Twentysomethings claimed to be linked to spate of high-profile cybercrimes The Paris police force’s cybercrime brigade (BL2C) has arrested a further four men as part of a long-running investigation into the criminals behind BreachForums.… This article has been indexed from…
Category: The Register – Security
UK govt dept website that campaigns against encryption hijacked to advertise … payday loans
Company at center of findings blamed SEO on outsourcer A website developed for the UK Home Office’s 2022 “flop” anti-encryption campaign has seemingly been hijacked to push a payday loan scheme.… This article has been indexed from The Register –…
Don’t panic, but it’s only a matter of time before critical ‘CitrixBleed 2’ is under attack
Why are you even reading this story? Patch now! Citrix patched a critical vulnerability in its NetScaler ADC and NetScaler Gateway products that is already being compared to the infamous CitrixBleed flaw exploited by ransomware gangs and other cyber scum,…
Beware of fake SonicWall VPN app that steals users’ credentials
A good reminder not to download apps from non-vendor sites Unknown miscreants are distributing a fake SonicWall app to steal users’ VPN credentials.… This article has been indexed from The Register – Security Read the original article: Beware of fake…
The vulnerability management gap no one talks about
If an endpoint goes ping but isn’t on the network, does anyone hear it? Partner content Recently, I’ve been diving deep into security control data across dozens of organizations, and what I’ve found has been both fascinating and alarming. Most…
Four REvil ransomware crooks walk free, escape gulag fate, after admitting guilt
Russian judge lets off accused with time served – but others who refused to plead guilty face years in penal colony Four convicted members of the once-supreme ransomware operation REvil are leaving captivity after completing most of their five-year sentences.……
‘Psylo’ browser tries to obscure digital fingerprints by giving every tab its own IP address
Gotta keep ’em separated so the marketers and snoops can’t come out and play Psylo, which bills itself as a new kind of private web browser, debuted last Tuesday in Apple’s App Store, one day ahead of a report warning…
‘Psylo’ browser tries to obscure digital fingerprints by giving very tab its own IP address
Gotta keep ’em separated so the marketers and snoops can’t come out and play Psylo, which bills itself as a new kind of private web browser, debuted last Tuesday in Apple’s App Store, one day ahead of a report warning…
Typhoon-like gang slinging TLS certificate ‘signed’ by the Los Angeles Police Department
Chinese crew built 1,000+ device network that runs on home devices then targets critical infrastructure A stealthy, ongoing campaign to gain long-term access to networks bears all the markings of intrusions conducted by China’s ‘Typhoon’ crews and has infected at…
Iran cyberattacks against US biz more likely following air strikes
Plus ‘low-level’ hacktivist attempts The US Department of Homeland Security has warned American businesses to guard their networks against Iranian government-sponsored cyberattacks along with “low-level” digital intrusions by pro-Iran hacktivists.… This article has been indexed from The Register – Security…
Second attack on McLaren Health Care in a year affects 743k people
Criminals targeted the hospital and physician network’s Detroit cancer clinic this time McLaren Health Care is in the process of writing to 743,131 individuals now that it fully understands the impact of its July 2024 cyberattack.… This article has been…
Experts count staggering costs incurred by UK retail amid cyberattack hell
Cyber Monitoring Centre issues first severity assessment since February launch Britain’s Cyber Monitoring Centre (CMC) estimates the total cost of the cyberattacks that crippled major UK retail organizations recently could be in the region of £270-440 million ($362-591 million).… This…
Former US Army Sergeant pleads guilty after amateurish attempt at selling secrets to China
PLUS: 5.4M healthcare records leak; AI makes Spam harder to spot; Many nasty Linux vulns; and more Infosec in brief A former US Army sergeant has admitted he attempted to sell classified data to China.… This article has been indexed…
Netflix, Apple, BofA websites hijacked with fake help-desk numbers
Don’t trust mystery digits popping up in your search bar Scammers are hijacking the search results of people needing 24/7 support from Apple, Bank of America, Facebook, HP, Microsoft, Netflix, and PayPal in an attempt to trick victims into handing…
Qilin ransomware top dogs treat their minions to on-call lawyers for fierier negotiations
It’s a marketing move to lure more affiliates, says infosec veteran The latest marketing ploy from the ransomware crooks behind the Qilin operation involves offering affiliates access to a crack team of lawyers to ramp up pressure in ransom negotiations.……
Looks like Aflac is the latest insurance giant snagged in Scattered Spider’s web
If it looks like a duck and walks like a duck… Aflac is the latest insurance company to disclose a security breach following a string of others earlier this week, all of which appear to be part of Scattered Spider’s…
Attack on Oxford City Council exposes 21 years of election worker data
Services coming back online after legacy systems compromised Oxford City Council says a cyberattack earlier this month resulted in 21 years of data being compromised.… This article has been indexed from The Register – Security Read the original article: Attack…
Boffins devise voice-altering tech to jam ‘vishing’ schemes
To stop AI scam callers, break automatic speech recognition systems Researchers based in Israel and India have developed a defense against automated call scams.… This article has been indexed from The Register – Security Read the original article: Boffins devise…
Uncle Sam seeks time in tower dump data grab case after judge calls it ‘unconstitutional’
Feds told they can’t demand a haystack to find a needle The United States is requesting [PDF] a month-long extension to the deadline for its final decision regarding an appeal against a judge’s ruling that obtaining tower dumps is unconstitutional.……
Glazed and confused: Hole lotta highly sensitive data nicked from Krispy Kreme
Experts note ‘major red flags’ in donut giant’s security as 161,676 staff and families informed of attack details Krispy Kreme finally revealed the number of people affected by its November cyberattack, and it’s easy to see why analyzing the incident…