Risk of ‘significant data loss’ for on-prem customers Atlassian has told customers they “must take immediate action” to address a newly discovered flaw in its Confluence collaboration tool.… This article has been indexed from The Register – Security Read the…
Category: The Register – Security
Florida man jailed after draining $1M from victims in crypto SIM swap attacks
Not old enough to legally buy a beer, old enough for a 30-month term A 20-year-old Florida man has been sentenced to 30 months behind bars for his role in a SIM-swapping ring that stole nearly $1 million in cryptocurrency…
Unpatched NGINX ingress controller bugs can be abused to steal Kubernetes cluster secrets
Just tricks, no treats with these 3 vulns Three unpatched high-severity bugs in the NGINX ingress controller can be abused by miscreants to steal credentials and other secrets from Kubernetes clusters. … This article has been indexed from The Register –…
Cryptojackers steal AWS credentials from GitHub in 5 minutes
Researchers just scratching surface of their understanding of campaign dating back to 2020 Security researchers have uncovered a multi-year cryptojacking campaign they claim autonomously clones GitHub repositories and steals their exposed AWS credentials.… This article has been indexed from The…
Stanford schooled in cybersecurity after Akira claims ransomware attack
This marks the third criminal intrusion at the institution in as many years Stanford University has confirmed it is “investigating a cybersecurity incident” after an attack last week by the Akira ransomware group.… This article has been indexed from The…
LockBit alleges it boarded Boeing, stole ‘sensitive data’
ALSO: CISA begs for a consistent budget, Las Vegas school breach; Nigeria arrests six cyber princes, the week’s critical vulnerabilities Security In Brief Notorious ransomware gang LockBit has reportedly exfiltrated “a tremendous amount of sensitive data from aerospace outfit Boeing.……
Apple Private Wi-Fi hasn’t worked for the past three years
Not exactly the MAC daddy Three years after Apple introduced a menu setting called Private Wi-Fi Address, a way to spoof network identifiers called MAC addresses, the privacy protection may finally work as advertised, thanks to a software fix.… This…
F5 hurriedly squashes BIG-IP remote code execution bug
Fixes came earlier than scheduled as vulnerability became known to outsiders F5 has issued a fix for a remote code execution (RCE) bug in its BIG-IP suite carrying a near-maximum severity score.… This article has been indexed from The Register…
Microsoft unveils shady shenanigans of Octo Tempest and their cyber-trickery toolkit
Gang thought to be behind attack on MGM Resorts has a skillset larger than most cybercrime groups in existence Microsoft’s latest report on “one of the most dangerous financial criminal groups” operating offers security pros an abundance of threat intelligence…
King Charles III signs off on UK Online Safety Act, with unenforceable spying clause
It’s now up to Ofcom to sort out this messy legislation With the assent of King Charles, the United Kingdom’s Online Safety Act has become law, one that the British government says will “make the UK the safest place in…
ServiceNow quietly addresses unauthenticated data exposure flaw from 2015
Researcher who publicized issue brands company’s communication ‘appalling’ ServiceNow is issuing a fix for a flaw that exposes data after a researcher published a method for unauthenticated attackers to steal an organization’s sensitive files.… This article has been indexed from…
Ukraine accuses Russian spies of hunting for war-crime info on its servers
Russian have shifted tactics in the first half of 2023, with mixed results The Ukrainian State Service of Special Communications and Information Protection (SSSCIP) has claimed that Russian cyberspies are targeting its servers looking for data about alleged Kremlin-backed war…
MOVEit breach delivers bundle of 3.4 million baby records
Progress Software vulnerability ID’d in enormous burglary at Ontario’s BORN Canada’s Better Outcomes Registry & Network (BORN) fears a MOVEit breach allowed cybercriminals to copy 3.4 million people’s childcare health records dating back more than a decade.… This article has…
ROBOT crypto attack on RSA is back as Marvin arrives
More precise timing tests find many implementations vulnerable An engineer has identified longstanding undetected flaws in a 25-year-old method for encrypting data using RSA public-key cryptography.… This article has been indexed from The Register – Security Read the original article:…
Mixin suspends deposits and withdrawals after $200m cryptocurrency heist
Cloud provider blamed for loss of 20% of exchange’s capital Mixin Network confirmd on Monday that it has “temporarily suspended” all deposit and withdrawal services after hackers broke into a database and stole about $200 million in funds from the…
T-Mobile US exposes some customer data – but don’t call it a breach
PLUS: Trojan hidden in PoC; cyber insurance surge; pig butchering’s new cuts; and the week’s critical vulns Infosec in brief T-Mobile US has had another bad week on the infosec front – this time stemming from a system glitch that…
T-mobile US exposes some customer data – but don’t call it a breach
PLUS: Trojan hidden in PoC; cyber insurance surge; pig butchering’s new cuts; and the week’s critical vulns Infosec in brief T-Mobile US has had another bad week on the infosec front – this time stemming from a system glitch that…
T-mobile exposes some customer data – but don’t call it a breach
PLUS: Trojan hidden in PoC; cyber insurance surge; pig butchering’s new cuts; and the week’s critical vulns Infosec in brief T-Mobile has had another bad week on the infosec front – this time stemming from a system glitch that exposed…
Apple squashes security bugs after iPhone flaws exploited by Predator spyware
Holes in iOS, macOS and more fixed up after tip off from Google, Citizen Lab Apple has emitted patches this week to close security holes that have been exploited in the wild by commercial spyware.… This article has been indexed…
ESA gets the job of building Europe’s secure satcomms network
IRIS2 oversight deal signed as constellation’s schedule slips, and Ariane 6 hits another snag The European Space Agency has signed up to build and launch the European Union’s Infrastructure for Resilience, Interconnectivity and Security by Satellite constellation.… This article has…