Plan says to hand over keys to networks – and report intrusions within eight hours of discovery Organizations that sell IT services to Uncle Sam are peeved at proposed changes to procurement rules that would require them to allow US…
Category: The Register – Security
Volt Typhoon not the only Chinese crew lurking in US energy, critical networks
Presumably American TLAs are all over Beijing’s infrastructure, too … right? Volt Typhoon isn’t the only Chinese spying crew infiltrating computer networks in America’s energy sector and other critical organizations with the aim of wrecking equipment and causing other headaches,…
Half of polled infosec pros say their degree was less than useful for real-world work
The other half paid attention in class? Half of infosec professionals polled by Kaspersky said any cybersecurity knowledge they picked up from their higher education is at best somewhat useful for doing their day jobs. On the other hand, half…
US says China’s Volt Typhoon is readying destructive cyberattacks
12 international govt agencies sound the alarm, critical infrastructure at the heart of threats The US government today confirmed that China’s Volt Typhoon crew comprised “multiple” critical infrastructure org’s IT networks, and warned that the state-sponored hackers are readying “disruptive…
Iran’s cyber operations in Israel a potential prelude to US election interference
Tactics are more sophisticated and supported in greater numbers Iran’s anti-Israel cyber operations are providing a window into the techniques the country may deploy in the run-up to the 2024 US Presidential elections, Microsoft says.… This article has been indexed…
Raspberry Pi Pico cracks BitLocker in under a minute
Windows encryption feature defeated by $10 and a YouTube tutorial We’re very familiar with the many projects in which Raspberry Pi hardware is used, from giving old computers a new lease of life through to running the animated displays so…
JetBrains urges swift patching of latest critical TeamCity flaw
Cloud version is safe, but no assurances offered about possible on-prem exploits JetBrains is encouraging all users of TeamCity (on-prem) to upgrade to the latest version following the disclosure of a critical vulnerability in the CI/CD tool.… This article has…
The spyware business is booming despite government crackdowns
‘Almost zero data being shared across the industry on this particular threat,’ we’re told The commercial spyware economy – despite government and big tech’s efforts to crack down – appears to be booming.… This article has been indexed from The…
DEF CON is canceled! No, really this time – but the show will go on
Longtime host Caesars ends relationship at short notice It’s an annual meme that DEF CON infosec conference has been canceled, but this time it actually happened.… This article has been indexed from The Register – Security Read the original article:…
Mozilla adds paid-for data-deletion tier to Monitor, its privacy-breach radar
Firefox maker promises to lean on personal info brokers to scrub records Mozilla on Tuesday expanded its free privacy-monitoring service with a paid-for tier called Mozilla Monitor Plus that will try to get data brokers to delete their copies of…
Verizon says 63K employees’ info fell into the wrong hands – an insider this time
Telco says it’s a private matter, data ‘not shared externally’ Verizon is notifying more than 63,000 people, mostly current employees, that an insider, accidentally or otherwise, had inappropriate access to their personal data.… This article has been indexed from The…
Verizon says 63K employees’ info fell into wrong hands – an insider in this case
Telco says it’s a private matter Verizon is notifying more than 63,000 people, mostly current employees, that an insider, accidentally or otherwise, had inappropriate access to their personal data.… This article has been indexed from The Register – Security Read…
Verizon alerts 63k employees their details were leaked by an insider
Telco says it’s a private matter Verizon is notifying more than 63,000 people, mostly current employees, that an insider leak exposed their personal data.… This article has been indexed from The Register – Security Read the original article: Verizon alerts…
Chinese Coathanger malware hung out to dry by Dutch defense department
Attack happened in 2023 using a bespoke backdoor, confirming year-old suspicions Dutch authorities are lifting the curtain on an attempted cyberattack last year at its Ministry of Defense (MoD), blaming Chinese state-sponsored attackers for the espionage-focused intrusion.… This article has…
EquiLend back in the saddle as ransom payment rumors swirl
Still no word on how the intruders broke in or the full extent of any possible data compromise Global securities finance tech company EquiLend’s systems are now back online after announcing a disruptive ransomware attack nearly two weeks ago.… This…
Double trouble for Fortinet customers as pair of critical vulns found in FortiSIEM
Admins should get a move on while info is scarce and exploits aren’t yet available Fortinet’s FortiSIEM product is vulnerable to two new maximum-severity security vulnerabilities that allow for remote code execution.… This article has been indexed from The Register…
New kids on the ransomware block in 2023: Akira and 8Base lead dozens of newbies
How good are your takedowns when fresh gangs are linked to previous ops, though? At least 25 new ransomware gangs emerged in 2023, with Akira and 8Base proving the most “successful,” research reveals.… This article has been indexed from The…
Google throws $1M at Rust Foundation to build C++ bridges
Chocolate Factory matches Microsoft money for memory safety Google on Monday donated $1 million to the Rust Foundation specifically to improve interoperability between the language and C++.… This article has been indexed from The Register – Security Read the original…
Google throws $1m at Rust Foundation to build C++ bridges
Chocolate Factory matches Microsoft money for memory safety Google on Monday donated $1 million to the Rust Foundation specifically to improve interoperability between the language and C++.… This article has been indexed from The Register – Security Read the original…
Ivanti devices hit by wave of exploits for latest security hole
At this point you might be better off just shutting the stuff down All manner of miscreants are exploiting the latest Ivanti flaw, a server-side request forgery (SSRF) vulnerability tracked as CVE-2024-21893 that can be used to hijack equipment.… This…