Will cough up less than two days of annual profit in settlement – and California calls this a win Quest Diagnostics has agreed to pay almost $5 million to settle allegations it illegally dumped protected health information – and hazardous…
Category: The Register – Security
Feds dismantle Russian GRU botnet built on 1,000-plus home, small biz routers
Beijing, now Moscow.… Who else is hiding in broadband gateways? The US government today said it disrupted a botnet that Russia’s GRU military intelligence unit has been using for phishing expeditions, spying, credential harvesting, and data theft against American and…
Pentagon launches nuke-spotting satellites amid Russian space bomb rumors
Dungeons and Dragons, high-waisted jeans, Cold War sabre rattling – the ’80s are back, baby Last night’s launch of six Pentagon missile-detection satellites was well timed as fears mount that Russia is considering putting nuclear weapons into space.… This article…
Mitigating AI security risks
From APIs to Zero Trust Webinar It has become possible to swiftly and inexpensively train, validate and deploy AI models and applications, yet while we embrace innovation, are we aware of the security risks?… This article has been indexed from…
Zoom stomps critical privilege escalation bug plus 6 other flaws
All desktop and mobile apps vulnerable to at least one of the vulnerabilities Video conferencing giant Zoom today opened up about a fresh batch of security vulnerabilities affecting its products, including a critical privilege escalation flaw.… This article has been…
Cybercriminals are stealing Face ID scans to break into mobile banking accounts
Deepfake-enabled attacks against Android and iOS users are netting criminals serious cash Cybercriminals are targeting iOS users with malware that steals Face ID scans to break into and pilfer money from bank accounts – thought to be a world first.……
Miscreants turn to ad tech to measure malware metrics
Now that’s what you call dual-use tech Cyber baddies have turned to ad networks to measure malware deployment and to avoid detection, according to HP Wolf Security.… This article has been indexed from The Register – Security Read the original…
European Court of Human Rights declares backdoored encryption is illegal
Surprising third-act twist as Russian case means more freedom for all The European Court of Human Rights (ECHR) has ruled that laws requiring crippled encryption and extensive data retention violate the European Convention on Human Rights – a decision that…
North Korea running malware-laden gambling websites as-a-service
$5k a month for the site. $3k for tech support. Infection with malware and funding a despot? Priceless North Korea’s latest money-making venture is the production and sale of gambling websites that come pre-infected with malware, according to South Korea’s…
OpenAI shuts down China, Russia, Iran, N Korea accounts caught doing naughty things
You don’t need us to craft phishing emails or write malware, super-lab sniffs OpenAI has shut down five accounts it asserts were used by government agents to generate phishing emails and malicious software scripts as well as research ways to…
China’s Volt Typhoon spies broke into emergency network of ‘large’ US city
Jeez, not now, Xi. Can’t you see we’ve got an election and Ukraine and Gaza and cost of living and layoffs and … The Chinese government’s Volt Typhoon spy team has apparently already compromised a large US city’s emergency services…
US Air Force’s new cyber, IT skill recruitment plan: Bring back warrant officer ranks
Officer pay, limited command duties and writing ‘code for your country’ Skilled IT professionals considering a career change have a new option, as the US Air Force is reintroducing warrant officer ranks exclusively “within the cyber and information technology professions.” ……
Prudential Financial finds cybercrims lurking inside its IT systems
Some company admin and customers data exposed, but bad guys were there for ‘only’ a day Prudential Financial, the second largest life insurance company in the US and eight largest worldwide, is dealing with a digital break-in that exposed some…
Romanian hospital ransomware crisis attributed to third-party breach
Emergency impacting more than 100 facilities appears to be caused by incident at software provider The Romanian national cybersecurity agency (DNSC) has pinned the outbreak of ransomware cases across the country’s hospitals to an incident at a service provider.… This…
Southern Water cyberattack expected to hit hundreds of thousands of customers
The company also curiously disappears from Black Basta leak site UK utilities giant Southern Water admits between 5 and 10 percent of its customers have had their data stolen during a January cyberattack.… This article has been indexed from The…
Bumblebee malware wakes from hibernation, forgets what year it is, attacks with macros
Trying to break in with malicious Word documents? How very 2015 of you The Bumblebee malware loader seemingly vanished from the internet last October, but it’s back and – oddly – relying on a vintage vector to try and gain…
Australian Tax Office probed 150 staff over social media refund scam
$1.3 billion lost as identity fraud – and greed – saw 57,000 or more seek unearned tax refunds One hundred and fifty people who worked for the Australian Taxation Office (ATO) have been investigated – and some prosecuted – for…
Crims found and exploited these two Microsoft bugs before Redmond fixed ’em
SAP, Adobe, Intel, AMD also issue fixes as well as Google for Android Patch Tuesday Microsoft fixed 73 security holes in this February’s Patch Tuesday, and you better get moving because two of the vulnerabilities are under active attack.… This…
Just one bad packet can bring down a vulnerable DNS server thanks to DNSSEC
‘You don’t have to do more than that to disconnect an entire network’ El Reg told as patches emerge A single packet can exhaust the processing capacity of a vulnerable DNS server, effectively disabling the machine, by exploiting a 20-plus-year-old…
Just one bad DNS packet can bring down a public DNSSEC server
‘You don’t have to do more than that to disconnect an entire network’ El Reg told as patches emerge A 20-plus-year-old security vulnerability in the design of DNSSEC (Domain Name System Security Extensions) could allow a single DNS packet to…