Some ‘exceptional circumstances’ will be given a minor extension as lawsuits start to fly As the DigiCert drama continues, we now have a better idea of the size and scope of the problem – with the organization’s infosec boss admitting…
Category: The Register – Security
Russia takes aim at Sitting Ducks domains, bags 30,000+
Eight-year-old domain hijacking technique still claiming victims Dozens of Russia-affiliated criminals are right now trying to wrest control of web domains by exploiting weak DNS services.… This article has been indexed from The Register – Security Read the original article:…
Chrome adopts app-bound encryption to stymie cookie-stealing malware
Windows users now get macOS-grade secret security Google says it’s enhancing the security of sensitive data managed by Chrome for Windows users to fight the scourge of infostealer malware targeting cookies.… This article has been indexed from The Register –…
Embedding AI security from the get go
Watch this Palo Alto Networks keynote to understand the importance of visibility, control and governance in AI application and service development Sponsored Post The dawn of artificial intelligence is upon us, but its development has only just begun.… This article…
Five months after takedown, LockBit is a shadow of its former self
An unprecedented period for an unparalleled force in cybercrime Feature For roughly two years, LockBit’s ransomware operation was by far the most prolific of its kind, until the fateful events of February. After claiming thousands of victims, extorting hundreds of…
‘Error’ in Microsoft’s DDoS defenses amplified 8-hour Azure outage
A playbook full of strategies and someone fumbles the implementation Do you have problems configuring Microsoft’s Defender? You might not be alone: Microsoft admitted that whatever it’s using for its defensive implementation exacerbated yesterday’s Azure instability.… This article has been…
UK Electoral Commission slapped for basic cybersecurity fails
It took 13 months to notice 40 million voters’ data was compromised The UK’s Electoral Commission has received a formal slap on the wrist for a litany of security failings that led to the theft of personal data belonging to…
DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder
For the want of an underscore DigiCert has given some unlucky customers 24 hours to replace their SSL/TLS security certificates it previously issued them – due to a five-year-old blunder in its backend software.… This article has been indexed from…
Delta Air Lines dials up Microsoft’s legal nemesis over CrowdStrike losses
Oh, Boies, here we go again Delta Air Lines lost hundreds of millions of dollars due to the CrowdStrike outage earlier this month – and it has hired a high-powered law firm to claw some of those lost funds back,…
‘LockBit of phishing’ EvilProxy used in more than a million attacks every month
Leaves a trail of ransomware infections, data theft, business email compromise in its wake Insight The developers of EvilProxy – a phishing kit dubbed the “LockBit of phishing” – have produced guides on using legitimate Cloudflare services to disguise malicious…
Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability
Get those patches applied – all the big dogs are abusing it Do you have your VMware ESXi hypervisor joined to Active Directory? Well, the latest news from Microsoft serves as a reminder that you might not want to do…
Proofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others
They DKIM here, they DKIM there A huge phishing campaign exploited a security blind-spot in Proofpoint’s email filtering systems to send an average of three million “perfectly spoofed” messages a day purporting to be from Disney, IBM, Nike, Best Buy,…
Malaysia is working on an internet ‘kill switch’, says minister
Follows requirement for social media and messaging platforms to get a license Legislation for an internet “kill switch” will reach Malaysia’s Parliament in October, according to the country’s minister for Law and Institutional Reform.… This article has been indexed from…
Meta’s AI safety system defeated by the space bar
‘Ignore previous instructions’ thwarts Prompt-Guard model if you just add some good ol’ ASCII code 32 Meta’s machine-learning model for detecting prompt injection attacks – special prompts to make neural networks behave inappropriately – is itself vulnerable to, you guessed…
US border cops really must get a warrant in NY before searching your phones, devices
Do we really want to bother SCOTUS with this, friends? Surely they’re way too busy to take a look US border agents must obtain a warrant, in New York at least, to search anyone’s phone and other electronic device when…
US border cops really must get a warrant in NY before searching phones, devices
Do we really want to bother SCOTUS with this, friends? Surely they’re way too busy right now to take a look US border agents must obtain a warrant, in New York at least, to search anyone’s phone and other electronic…
Intruders at HealthEquity rifled through storage, stole 4.3M people’s data
No mention of malware or ransomware – somewhat of a rarity these days HealthEquity, a US fintech firm for the healthcare sector, admits that a “data security event” it discovered at the end of June hit the data of a…
Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update
Happy Sysadmin Day Google celebrated Sysadmin Day last week by apologizing for breaking its password manager for millions of Windows users – just as many Windows admins were still hard at work mitigating the impact of the faulty CrowdStrike update.……
Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed
Promises to discourage use of kernel drivers – so they don’t crash the world again Microsoft has admitted that its estimate of 8.5 million machines crashed by CrowdStrike’s faulty software update was almost certainly too low, and vowed to reduce…
China ponders creating a national ‘cyberspace ID’
Because clearly it’s better for Beijing to know who you are than for every ISP and social service to keep its own records Beijing may soon issue “cyberspace IDs” to its citizens, after floating a proposal for the scheme last…