Thousands of guards’ ID cards and CCTV snaps of suspects found online Exclusive A UK-based physical security business let its guard down, exposing nearly 1.3 million documents via a public-facing database, according to an infosec researcher.… This article has been…
Category: The Register – Security
Ransomware evolves from mere extortion to ‘psychological attacks’
Crims SIM swap execs’ kids to freak out their parents, Mandiant CTO says RSAC Ransomware infections and extortion attacks have become “a psychological attack against the victim organization,” as criminals use increasingly personal and aggressive tactics to force victims to…
Google, Meta, Spotify break Apple’s device fingerprinting rules – new claim
And the iOS titan doesn’t seem that bothered with this data leaking out Last week, Apple began requiring iOS developers justify the use of a specific set of APIs that could be used for device fingerprinting. Yet the iGiant doesn’t…
Fed-run LockBit site back from the dead and vows to really spill the beans on gang
After very boring first reveal, this could be the real deal Cops around the world have relaunched LockBit’s website after they shut it down in February – and it’s now counting down the hours to reveal documents that could unmask…
Mastodon delays firm fix for link previews DDoSing sites
Decentralization is great until everyone wants to grab data from your web server Updated Mastodon has pushed back an update that’s expected to fully address the issue of link previews sparking accidental distributed denial of service (DDoS) attacks.… This article…
Mastodon delays fix for link previews DDoSing websites
Decentralization is great, except when many servers grab data from a site Mastodon has pushed back an update that would have addressed the issue of link previews creating accidental distributed denial of service (DDoS) attacks.… This article has been indexed…
Consultant charged over $1.5M extortion scheme against IT giant
Accused of stealing data after losing his job A cybersecurity expert could face a 20-year prison sentence after being accused of allegedly trying to extort a multinational IT infrastructure services biz out of $1.5 million.… This article has been indexed…
CISA says ‘no more’ to decades-old directory traversal bugs
Recent attacks on healthcare thrust infosec agency into alert mode CISA is calling on the software industry to stamp out directory traversal vulnerabilities following recent high-profile exploits of the 20-year-old class of bugs.… This article has been indexed from The…
Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks
ALSO: Microsoft promises to git gud on cybersecurity; unqualified attackers are targeting your water systems, and more infosec in brief It was just around a year ago that a spate of allegedly Russian-orchestrated cyberattacks hit government agencies in Germany, and…
End-to-end encryption may be the bane of cops, but they can’t close that Pandora’s Box
Internet Society’s Robin Wilton tells us the war on privacy won’t be won by the plod interview Police can complain all they like about strong end-to-end encryption making their jobs harder, but it doesn’t matter because the technology is here…
Dating apps kiss’n’tell all sorts of sensitive personal info
Privacy Not Included label slapped on 22 of 25 top lonely-hearts corners Dating apps ask people to disclose all kinds of personal information in the hope of them finding love, or at least a hook-up.… This article has been indexed…
Kaspersky hits back at claims its AI helped Russia develop military drone systems
Ready, set, sanctions? If volunteer intelligence gatherers are correct, the US may have a good reason to impose sanctions on Russian infosec firm Kaspersky, whose AI was allegedly used to help Russia produce drones for its war on Ukraine.… This…
Kaspersky hits back at claims it helped Russia develop military drone systems
Ready, set, sanctions? If volunteer intelligence gatherers are correct, the US may have a good reason to impose sanctions on Russian infosec firm Kaspersky, which has been accused of helping Russia design drones used in the invasion of Ukrainian.… This…
Kaspersky accused of helping Russia develop military drone systems
Ready, set, sanctions? If volunteer intelligence gatherers are correct, the US might have a good reason to impose sanctions on Russian infosec firm Kaspersky, which has been accused of helping Russia design drones used in the Ukrainian war.… This article…
It may take decade to shore up software supply chain security, says infosec CEO
Sure, we’re waking to the risk, but we gotta get outta bed, warns Endor Labs founder Varun Badhwar interview The more cybersecurity news you read, the more often you seem to see a familiar phrase: Software supply chain (SSC) vulnerabilities.…
Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters
Cops prevented crims from bilking victims out of more than €10m – but couldn’t stop crime against art A Europol-led operation dubbed “Pandora” has shut down a dozen phone scam centers, and arrested 21 suspects. The cops reckon the action…
Indonesia sneakily buys spyware, claims Amnesty International
A ‘murky’ web sees many purchases run through Singapore in a way that hides potential users Indonesia has acquired spyware and surveillance technologies through a “murky network” that extends into Israel, Greece, Singapore and Malaysia for equipment sourcing, according to…
Chinese government website security is often worryingly bad, say Chinese researchers
Bad configurations, insecure versions of jQuery, and crummy cookies are some of myriad problems Exclusive Five Chinese researchers examined the configurations of nearly 14,000 government websites across the country and found worrying lapses that could lead to malicious attacks, according…
Microsoft, Google do a victory lap around passkeys
Windows giant extends passwordless tech to everyone else Microsoft today said it will now let us common folk — not just commercial subscribers — sign into their Microsoft accounts and apps using passkeys with their face, fingerprint, or device PIN.… This…
Florida man gets 6 years behind bars for flogging fake Cisco kit to US military
Operation busted after dodgy devices ended up at Air Force Miami resident Onur Aksoy has been sentenced to six and a half years in prison for running a multi-million-dollar operation selling fake Cisco equipment that ended up in the US…