‘Obtaining a disruptive capability could be one possible motivation behind this surge in attacks’ Espionage-ware thought to have been developed by China has once again been spotted within the power grid of a neighboring nation.… This article has been indexed…
Category: The Register – Security
Grab those updates: Microsoft flings out fixes for already-exploited bugs
Plus: Adobe and Android also tackle abused-in-the-wild flaws Patch Tuesday It’s every Windows admin’s favorite day of the month: Patch Tuesday. Microsoft emitted 59 patches for its September update batch, including two for bugs that have already been exploited.… This…
OpenSSL 1.1.1 reaches end of life for all but the well-heeled
$50k to breathe new life into its corpse. The rest of us must move on to OpenSSL 3.0 OpenSSL 1.1.1 has reached the end of its life, making a move to a later version essential for all, bar those with…
Google’s Chrome gets caught with its WebP down, offers hasty patch-up
Exploit observed in the wild as Mountain View pushes out updates Google has rushed out a fix for a vulnerability in its Chrome browser, noting that an exploit already exists in the wild.… This article has been indexed from The…
Save the Children feared hit by ransomware, 7TB stolen
Would be a new low, even for these lowlifes Cybercrime crew BianLian claims to have broken into the IT systems of a top non-profit and stolen a ton of files, including what the miscreants claim is financial, health, and medical…
MGM Resorts shuts down website, computer systems after ‘cybersecurity incident’
Ransomware? Some would be willing to bet on that MGM Resorts has shut down some of its IT systems following a “cybersecurity incident” that the casino-and-hotel giant says is currently under investigation.… This article has been indexed from The Register…
MGM Resorts shuts down computer systems after ‘cybersecurity incident’
Ransomware? Some would be willing to bet on that MGM Resorts has shut down some of its IT systems following a “cybersecurity incident” that the casino-and-hotel giant says is currently under investigation.… This article has been indexed from The Register…
Huge DDoS attack against US financial institution thwarted
Akamai reckons traffic flood peaked at 55.1 million packets per second Akamai says it thwarted a major distributed denial-of-service (DDoS) attack aimed at a US bank that peaked at 55.1 million packets per second earlier this month.… This article has been indexed…
Malice in the mail
Defence against the dark arts of phishing Webinar Almost half of all losses to cybercrime come from Business Email Compromise (BEC), according to the FBI. It appears that even the most astute among us can fall foul of a cunningly…
Google warns infoseccers: Beware of North Korean spies sliding into your DMs
ALSO: Verizon turns self in for reduced fine, malvertising comes to macOS, and this week’s critical vulnerabilities In brief Watch out, cyber security researchers: Suspected North Korean-backed hackers are targeting members of the infosec community again, according to Google’s Threat…
Safe delivery
How to protect organizations from Business Email Compromise Webinar It is a stratospheric number of emails pinging around the globe and the sheer volume offers a seductively lucrative phishing opportunity to the legion of bad actors out there.… This article…
Apple races to patch the latest zero-day iPhone exploit
No user interaction needed for this one as Pegasus turns up via iMessage Apple devices are again under attack, with a zero-click, zero-day vulnerability used to deliver Pegasus spyware to iPhones discovered in the wild.… This article has been indexed…
Microsoft, recently busted by Beijing, thinks it’s across China’s ever-changing cyber-offensive
Sometimes using AI to make hilariously wrong images that still drive social media engagement Microsoft, which earlier this week admitted not being able to detect a Chinese attack on its own infrastructure, has published a report [PDF] titled “Digital threats…
Russian infosec boss gets nine years for $100M insider-trading caper using stolen data
Confidential figures for Tesla, Snap, Roku, Avnet, others swiped and used to rack up millions in ill-gotten gains Vladislav Klyushin, the Russian owner of security penetration testing firm M-13, was jailed for nine years in the US on Thursday, for…
US, UK sanction more Russians linked to Trickbot
Top admin, HR managers, devs go on transatlantic deny-list The US and UK governments named and sanctioned 11 Russians said to be connected to the notorious Trickbot cybercrime crew this week.… This article has been indexed from The Register –…
Lawsuit claims Tesla corp data security is far less advanced than its cars
Sueball alleges company at fault after employee info leaked, including Musk’s An ex-Tesla staffer has filed a proposed class action lawsuit that blames poor access control at the carmaker for a data leak, weeks after Tesla itself sued the alleged…
If you like to play along with the illusion of privacy, smart devices are a dumb idea
You’re just giving manufacturers carte blanche to profit off personal data Depressingly predictable research from Which? serves as another reminder, if one was needed, that furnishing your home with internet-connected “smart” devices could be a dumb idea if you’d rather…
UK drops ‘spy clause’ for scanning encrypted messages, admits it’s not ‘feasible’
But don’t celebrate yet … it has simply kicked the online safety can down the road, Westminster style Comment Sanity appears to have prevailed in the debate over the UK Online Safety bill after the government agreed to ditch proposals…
China reportedly bans iPhones from more government offices
So what? Smartphones are routinely restricted in, or excluded from, sensitive locations Analysis Chinese authorities have reportedly banned Apple’s iPhones from some government offices.… This article has been indexed from The Register – Security Read the original article: China reportedly…
Microsoft: China stole secret key that unlocked US govt email from crash debug dump
Mistakes were made, lessons learned, stuff now fixed, says Windows maker Remember that internal super-secret Microsoft security key that China stole and used to break into US government email accounts back in July? … This article has been indexed from The…