And the world’s getting more and more dangerous The UK’s National Cyber Security Centre (NCSC) has once again sounded its concern over the rising threat level to the nation’s critical national infrastructure (CNI).… This article has been indexed from The…
Category: The Register – Security
Beijing reportedly asked Hikvision to identify fasting students in Muslim-majority province
University managment app also tracked library activity, holidays, and much more US-based research group IPVM has accused Chinese video surveillance equipment company Hikvision of engaging with a contract to develop technology that can identify Muslim students that are fasting during…
Passive SSH server private key compromise is real … for some vulnerable gear
OpenSSL, LibreSSL, OpenSSH users, don’t worry – you can sit this one out An academic study has shown how it’s possible for someone to snoop on certain devices’ SSH connections and, with a bit of luck, impersonate that equipment after…
Google sues scammers peddling fake malware-riddled Bard chatbot download
Plus: Chocolate Factory launches second lawsuit against false DMCA takedowns Google has sued three scammers for offering a fake download of its Bard AI chatbot that contained malware capable of stealing credentials for small business’ social media accounts.… This article…
Inside Denmark’s hell week as critical infrastructure orgs faced cyberattacks
Zyxel zero days and nation-state actors (maybe) had a hand in the sector’s worst cybersecurity event on record Danish critical infrastructure faced the biggest online attack in the country’s history in May, according to SektorCERT, Denmark’s specialist organization for the…
When traditional AV solutions are not enough
Preventing cybercriminals from exfiltrating your data with ADX technology Webinar It seems counterintuitive to want to lock in a cybercriminal who has crept past all your defences to smuggle data out from under your nose.… This article has been indexed…
Introducing the tech that keeps the lights on
Genuinely new ideas are rare in IT – this superhero is ready to make a real difference Opinion Cybersecurity has many supremely annoying aspects. It soaks up talent, time, and money like the English men’s football squad, and like that…
Royal Mail cyber security still a mess, say infosec researchers
ALSO: most Mainers are MOVEit victims, NY radiology firm fined for not updating kit, and some critical vulnerabilities Infosec in brief After spending almost a year cleaning up after various security snafus, the UK’s Royal Mail has left an open…
Australia declares ‘nationally significant cyber incident’ after port attack
PLUS: Citrix quits China; Cambodia deports Japanese scammers; Chinese tech CEO disappears; and more Asia in brief Australia’s National Cyber Security Coordinator has described an attack on logistics company DP World as a “nationally significant cyber incident.”… This article has…
Impatient LockBit says it’s leaked 50GB of stolen Boeing files after ransom fails to land
Aerospace titan pores over data to see if dump is legit The LockBit crew is claiming to have leaked all of the data it stole from Boeing late last month, after the passenger jet giant apparently refused to pay the…
Poloniex crypto-exchange offers 5% cut to thieves if they return that $120M they nicked
White hat bounty looks more like a beg bounty The founder of the Poloniex has offered to pay off thieves who drained an estimated $120 million of user funds from the cryptocurrency exchange in a raid on Friday.… This article…
Strangely enough, no one wants to buy a ransomware group that has cops’ attention
Ransomed.vc shuts after 20% discount fails to entice bids Short-lived ransomware outfit Ransomed.vc claims to have shut down for good after a number of suspected arrests.… This article has been indexed from The Register – Security Read the original article:…
ICBC hit by ransomware impacting global trades
CitrixBleed patch has been available for around a month China’s largest bank, ICBC, was hit by ransomware that resulted in disruption of financial services (FS) systems on Thursday Beijing time, according to a notice on its website.… This article has…
Downfall fallout: Intel knew AVX chips were insecure and did nothing, lawsuit claims
Billions of data-leaking processors sold despite warnings and patch just made them slower, punters complain Intel has been sued by a handful of PC buyers who claim the x86 goliath failed to act when informed five years ago about faulty…
SolarWinds says SEC sucks: Watchdog ‘lacks competence’ to regulate cybersecurity
IT software slinger publishes fierce response to lawsuit brought last month SolarWinds has come out guns blazing to defend itself following the US Securities and Exchange Commission’s announcement that it will be suing both the IT software maker and its…
SolarWinds: SEC ‘lacks the competence’ to regulate cybersecurity
Company publishes fierce response to lawsuit brought last month SolarWinds has come out guns blazing to defend itself following the Securities and Exchange Commission’s announcement that it will be suing both the company and its CISO over the 2020 SUNBURST…
MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts
Second novel zero-day exploited by Lace Tempest this year offers notable demonstration of skill, especially for a ransomware affiliate The cybercriminals behind the rampant MOVEit exploits from earlier this year are making use a zero-day vulnerability in on-prem instances of…
Russia’s Sandworm – not just missile strikes – to blame for Ukrainian power blackouts
Online attack coincided with major military action, Mandiant says Blackouts in Ukraine last year were not just caused by missile strikes on the nation but also by a seemingly coordinated cyberattack on one of its power plants. That’s according to…
What to do with a cloud intrusion toolkit in 2023? Slap a chat assistant on it, duh
Don’t worry, this half-baked Python script is for educational purposes onl-hahaha Infosec bods have detailed an underground cybersecurity tool dubbed Predator AI that not only can be used to compromise poorly secured cloud services and web apps, but has an…
Microsoft, Meta detail plans to fight election disinformation in 2024
Strategies differ, though both have gaps that could hurt efficacy Microsoft and Meta have very different initiatives to combat misinformation in 2024, slated to be a busy election year all over the globe, but whether they’ll be effective is another…