Also: NXP China attack, Australia can’t deliver on ransom payment ban (yet), and Justin Sun’s very bad month Infosec in Brief Cybercriminals working out of Russia go to great lengths to conceal their real identities, and you won’t ever find…
Category: The Register – Security
Leader of pro-Russia DDoS crew Killnet unmasked by Russian state media
Also: Qakbot on verge of permadeath, Australia can’t deliver on ransom payment ban (yet), and Justin Sun’s very bad month Infosec in Brief Cybercriminals working out of Russia go to great lengths to conceal their real identities, and you won’t…
Education is the foundation of modern cyber defence
How to enhance employee career development and retain skilled staff with SANS cyber training Sponsored Post Every organisation needs to make cyber security training a high priority. Effective education is an essential part of improving security practices and fostering a…
Ransomware-hit British Library: Too open for business, or not open enough?
Unique institutions need unique security. Instead, they’re fobbed off with the same old, same old Opinion The British Library’s showpiece site, in a listed red brick building in St Pancras, is presided over by a large bronze sculpture depicting Isaac…
Crypto crasher Do Kwon’s extradition approved, but destination is unclear
Hey Google, are the jails nicer in South Korea or the US? Terraform Labs founder Do Kwon – a wanted man in both South Korea and the United States – will soon face extradition from Montenegro after a court gave…
Beijing fosters foreign influencers to spread its propaganda
They get access to both China’s internet and global platforms, and cash in on both China is offering foreign influencers access to its vast market in return for content that sings its praises and helps to spreads Beijing’s desired narratives…
OpenCart owner turns air blue after researcher discloses serious vuln
Web storefront maker fixed the flaw, but not before blasting infoseccer The owner of the e-commerce store management system OpenCart has responded with hostility to a security researcher disclosing a vulnerability in the product.… This article has been indexed from…
BlackCat claims it is behind Fidelity National Financial ransomware shakedown
One of US’s largest underwriters forced to shut down a number of key systems Fortune 500 insurance biz Fidelity National Financial (FNF) has confirmed that it has fallen victim to a “cybersecurity incident.”… This article has been indexed from The…
Industry piles in on North Korea for sustained rampage on software supply chains
Kim’s cyber cronies becoming more active, sophisticated in attempts to pwn global orgs The national cybersecurity organizations of the UK and the Republic of Korea (ROK) have issued a joint advisory warning of an increased volume and sophistication of North…
Attack on direct debit provider London & Zurich leaves customers with 6-figure backlogs
Customers complain of poor comms during huge outage that’s sparked payroll fears A ransomware attack and resulting outages at direct debit collection company London & Zurich has forced at least one customer to take out a short-term loan as six-figure…
Stop social engineering at the IT help desk
How Secure Service Desk thwarts social engineering attacks and secures user verification Sponsored Post Ransomware can hit any organization at any time, and hackers are proving adept at social engineering techniques to gain access to sensitive data in any way…
Mirai we go again: Zero-day flaws see routers and cameras co-opted into botnet
Akamai sounds the alarm – won’t name the vendors yet, but there is a fix coming Akamai has uncovered two zero-day bugs capable of remote code execution, both being exploited to distribute the Mirai malware and built a botnet army…
New Relic warns customers it’s experienced a cyber … something
Users told to hold tight and await instructions as investigation continues Web tracking and analytics outfit New Relic has issued a scanty security advisory warning customers it has experienced a scary cyber something.… This article has been indexed from The…
North Korea makes finding a gig even harder by attacking candidates and employers
That GitHub repo an interviewer wants you to work on could be malware Palo Alto Networks’ Unit 42 has detailed a pair of job market hacking schemes linked to state-sponsored actors in North Korea: one in which the threat actors…
How to give Windows Hello the finger and login as someone on their stolen laptop
Not that we’re encouraging anyone to defeat this fingerprint authentication Hardware security hackers have detailed how it’s possible to bypass Windows Hello’s fingerprint authentication and login as someone else – if you can steal or be left alone with a…
How to give Windows Hello the finger and login as a user on their stolen laptop
Not that we’re encouraging anyone to defeat this fingerprint authentication Hardware security hackers have detailed how it’s possible to bypass Windows Hello’s fingerprint authentication and login as someone else – if you can steal or be left alone with a…
US nuke reactor lab hit by ‘gay furry hackers’ demanding cat-human mutants
Staff records swiped, leaked by gang who probably read one too many comics, sorry, graphic novels The self-described “gay furry hackers” of SiegedSec are back: this time boasting they’ve broken into America’s biggest nuclear power lab’s IT environment and stolen…
US cybercops take on ‘pig butchering’ org, return $9M in scammed crypto
Crims drain wallets of marks after letting them in on ‘awesome crypto scheme secret’ The US has seized nearly $9 million in proceeds generated by exploiting more than 70 victims across the nation in so-called “pig butchering” scams.… This article…
Microsoft’s bug bounty turns 10. Are these kinds of rewards making code more secure?
Katie Moussouris, who pioneered Redmond’s program, says folks are focusing on the wrong thing Interview Microsoft’s bug bounty program celebrated its tenth birthday this year, and has paid out $63 million to security researchers in that first decade – with…
UK’s cookie crumble: Data watchdog serves up tougher recipe for consent banners
30 days to get compliant with tracking rules or face enforcement action The UK’s Information Commissioner’s Office (ICO) is getting tough on website design, insisting that opting out of cookies must be as simple as opting in.… This article has…