Chief quits, pays own penalty after helping crooks launder cash, aiding sanctions evaders The world’s largest cryptocurrency exchange just got a little smaller, with the US Department of Justice announcing Binance and its CEO Changpeng Zhao have both pleaded guilty…
Category: The Register – Security
Sumo Logic wrestles with security breach, pins down customer data
Compromised AWS account led to fears that user info could have been exposed to cybercriminals Sumo Logic has confirmed that no customer data was compromised as a result of the potential security breach it discovered on November 3.… This article…
The XBOM vs SBOM debate
Why an eXtended Software Bill of Materials could be the next step up in cybersecurity Webinar A Software Bill of Materials (SBOM) has become a non-negotiable requirement to meet regulatory and buyer requirements. But does this provide enough protection if…
Third-party data breach affecting Canadian government could involve data from 1999
Any govt staffers who used relocation services over past 24 years could be at risk The government of Canada has confirmed its data was accessed after two of its third-party service providers were attacked.… This article has been indexed from…
Maintaining a state of readiness to deal with cyber attacks
Continuous training can help improve EMEA organisations’ ability to fend off the cyber criminals in 2024 Sponsored Post You can never afford to drop your guard when it comes to cyber security – hackers never do. Any weakness in your…
MOVEit victim count latest: 2.6K+ orgs hit, 77M+ people’s data stolen
Real-life impact of buggy software laid bare – plus: Avast tries to profit from being caught up in attacks Quick show of hands: whose data hasn’t been stolen in the mass exploitation of Progress Software’s vulnerable MOVEit file transfer application?…
Former infosec COO pleads guilty to attacking hospitals to drum up business
Admits to taking phones used for ‘code blue’ emergencies offline and more An Atlanta tech company’s former COO has pleaded guilty to a 2018 incident in which he deliberately launched online attacks on two hospitals, later citing the incidents in…
Rhysida ransomware gang: We attacked the British Library
Crims post passport scans and internal forms up for ‘auction’ to prove it The Rhysida ransomware group says it’s behind the highly disruptive October cyberattack on the British Library, leaking a snippet of stolen data in the process.… This article…
Your password hygiene remains atrocious, says NordPass
ALSO: FCC cracks down on SIM-swap scams, old ZeroLogon targeted by new ransomware, and critical vulnerabilities Infosec in brief It’s that time of year again – NordPass has released its annual list of the most common passwords. And while it…
LockBit redraws negotiation tactics after affiliates fail to squeeze victims
Cybercrime group worried over dwindling payments … didn’t they tell them to Always Be Closing? In response to growing frustrations inside the LockBit organization, its leaders have overhauled the way they negotiate with ransomware victims going forward.… This article has…
SonicWall swallows Solutions Granted amid cybersecurity demand surge
CEO Bob VanKirk makes near-20-year partnership official, teases big things coming to EMEA Channel-focused cybersecurity company SonicWall is buying Virginia-based MSSP Solutions Granted – its first acquisition in well over a decade.… This article has been indexed from The Register…
Samsung UK discloses year-long breach, leaked customer data
Chaebol already the subject of suits for a pair of past indiscretions The UK division of Samsung Electronics has allegedly alerted customers of a year-long data breach – the third such incident the South Korean giant has experienced around the…
Look out, Scattered Spider. FBI pumps ‘significant’ resources into snaring data-theft crew
Absence of arrests doesn’t mean nothing’s happening, cyber-cops insist The FBI is applying “significant” resources to find members of the infamous Scattered Spider cyber-crime crew, which seemingly attacked a couple of high-profile casinos a few months ago and remains active,…
Rackspace racks up $12M bill in ransomware raid recovery
And that’s not counting the incoming lawsuits Rackspace’s costs from last year’s ransomware infection continue to mount: the cloud hosting biz told America’s financial watchdog, the SEC, its total expenses to date regarding that cyberattack have reached $12 million –…
Windows Server 2022 update gave ESXi host VMs the blue screen blues
Wild idea: Maybe Microsoft could introduce a Quality Copilot to stop pushing broken patches Something likely to be absent from Microsoft’s Ignite event is talk of a fix rolled out to deal with malfunctioning Windows Server 2022 Virtual Machines following…
BlackCat plays with malvertising traps to lure corporate victims
Ads for Slack and Cisco AnyConnect actually downloaded Nitrogen malware Affiliates of the ALPHV/BlackCat ransomware-as-a-service operation are turning to malvertising campaigns to establish an initial foothold in their victims’ systems.… This article has been indexed from The Register – Security…
Royal Mail’s recovery from ransomware attack will cost business at least $12M
First time hard figure given on recovery costs for January incident Royal Mail’s parent company has revealed for the first time the infrastructure costs associated with its January ransomware attack.… This article has been indexed from The Register – Security…
Hundreds of websites cloned to run ads for Chinese football gambling outfits
Linked to org that UK authorities found once failed its anti-money-laundering obligations Swedish digital rights organization Qurium has discovered around 250 cloned websites and suggested they exist to drive people to China-linked gambling sites.… This article has been indexed from…
Clorox CISO flushes self after multi-million-dollar cyberattack
Plus: Ransomware crooks file SEC complaint against victim The Clorox Company’s chief security officer has left her job in the wake of a corporate network breach that cost the manufacturer hundreds of millions of dollars.… This article has been indexed…
Google Workspace weaknesses allow plaintext password theft
Exploits come with caveats, but Google says no fixes as user security should do the heavy lifting here Novel weaknesses in Google Workspace have been exposed by researchers, with exploits potentially leading to ransomware attacks, data exfiltration, and password decryption.……