Countdown expires March 2 unless government officials pay the ransom LockBit claims it’s back in action just days after an international law enforcement effort seized the ransomware gang’s servers and websites, and retrieved more than 1,000 decryption keys to assist…
Category: The Register – Security
Everything you need to know about NIS2
Get prepared for the EU’s upgraded cybersecurity directive Webinar The original European Union Network and Information Security (NIS) Directive certainly led to an improvement in member states’ cybersecurity defences, but it struggled to do everything required as cyberattacks and threats…
Data watchdog tells off outsourcing giant for scanning staff biometrics despite ‘power imbalance’
2,000 employees at 38 facilities had data processed ‘unlawfully’, ICO says A data protection watchdog in the UK has issued an enforcement notice to stop Serco from using facial recognition tech and fingerprint scanning to monitor staff at 38 leisure…
Fox News ‘hacker’ turns out to be journalist whose lawyers say was doing his job
Also, another fake iOS app slips into the store, un-cybersafe EV chargers leave UK shelves, and critical vulns in brief A Florida journalist has been arrested and charged with breaking into protected computer systems in a case his lawyers say…
Security is hard because it has to be right all the time? Yeah, like everything else
It takes only one bottleneck or single point of failure to ruin your week Systems Approach One refrain you often hear is that security must be built in from the ground floor; that retrofitting security to an existing system is…
LockBit extorted billions of dollars from victims, fresh leaks suggest
Investigating LockBit’s finances has blown previous estimates of the operation’s wealth out of the water Authorities digging into LockBit’s finances believe the group may have generated more than $1 billion in ransom fees over its four-year lifespan.… This article has…
U-Haul tells 67K customers that cyber-crooks drove away with their personal info
Thieves broke into IT system using stolen login U-Haul is alerting tens of thousands of folks that miscreants used stolen credentials to break into one of its systems and access customer records that contained some personal data.… This article has…
LockBit identity reveal a bigger letdown than Game of Thrones Season 8
NCA still left enough for onlookers to wonder if there’s anything more to come The grand finale of the week of LockBit leaks was slated to expose the real identity of LockBitSupp – the alias of the gang’s public spokesperson…
Tips on meeting complex cloud security challenges
Learn about the benefits of applying advanced automation to policy management practices Webinar Dealing with the double trouble of relentless cyber threats and regular technology refresh cycles can stretch already overworked security practitioners. And orchestrating the transition to cloud-native applications…
X protests forced suspension of accounts on orders of India’s government
Nonprofit SFLC links orders to farming protests The global government affairs team at X (née Twitter) has suspended some accounts and posts in India after receiving executive orders to do so from the country’s government, backed by threat of penalties…
Avast shells out $17M to shoo away claims it peddled people’s personal data
A name that’s commonly shouted by pirates might be a clue, me hearties! Avast has agreed to cough up $16.5 million after the FTC accused the antivirus vendor of selling customer information to third parties.… This article has been indexed…
Cyberattack downs pharmacies across America
Prescription orders hit after IT supplier Change Healthcare pulls plug on systems IT provider Change Healthcare has confirmed it shut down some of its systems following a cyberattack, disrupting prescription orders and other services at pharmacies across the US.… This…
Authorities dismantled LockBit before it could unleash revamped variant
New features aimed to stamp out problems of the past Law enforcement’s disruption of the LockBit ransomware crew comes as the criminal group was working on bringing a brand-new variant to market, research reveals.… This article has been indexed from…
Ukrainian police arrest father and son in suspected LockBit affiliate double act
If they did it, it gives new meaning to quality family time. Meanwhile, key LockBit leaders remain at large Today’s edition of the week-long LockBit leaks reveals a father-son duo was apprehended in Ukraine as part of the series of…
Giant leak reveals Chinese infosec vendor I-Soon is one of Beijing’s cyber-attackers for hire
Trove reveals RATs that can pop major OSes, campaigns against offshore and local targets A cache of stolen document posted to GitHub appears to reveal how a Chinese infosec vendor named I-Soon offers rent-a-hacker services for Beijing.… This article has…
Biden asks Coast Guard to create an infosec port in a stormy sea of cyber threats
Oh hear us when we cry to thee for those in peril on the sea President Biden has empowered the US Coast Guard (USCG) to get a tighter grip on cybersecurity at American ports – including authorizing yet another incident…
Duo face 20 years in prison over counterfeit iPhone scam
Sent 5,000+ fake handsets to Apple for repair in hope of getting real ones back Two Chinese nationals are facing a maximum of 20 years in prison after being convicted of mailing thousands of fake iPhones to Apple for repair…
Apple promises to protect iMessage chats from quantum computers
Easy to defend against stuff that may never actually work – oh there we go again, being all cynical like Apple says it’s going to upgrade the cryptographic protocol used by iMessage to hopefully prevent the decryption of conversations by…
Exploiting the latest max-severity ConnectWise bug is ’embarrassingly easy’
Urgent patching advised to protect attacks against setup wizards Infosec researchers say urgent patching of the latest remote code execution (RCE) vulnerability in ConnectWise’s ScreenConnect is required given its maximum severity score.… This article has been indexed from The Register…
LockBit leaks expose nearly 200 affiliates and bespoke data-stealing malware
Operation Cronos’s ‘partners’ continue to trickle the criminal empire’s secrets The latest revelation from law enforcement authorities in relation to this week’s LockBit leaks is that the ransomware group had registered nearly 200 “affiliates” over the past two years.… This…