Good to see government that values its academics (cough cough). Plus: New board criticized for lacking ‘ops’ people Cybersecurity experts have started a formal review into the UK cybersecurity market, at the government’s request, to identify future growth opportunities as…
Category: The Register – Security
Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware
Phishing, Python and RATs, oh my A sneaky malware campaign slithers through Cloudflare tunnel subdomains to execute in-memory malicious code and give unknown attackers long-term access to pwned machines.… This article has been indexed from The Register – Security Read…
Iran’s internet goes offline for hours amid claims of ‘enemy abuse’
Bank and crypto outfits hit after Israeli commander mentioned attacks expanding to ‘other areas’ The government of Iran appears to have shut down the internet within its borders, perhaps in response to Israel-linked cyberattacks.… This article has been indexed from…
Minecraft cheaters never win … but they may get malware
Infostealers posing as popular cheat tools are cropping up on GitHub Trojanized Minecraft cheat tools hosted on GitHub have secretly installed stealers that siphon credentials, crypto wallets, and other sensitive data when executed by players.… This article has been indexed…
Asana’s cutting-edge AI feature ran into a little data leakage problem
New MCP server was shut down for nearly two weeks Asana has fixed a bug in its Model Context Protocol (MCP) server that could have allowed users to view other organizations’ data, and the experimental feature is back up and…
Veeam patches third critical RCE bug in Backup & Replication in space of a year
Version 13 can’t come soon enough Veeam Backup & Replication users are urged to apply the latest patches that fix another critical bug leading to remote code execution (RCE) on backup servers.… This article has been indexed from The Register…
How to bridge the MFA gap
If a credential is worth protecting, it’s worth protecting well. Sponsored feature What do flossing and multi-factor authentication (MFA) have in common? Each is highly beneficial, yet far too few people do them consistently. MFA helps protect organizations from credential-based…
Amazon CISO: Iranian hacking crews ‘on high alert’ since Israel attack
Meanwhile, next-gen script kiddies are levelling up faster thanks to agentic AI Interview Iran’s state-sponsored cyber operatives and hacktivists have all increased their activities since the military conflict with Israel erupted last week – but not necessarily in the way…
Trump administration set to waive TikTok sell-or-die deadline for a third time
Quick reminder: The law that banned the app is called ‘Protecting Americans from Foreign Adversary Controlled Applications Act’ The Trump administration is set to again waive the 2024 law that requires the made-in-China social network TikTok to either sell its…
AWS locks down cloud security, hits 100% MFA enforcement for root users
Plus adds a ton more security capabilities for cloud customers at re:Inforce Amazon Web Services hit a major multi-factor authentication milestone, achieving 100 percent MFA enforcement for root users across all types of AWS accounts.… This article has been indexed…
Sitecore CMS flaw let attackers brute-force ‘b’ for backdoor
Hardcoded passwords and path traversals keeping bug hunters in work Security researchers have issued a warning about a pre-authentication exploit chain affecting a CMS used by some of the biggest companies in the world.… This article has been indexed from…
Redefining identity security in the age of agentic AI
Now AI agents have identity, too. Here’s how to handle it Partner content The rise of agentic AI systems is rewriting the rules of cybersecurity. Unlike generative AI, which relies on predefined instructions or prompts, AI agents operate autonomously, learn…
23andMe hit with £2.3M fine after exposing genetic data of millions
Penalty follows year-long probe into flaws that allowed attack to affect so many The UK’s data watchdog is fining beleaguered DNA testing outfit 23andMe £2.31 million ($3.13 million) over its 2023 mega breach.… This article has been indexed from The…
Scattered Spider has moved from retail to insurance
Google threat analysts warn the team behind the Marks & Spencer break-in has moved on Cyber-crime crew Scattered Spider has infected US insurance companies following a series of ransomware attacks against American and British retailers, according to Google, which urged…
Remorseless extortionists claim to have stolen thousands of files from Freedman HealthCare
The group has previously threatened to SWAT cancer patients and leaked pre-op plastic surgery photos An extortion gang claims to have breached Freedman HealthCare, a data and analytics firm whose customers include state agencies, health providers, and insurance companies, and…
Canada’s WestJet says ‘expect interruptions’ online as it navigates cybersecurity turbulence
Flights still flying – just don’t count on the app or website working smoothly Canadian airline WestJet is warning of “intermittent interruptions or errors” on its app and website as it investigates a cybersecurity incident.… This article has been indexed…
Eurocops arrest suspected Archetyp admin, shut down mega dark web drug shop
Marketplace as big as Silk Road had more than 600k users and turnover of ‘at least’ €250M Operation Deep Sentinel is the latest international law enforcement collaboration against cybercrime, shutting down Archetyp – one of the largest dark web drug…
Salesforce study finds LLM agents flunk CRM and confidentiality tests
6-in-10 success rate for single-step tasks A new benchmark developed by academics shows that LLM-based AI agents perform below par on standard CRM tests and fail to understand the need for customer confidentiality.… This article has been indexed from The…
Microsoft adds export option to Windows Recall in Europe
But lose your code and it’s gone for good Windows 11 users in the European Economic Area will shortly receive a new Recall Export feature, allowing Recall snapshots to be shared with third-party apps and websites.… This article has been…
Spy school dropout: GCHQ intern jailed for swiping classified data
Student ‘believed he could finish’ software dev ‘project alone and therefore that the rules did not apply to him’ A former GCHQ intern was jailed for seven-and-a-half years for stealing top-secret files during a year-long placement at the British intelligence…