Attackers secure admin rights after vendor said they could only steal data Atlassian reassessed the severity rating of the recent improper authorization vulnerability in Confluence Data Center and Server, raising the CVSS score from 9.1 to a maximum of 10.……
Category: The Register – Security
Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach
It’s the latest in a string of unusual wallet-draining attacks that began in April The Monero Project is admitting that one of its wallets was drained by an unknown source in September, losing the equivalent of around $437,000 at today’s…
Preventing data theft with ADX technology
Ensuring data stays secure even after cyberattack infiltration Webinar Daily incursions are underway with the aim of removing every bit of data that you’ve got – the cyber criminals’ aim is to break in and get out again laden with…
Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections
EFF warns incoming rules may return web ‘to the dark ages of 2011’ Lawmakers in Europe are expected to adopt digital identity rules that civil society groups say will make the internet less secure and open up citizens to online…
Microsoft likens MFA to 1960s seatbelts, buckles admins in yet keeps eject button
Admins have 90 days to opt out before MFA is deployed automatically Microsoft is introducing three Conditional Access policies for sysadmins as it continues to promote the implementation of multi-factor authentication (MFA) in organizations.… This article has been indexed from…
UK may demand tech world tell it about upcoming security features
Campaigners say proposals to reform laws are ‘dangerous’ and an attack on safety The UK government has set in train plans to introduce legislation requiring tech companies to let it know when they plan to introduce new security technologies and…
UK may demand tech world tell it about upcoming security features so it can ‘disable them’
Campaigners say proposals to reform laws are ‘dangerous’ and an attack on safety The UK government has set in train plans to introduce legislation requiring tech companies to let it know when they plan to introduce new security technologies and…
Fresh find shines new light on North Korea’s latest macOS malware
Months of work reveals how this tricky malware family targets… the financial services sector A brand-new macOS malware strain from North Korean state-sponsored hackers has been spotted in the wild.… This article has been indexed from The Register – Security…
Woman jailed after Rentahitman.com assassin turned out to be – surprise – FBI
18 months in the slammer no laughing matter, but the rest… maybe A 34-year-old woman has been jailed for 18 months after trying to use Rentahitman.com – no, really – to pay a contract killer to eliminate a rival she…
ICE faces heat after agents install thousands of personal apps, VPNs on official phones
Audit: Craptastic security could potentially put govt info in hands of enemies America’s immigration cops have pushed back against an official probe that concluded their lax mobile device security potentially put sensitive government information at risk of being stolen by…
US slaps sanctions on accused fave go-to money launderer of Russia’s rich
And that includes ransomware crims, claims US of alleged sanctions-buster A Russian woman the US accuses of being a career money launderer is the latest to be sanctioned by the country for her alleged role in moving hundreds of millions…
Okta breach affected 134 orgs, ‘or less than 1%’ of customers, company admits
Plus: CVSS 4.0 is here, this week’s critical vulns, and ‘incident’ hit loan broker promises no late fees. Generous Infosec in brief Okta has confirmed details of its October breach, reporting that the incident led to the compromise of files…
Securing frontline Operational Technology environments
How Britvic outlawed security blind spots Webinar Organisations in multiple industries often face risks which can severely impact their operational resilience. Cyber criminals like to use ransomware and vulnerable third-party connections to hijack operational technology (OT) systems which can stop…
‘Corrupt’ cop jailed for tipping off pal to EncroChat dragnet
Taking selfie with ‘official sensitive’ doc wasn’t smartest idea, either A British court has sentenced a “corrupt” cop to almost four years behind bars for tipping off a friend that officers had compromised the EncroChat encrypted messaging app network.… This…
81K people’s sensitive info feared stolen from Hilb after email inboxes ransacked
Credit card numbers, security codes, SSNs, passwords, PINs? Yikes! Hilb Group has warned more than 81,000 people that around the start of 2023 criminals broke into the work email accounts of its employees and may have stolen a bunch of…
Ex-GCHQ software dev jailed for stabbing NSA staffer
Terrorist ideology suspected to be motivation A former software developer for Britain’s cyberspy agency is facing years in the slammer after being sentenced for stabbing a National Security Agency (NSA) official multiple times.… This article has been indexed from The…
Microsoft pins hopes on AI once again – this time to patch up Swiss cheese security
Secure Future Initiative needed in wake of tech evolution and unrelenting ransomware criminality Microsoft has made fresh commitments to harden the security of its software and cloud services after a year in which numerous members of the global infosec community…
UK data watchdog fines three text spammers for flouting electronic marketing rules
‘High-pressure’ sales tactics targeted people registered with Telephone Preference Service A “debt management company” is itself facing a bill from Britain’s data regulator for sending hundreds of thousands of text messages to households that opted not to receive marketing junk…
FTX crypto-villain Sam Bankman-Fried convicted on all charges
Jury took just four hours to reach guilty verdicts Sam Bankman-Fried, the founder and former CEO of crypto exchange FTX and trading firm Alameda Research, has been found guilty of seven criminal charges.… This article has been indexed from The…
Infosec pros can secure IT, but have harder time securing job satisfaction
Industry facing burnout scare as workplace issues snowball The proportion of cybersecurity professionals reporting low “happiness ratings” has risen sharply over the last 12 months, raising concerns about increasing burnout rates in the industry.… This article has been indexed from…