And that includes ransomware crims, claims US of alleged sanctions-buster A Russian woman the US accuses of being a career money launderer is the latest to be sanctioned by the country for her alleged role in moving hundreds of millions…
Category: The Register – Security
Okta breach affected 134 orgs, ‘or less than 1%’ of customers, company admits
Plus: CVSS 4.0 is here, this week’s critical vulns, and ‘incident’ hit loan broker promises no late fees. Generous Infosec in brief Okta has confirmed details of its October breach, reporting that the incident led to the compromise of files…
Securing frontline Operational Technology environments
How Britvic outlawed security blind spots Webinar Organisations in multiple industries often face risks which can severely impact their operational resilience. Cyber criminals like to use ransomware and vulnerable third-party connections to hijack operational technology (OT) systems which can stop…
‘Corrupt’ cop jailed for tipping off pal to EncroChat dragnet
Taking selfie with ‘official sensitive’ doc wasn’t smartest idea, either A British court has sentenced a “corrupt” cop to almost four years behind bars for tipping off a friend that officers had compromised the EncroChat encrypted messaging app network.… This…
81K people’s sensitive info feared stolen from Hilb after email inboxes ransacked
Credit card numbers, security codes, SSNs, passwords, PINs? Yikes! Hilb Group has warned more than 81,000 people that around the start of 2023 criminals broke into the work email accounts of its employees and may have stolen a bunch of…
Ex-GCHQ software dev jailed for stabbing NSA staffer
Terrorist ideology suspected to be motivation A former software developer for Britain’s cyberspy agency is facing years in the slammer after being sentenced for stabbing a National Security Agency (NSA) official multiple times.… This article has been indexed from The…
Microsoft pins hopes on AI once again – this time to patch up Swiss cheese security
Secure Future Initiative needed in wake of tech evolution and unrelenting ransomware criminality Microsoft has made fresh commitments to harden the security of its software and cloud services after a year in which numerous members of the global infosec community…
UK data watchdog fines three text spammers for flouting electronic marketing rules
‘High-pressure’ sales tactics targeted people registered with Telephone Preference Service A “debt management company” is itself facing a bill from Britain’s data regulator for sending hundreds of thousands of text messages to households that opted not to receive marketing junk…
FTX crypto-villain Sam Bankman-Fried convicted on all charges
Jury took just four hours to reach guilty verdicts Sam Bankman-Fried, the founder and former CEO of crypto exchange FTX and trading firm Alameda Research, has been found guilty of seven criminal charges.… This article has been indexed from The…
Infosec pros can secure IT, but have harder time securing job satisfaction
Industry facing burnout scare as workplace issues snowball The proportion of cybersecurity professionals reporting low “happiness ratings” has risen sharply over the last 12 months, raising concerns about increasing burnout rates in the industry.… This article has been indexed from…
Critical Apache ActiveMQ flaw under attack by ‘clumsy’ ransomware crims
Over a week later and barely any patches for the 10/10 vulnerability have been applied Security researchers have confirmed that ransomware criminals are capitalizing on a maximum-severity vulnerability in Apache ActiveMQ.… This article has been indexed from The Register –…
Okta tells 5,000 of its own staff that their data was accessed in third-party breach
The hits keep on coming for troubled ID management biz Okta has sent out breach notifications to almost 5,000 employees, warning them that miscreants breached one of its third-party vendors and stole a file containing staff names, social security numbers,…
Boeing acknowledges cyberattack on parts and distribution biz
Won’t say if it’s LockBit, but LockBit appears to have claimed credit. Maybe payment, too Boeing has acknowledged a cyber incident just days after ransomware gang LockBit reportedly exfiltrated sensitive data from the aerospace defence contractor.… This article has been…
FBI boss: Taking away our Section 702 spying powers could be ‘devastating’
Of course, he would say that, wouldn’t he? As the expiration date for the Feds’ Section 702 surveillance powers draws closer, FBI Director Christopher Wray has warned a US Senate committee that his agents may not be able to stop…
Ransomware crooks SIM swap medical research biz exec, threaten to leak stolen data
Advarra probes intrusion claims, says ‘the matter is contained’ Ransomware crooks claim they’ve stolen data from a firm that helps other organizations run medical trials after one of its executives had their cellphone number and accounts hijacked.… This article has…
Mozi botnet murder mystery: China or criminal operators behind the kill switch?
Middle Kingdom or self-immolation – there are a couple of theories The Mozi botnet has all but disappeared according to security folks who first noticed the prolific network’s slowdown and then uncovered a kill switch for the IoT system. But…
Feds collar suspected sanctions-busting Russian smugglers of US tech
Parts sent to Moscow allegedly found on Ukrainian battlefields Three Russian nationals were arrested in New York yesterday on charges of moving electronics components worth millions to sanctioned entities in Russia, pieces of which were later recovered on battlefields in…
Critical vulnerability in F5 BIG-IP under active exploitation
Full extent of attacks unknown but telecoms thought to be especially exposed Vulnerabilities in F5’s BIG-IP suite are already being exploited after proof of concept (PoC) code began circulating online.… This article has been indexed from The Register – Security…
Cybercrooks amp up attacks via macro-enabled XLL files
Neither Excel nor PowerPoint safe as baddies continue to find ways around protections Cybercriminals are once again abusing macro-enabled Excel add-in (XLL) files in malware attacks at a vastly increased rate, according to new research.… This article has been indexed…
Get your very own ransomware empire on the cheap, while stocks last
RansomedVC owner takes to Telegram to flog criminal enterprise The short-lived RansomedVC ransomware operation is being shopped around by its owner, who is claiming to offer a 20 percent discount just a day after first listing it for sale.… This…