Google security crew reveal ‘the four Ds’ to be on the watch for It may come as a surprise to absolutely nobody that experts say, in revealing the most prevalent and likely tactics to meddle with elections this year, that…
Category: The Register – Security
What to do in the age of the critical breach
Why the triple threat of ransomware, data breaches, and extortion is a cybersecurity crisis The UK government could be forgiven for wanting to forget March 2024 ever happened.… This article has been indexed from The Register – Security Read the…
Indian bank’s IT is so shabby it’s been banned from opening new accounts
After two years of warnings, and outages, regulators ran out of patience with Kotak Mahindra Bank India’s central bank has banned Kotak Mahindra Bank from signing up new customers for accounts or credit cards through its online presence and app.……
Australia’s spies and cops want ‘accountable encryption’ – aka access to backdoors
And warn that AI is already being used by extremists to plot attacks The director general of Australia’s lead intelligence agency and the commissioner of its Federal Police yesterday both called for social networks to offer more assistance to help…
Australia’s spies and cops want ‘accountable encryption’ – aka backdoors
And warn that AI is already being used by extremists to plot attacks The director general of Australia’s lead intelligence agency and the commissioner of its Federal Police yesterday both called for social networks to offer more assistance to help…
Governments issue alerts after ‘sophisticated’ state-backed actor found exploiting flaws in Cisco security boxes
Don’t get too comfortable: ‘Line Dancer’ malware may be targeting other vendors, too A previously unknown and “sophisticated” nation-state group compromised Cisco firewalls as early as November 2023 for espionage purposes — and possibly attacked network devices made by other…
Shouldn’t Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking
Doctorow: ‘The most amazing part is that this isn’t already the way it’s done’ Collaboration software used by federal government agencies — this includes apps from Microsoft, Zoom, Slack, and Google — will be required to work together and be…
Microsoft cannot keep its own security in order, so what hope for its add-ons customers?
Secure-by-default… if your pockets are deep enough Microsoft has come under fire for charging for security add-ons despite the company’s own patchy record when it comes to vulnerabilities and breaches.… This article has been indexed from The Register – Security…
Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets
The firm ‘fessed up to staff misconduct and avoided criminal liability A company contracted to manage an Amarillo, Texas nuclear weapons facility has to pay US government $18.4 million in a settlement over allegations that its atomic boffins fudged their…
Google cools on cookie phase-out while regulators chew on plans
Privacy Sandbox slips into 2025 after challenges from UK authorities Google’s plan to phase out third-party cookies in Chrome is being postponed to 2025 amid wrangling with the UK’s Competition and Markets Authority (CMA) and Information Commissioner’s Office (ICO).… This…
US charges Iranians with cyber snooping on government, companies
Their holiday options are now far more restricted The US has charged and sanctioned four Iranian nationals for their alleged roles in various attacks on US companies and government departments, all of whom are claimed to have worked for fake…
If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers?
One wonders why are there adverts on public-sector portals at all Exclusive At least 18 public-sector websites in the UK and US send visitor data in some form to various web advertising brokers – including an ad-tech biz in China…
Mandiant: Orgs are detecting cybercriminals faster than ever
The ‘big victory for the good guys’ shouldn’t be celebrated too much, though The average time taken by global organizations to detect cyberattacks has dropped to its lowest-ever level of ten days, Mandiant revealed today.… This article has been indexed…
UnitedHealth admits breach could ‘cover substantial proportion of people in America’
That said, good old US healthcare system so elaborately costly some are forced to avoid altogether UnitedHealth Group, the parent of ransomware-struck Change Healthcare, delivered some very unwelcome news for customers today as it continues to recover from the massively…
Leicester streetlights take ransomware attack personally, shine on 24/7
City council says it lost control after shutting down systems It’s become somewhat cliché in cybersecurity reporting to speculate whether an organization will have the resources to “keep the lights on” after an attack. But the opposite turns out to…
Over a million Neighbourhood Watch members exposed through web app bug
Unverified users could scoop up data on high-value individuals without any form of verification process Neighbourhood Watch (NW) groups across the UK can now rest easy knowing the developers behind a communications platform fixed a web app bug that leaked…
Misconfigured cloud server leaked clues of North Korean animation scam
Outsourcers outsourced work for the BBC, Amazon, and HBO Max to the hermit kingdom A misconfigured cloud server that used a North Korean IP address has led to the discovery that film production studios including the BBC, Amazon, and HBO…
Old Windows print spooler bug is latest target of Russia’s Fancy Bear gang
Putin’s pals use ‘GooseEgg’ malware to launch attacks you can defeat with patches or deletion Russian spies are exploiting a years-old Windows print spooler vulnerability and using a custom tool called GooseEgg to elevate privileges and steal credentials across compromised…
FBI and friends get two more years of warrantless FISA Section 702 snooping
US Senate kills reform amendment, Biden swiftly signs bill into law US lawmakers on Saturday reauthorized a contentious warrantless surveillance tool for another two years — and added a whole bunch of people and organizations to the list of those…
Europol now latest cops to beg Big Tech to ditch E2EE
Don’t bore us, get to the chorus: You need less privacy so we can protect the children Yet another international cop shop has come out swinging against end-to-end encryption – this time it’s Europol which is urging an end to…