparel and footwear giant.… This article has been indexed from The…
Category: The Register – Security
National Grid latest UK org to zap Chinese kit from critical infrastructure
Move reportedly made after consulting with National Cyber Security Centre The National Grid is reportedly the latest organization in the UK to begin pulling China-manufactured equipment from its network over cybersecurity fears.… This article has been indexed from The Register…
MongoDB warns breach of internal systems exposed customer contact info
PLUS: Cancer patients get ransom notes for Christmas, Delta Dental is the latest MOVEit victim, and critical vulns Infosec in brief MongoDB on Saturday issued an alert warning of “a security incident involving unauthorized access to certain MongoDB corporate systems,…
Pro-China campaign targeted YouTube with AI avatars
PLUS: Beijing wants ten-minute reporting of infosec incidents; Infosys CFO bails; TikTok’s Indonesia comeback approved, for now Think tank Australian Strategic Policy Institute (ASPI) last week published details of a campaign that spreads English language pro-China and anti-US narratives on…
Hundreds of thousands of dollars in crypto stolen after Ledger code poisoned
NPM repo hijacked after former worker phished Cryptocurrency wallet maker Ledger says someone slipped malicious code into one of its JavaScript libraries to steal more than half a million dollars from victims.… This article has been indexed from The Register…
Kraft Heinz suggests we simmer down about Snatch ransomware attack claims
Ah, beans The Kraft Heinz Company says its systems are all up and running as usual as it probes claims that some of its data was stolen by ransomware crooks.… This article has been indexed from The Register – Security…
NKabuse backdoor harnesses blockchain brawn to hit several architectures
Novel malware adapts delivers DDoS attacks and provides RAT functionality Incident responders say they’ve found a new type of multi-platform malware abusing the New Kind of Network (NKN) protocol.… This article has been indexed from The Register – Security Read…
To BCC or not to BCC – that is the question data watchdog wants answered
The dos and don’ts of bulk emailing A data regulator has reminded companies they need to take care while writing emails to avoid unintentionally blurting out personal data.… This article has been indexed from The Register – Security Read the…
Microsoft seizes websites used to sell phony email accounts to Scattered Spider and other crims
That should solve the global cybercrime problem, right? Microsoft has taken down US-based infrastructure and websites used by a cybercrime group to sell fraudulent online accounts to other crooks including Scattered Spider, the infamous social-engineering and extortion crew that hacked…
Russia joins North Korea in sending state-sponsored cyber troops to pick on TeamCity users
National security and infosec authorities band together to help victims sniff out stealthy Russian baddies hiding in networks The offensive cyber unit linked to Russia’s Foreign Intelligence Service (SVR) is exploiting the critical vulnerability affecting the JetBrains TeamCity CI/CD server…
Money-grubbing crooks abuse OAuth – and baffling absence of MFA – to do financial crimes
Business email compromise, illicit cryptomining, phishing … if it makes a dollar, this lot do it Multiple miscreants are misusing OAuth to automate financially motivated cyber crimes – such as business email compromise (BEC), phishing, large-scale spamming campaigns – and…
Surprise! Email from personal.
information.reveal@gmail.com is not going to contain good news
Internet plod highlight tactics used by cruel Karakurt crime gang Karakurt, a particularly nasty extortion gang that uses “extensive harassment” to pressure victims into handing over millions of dollars in ransom payments after compromising their IT infrastructure, pose a “significant…
The SANS Holiday Hack Challenge is back!
Skip the sleigh and sail with Santa in this year’s fun, hands-on SANS cybersecurity event Webinar Whether you are considering a career in cyber security or you already work in the industry, the 2023 SANS Holiday Hack Challenge is a…
Learning the safety language of the cloud
Protecting your cloud from cyber security threats starts by understanding what it’s telling you Webinar In China, clouds are a symbol of luck. See multiple layering of clouds in a blue sky can mean you are in line to receive…
Nearly a million non-profit donors’ details left exposed in unsecured database
Trusted by major charities, DonorView publicly exposed children’s names and addresses, among other data Close to a million records containing personally identifiable information belonging to donors that sent money to non-profits were found exposed in an online database.… This article…
Cyber security isn’t simple, but it could be
The biggest problem is a tendency to ignore problems you can’t see or haven’t looked for, says SecurityHQ Sponsored Feature Most experts agree cybersecurity is now so complex that managing it has become a security problem in itself.… This article…
Think tank report labels NSO, Lazarus, as ‘cyber mercenaries’
Sure, they do crimes. But the plausible deniability governments adore means they deserve a different label Cybercrime gangs like the notorious Lazarus group and spyware vendors like Israel’s NSO should be considered cyber mercenaries – and become the subject of…
Final Patch Tuesday of 2023 goes out with a bang
Microsoft fixed 36 flaws. Adobe addressed 212. Apple, Google, Cisco, VMware and Atlassian joined the party It’s the last Patch Tuesday of 2023, which calls for celebration – just as soon as you update Windows, Adobe, Google, Cisco, FortiGuard, SAP, VMware,…
Cloud engineer wreaks havoc on bank network after getting fired
Now he’s got two years behind bars to think about his bad choices An ex-First Republic Bank cloud engineer was sentenced to two years in prison for causing more than $220,000 in damage to his former employer’s computer network after…
Discord in the ranks: Lone Airman behind top-secret info leak on chat platform
Poor cybersecurity hygiene in the military? Surely not! There was only one US Air National Guardsman behind the leak of top-secret US military documents on Discord, but his chain of command bears some responsibility for letting it happen on their…