Watch this webinar for a hair raising journey into the darkest depths of GenAI enabled cyber crime Sponsored Post Artificial intelligence (AI) offers enormous commercial potential but also substantial risks to data security if it is harnessed by cyber criminals…
Category: The Register – Security
Nearly 1M medical records feared stolen from City of Hope cancer centers
Is there no cure for this cyber-plague? Nearly one million individuals’ personal details, financial account information, and medical records may have been stolen from City of Hope systems in the United States.… This article has been indexed from The Register…
Omni Hotels IT systems down since Friday, hitting bookings, payments, door locks
As WhatsApp, Facebook Messenger, and more fall offline today Luxury resort chain Omni Hotels & Resorts has had its computer systems knocked offline since Friday in what it has described as a “disruption,” though sounds a lot like the MGM…
Security pioneer Ross Anderson dies at 67
A man with a list of accolades long enough for several lifetimes, friends remember his brilliance Obituary Venerable computer scientist and information security expert Ross Anderson has died at the age of 67.… This article has been indexed from The…
Google bakes new cookie strategy that will leave crooks with a bad taste
Device Bound Session Credentials said to render cookie theft useless Google reckons that cookie theft is a problem for users, and is seeking to address it with a mechanism to tie authentication data to a specific device, rendering any stolen…
Meet clickjacking’s slicker cousin, ‘gesture jacking,’ aka ‘cross window forgery’
Web devs advised to do their part to limit UI redress attacks Web browsers still struggle to prevent clickjacking, an attack technique first noted in 2008 that repurposes web page interface elements to deceive visitors.… This article has been indexed…
Microsoft slammed for lax security that led to China’s cyber-raid on Exchange Online
CISA calls for ‘fundamental, security-focused reforms’ to happen ASAP, delaying work on other software A review of the June 2023 attack on Microsoft’s Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a…
Microsoft slammed for lax security that led to Exchange Online attack
CISA calls for ‘fundamental, security-focused reforms’ to happen ASAP, delaying work on other software A review of the June 2023 attack on Microsoft’s Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a…
Feds finally decide to do something about years-old SS7 spy holes in phone networks
And Diameter, too, for good measure The FCC appears to finally be stepping up efforts to secure decades-old flaws in American telephone networks that are allegedly being used by foreign governments and surveillance outfits to remotely spy on and monitor…
OWASP server blunder exposes decade of resumes
Irony alerts: Open Web Application Security Project Foundation suffers lapse A misconfigured MediaWiki web server allowed digital snoops to access members’ resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.… This article has been indexed…
OWASP breach exposes decade of resumes due to misconfigured server
Irony alerts: Open Web Application Security Project Foundation suffers lapse A misconfigured MediaWiki web server allowed digital snoops to access members’ resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.… This article has been indexed…
Pandabuy admits to data breach of 1.3 million unique records
Nothing says ‘sorry’ like 10 percent off shipping for a month Ecommerce platform Pandabuy has apologized after two cybercriminals were spotted hawking personal data belonging to 1.3 million customers.… This article has been indexed from The Register – Security Read…
Microsoft warns deepfake election subversion is disturbingly easy
Simple stuff like slapping on a logo fools more folks and travels further As hundreds of millions of voters around the globe prepare to elect their leaders this year, there’s no question that trolls will try to sway the outcomes…
Rubrik files to go public following alliance with Microsoft
Cloud cyber resilience model could raise $700M despite $278M losses Cloud security provider Rubrik has filed for an IPO on the New York Stock Exchange following a flurry of similar flotations.… This article has been indexed from The Register –…
Polish officials may face criminal charges in Pegasus spyware probe
Victims of the powerful surveillance tool will soon find out the truth Former Polish government officials may face criminal charges following an investigation into their use of the notorious spyware Pegasus to surveil political opponents and others.… This article has…
INC Ransom claims to be behind ‘cyber incident’ at UK city council
This follows attack on NHS services in Scotland last week The cyber skids at INC Ransom are claiming responsbility for the ongoing cybersecurity incident at Leicester City Council, according to a post caught by eagle-eyed infosec watchers.… This article has…
Happy 20th birthday Gmail, you’re mostly grown up – now fix the spam
Senders of more than 5K messages a day are in the crosshairs It was 20 years ago on Monday that Google unleashed Gmail on the world, and the chocolate factory is celebrating with new rules that just might, hopefully, cut…
Apple’s GoFetch silicon security fail was down to an obsession with speed
Ye cannae change the laws of physics, but you can change your mind Opinion Apple is good at security. It’s good at processors. Thus GoFetch, a major security flaw in its processor architecture, is a double whammy.… This article has…
Six banks share customer info to help Singapore fight money laundering
PLUS: Google Cloud ANZ boss departs; Japan revives airliner ambitions; China-linked attackers target Asian entities ASIA IN BRIEF Singapore’s Monetary Authority on Monday launched an application, intuitively named “COllaborative Sharing of Money Laundering/TF Information & Cases” (COSMIC for short, obviously)…
US House of Reps tells staff: No Microsoft Copilot for you!
At least not until Redmond’s government edition is ready to roll Staff working at the US House Of Representatives have been barred from using Microsoft’s Copilot chatbot and AI productivity tools, pending the launch of a version tailored to the…