Assumed Conti offshoot averages 7 figures for each successful attack but may have issues with, er, ‘closing deals’ The Black Basta ransomware group has reportedly generated upwards of $100 million in revenue since it started operations in April 2022.… This…
Category: The Register – Security
Locking down Industrial Control Systems
SANS unveils online hub with valuable tools and information for cybersecurity professionals defending ICS Sponsored Post Industrial Control Systems (ICS) which can automate processes, increase productivity and reduce labour costs, are rapidly gaining worldwide enterprise traction.… This article has been…
Weak session keys let snoops take a byte out of your Bluetooth traffic
BLUFFS spying flaw present in iPhones, ThinkPad, plenty of chipsets Multiple Bluetooth chips from major vendors such as Qualcomm, Broadcom, Intel, and Apple are vulnerable to a pair of security flaws that allow a nearby miscreant to impersonate other devices…
US lawmakers have Chinese LiDAR on their threat-detection radar
Amid fears Beijing could harvest spatial data, letter suggests Huawei-style bans may be needed A US congressional committee has questioned whether Chinese-made Light Detection and Ranging (LiDAR) devices might have a negative impact on national security, and suggested they may…
Rogue ex-Motorola techie admits cyberattack on former employer, passport fraud
Pro tip: Don’t use your new work email to phish your old firm An ex-Motorola technician in the US has admitted he tried to fraudulently obtain a passport while awaiting trial for a cyberattack on his former employer.… This article…
Okta data breach dilemma dwarfs earlier estimates
All customer support users told their info was accessed after analysis oversight Okta has admitted that the number of customers affected by its October customer support system data breach is far greater than previously thought.… This article has been indexed…
Uncle Sam probes cyberattack on Pennsylvania water system by suspected Iranian crew
CISA calls for stronger IT defenses as Texas district also hit by ransomware crew CISA is investigating a cyberattack against a Pennsylvania water authority that has been linked to what are suspected to be Iranian miscreants. The US Homeland Security…
British Library begins contacting customers as Rhysida leaks data dump
CRM databases were accessed and library users are advised to change passwords The Rhysida ransomware group has published most of the data it claimed to have stolen from the British Library a month after the attack was disclosed.… This article…
UK government rings the death knell for SIM farms
Acts under the guise of protecting the public from fraud, yet history suggests Home Office has other motives The UK government plans to introduce new legislation to ban SIM farms, which it views as a widely abused means for carrying…
Brit borough council apologizes for telling website users to disable HTTPS
Planning portal back online with a more secure connection Reading Borough Council has securely restored its planning portal after facing criticism for recommending questionable tech security practices to users.… This article has been indexed from The Register – Security Read…
Japan’s space agency suffers cyber attack, points finger at Active Directory
JAXA is having a tough time in cyberspace and outer space, the latter thanks to an electrical glitch Japan’s Space Exploration Agency (JAXA) has reported a cyber incident.… This article has been indexed from The Register – Security Read the…
Plex gives fans a privacy complex after sharing viewing habits with friends by default
Grandma is watching what?! A Plex “feature” has infuriated some users after sharing with others what they are watching on the streaming service — and it appears this functionality is on by default.… This article has been indexed from The…
Plex gives fans a privacy complex by sharing viewing habits with friends by default
Grandma is watching what?! A Plex “feature” is raising privacy hackles of some users after sharing with others what they are watching on the streaming service — and it appears to be on by default.… This article has been indexed…
Plex sharing streaming habits raises privacy hackles
Grandma is watching what?! A Plex “feature” is raising privacy hackles of some users after sharing with others what they are watching on the streaming service — seemingly without their consent.… This article has been indexed from The Register –…
Helping companies defend what attackers want most – their data
Varonis introduces Athena AI to transform data security and incident response Partner Content Athena AI, the new generative AI layer that spans across the entire Varonis Data Security Platform, redefines how security teams protect data – from visibility to action.……
Europol shutters ransomware operation with kingpin arrests
A few low-level stragglers remain on the loose, but biggest fish have been hooked International law enforcement investigators have made a number of high-profile arrests after tracking a major cybercrime group for more than four years.… This article has been…
A bird’s eye view of your global attack surface
Get to know your external attack surface before the cyber criminals map it first Sponsored Post Building an effective cyber security defense involves protecting the assets you know you have as well as the ones you don’t.… This article has…
India’s CERT given exemption from Right To Information requests
Activists worry investigations may stay secret, and then there’s those odd incident reporting requirements India’s government has granted its Computer Emergency Response Team, CERT-In, immunity from Right To Information (RTI) requests – the nation’s equivalent of the freedom of information…
‘Serial cybercriminal and scammer’ jailed for 8 years, told to pay back $1.2M
Crook did everything from SIM swaps to fake verified badge scams A Los Angeles man has been jailed after pulling off SIM-swap attacks on victims, hijacking social media accounts, committing fraud with Zelle payments, and impersonating Apple support.… This article…
Trio of major holes in ownCloud expose admin passwords, allow unauthenticated file mods
Mitigations require mix of updating libraries and manual customer action ownCloud has disclosed three critical vulnerabilities, the most serious of which leads to sensitive data exposure and carries a maximum severity score.… This article has been indexed from The Register…