Automaker insists only names and emails exposed, no financials Car giant Stellantis is admitting that attackers targeted one of its third-party partners, spilling its own customers’ details in the process.… This article has been indexed from The Register – Security…
Category: The Register – Security
FOMO? Brit banking biz rolls out AI tools, talks up security
Lloyds Data and AI lead doesn’t want devs downloading models from the likes of Hugging Face – too risky Lloyds Banking Group is leaning into 21st century tech – yet trying to do so in a way that the data…
Trump says Michael Dell is part of the team buying TikTok, with Larry Ellison and maybe some Murdochs
The Register looks forward to a briefing on Dell’s future hyperscale sovereign SaaS platform Dell CEO Michael Dell is part of the consortium that intends to acquire TikTok’s US operations, according to US president Donald Trump.… This article has been…
Tech troubles create aviation chaos on both sides of the Atlantic
‘Cyber-attack’ on ticketing outfit Collins and cable cuts at Dallas ground hundreds of flights Technology problems hit the commercial aviation industry hard over the weekend, leading to hundreds of cancelled flights and myriad delays on both sides of the Atlantic.……
Ransomware attack linked to museum break-in and theft of golden exhibits
PLUS: Luxury brands under fire; FBI warns crims are spoofing it again; ICE buys phone cracking software Infosec in brief Online criminals prefer to deal in digital assets, but a side effect of a ransomware attack has seen a French…
ChatGPT joins human league, now solves CAPTCHAs for the right prompt
Could this bot-prevention technique now be obsolete? ChatGPT can be tricked via cleverly worded prompts to violate its own policies and solve CAPTCHA puzzles, potentially making this human-proving security mechanism obsolete, researchers say.… This article has been indexed from The…
Ivanti EPMM holes let miscreants plant shady listeners, CISA says
Unnamed org compromised with two malware sets An unknown attacker has abused a couple of flaws in Ivanti Endpoint Manager Mobile (EPMM) and deployed two sets of malware against an unnamed organization, according to the US Cybersecurity and Infrastructure Security…
Ding ding: Fortra rings the perfect-10 bell over latest GoAnywhere MFT bug
Outside experts say the vulnerability has probably already been exploited Budding ransomware crooks have another shot at exploiting Fortra’s GoAnywhere MFT product now that a new 10/10 severity vulnerability needs patching.… This article has been indexed from The Register –…
Scattered Spider teen cuffed after buying games and meals with extortion bitcoin
Bad opsec Thalha Jubair, one of the two UK teens arrested on Tuesday and accused of being members of the notorious Scattered Spider cybercrime gang, allegedly played a role in bilking more than 100 organizations out of at least $115…
One token to pwn them all: Entra ID bug could have granted access to every tenant
Until Microsoft lobbed it into a virtual volcano A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant worldwide.… This article has been indexed from The Register –…
OpenAI plugs ShadowLeak bug in ChatGPT that let miscreants raid inboxes
Radware says flaw enabled hidden email prompts to trick Deep Research agent into exfiltrating sensitive data ChatGPT’s research assistant sprung a leak – since patched – that let attackers steal Gmail secrets with just a single carefully crafted email.… This…
Charities warn Ofcom too soft on Online Safety Act violators
Another blow for the legislation as Parliament continues to hear stakeholder views As UK ministers continue to quiz stakeholders over the effectiveness of the Online Safety Act, one charity chief raised concerns over the robustness of Ofcom’s enforcement of the…
MI6 reveals ‘Silent Courier’ dark web portal upgrade it hopes will help it recruit new spies
YouTube vids explain digital tradecraft to reach spooks over Tor or VPN without blowing your cover The UK’s Secret Intelligence Service, aka MI6, has created a dark web portal called “Silent Courier” that it hopes would-be foreign informants will find…
Google pushes emergency patch for Chrome 0-day – check your browser version now
Sixth such Chrome flaw this year spotted by the Chocolate Factory, already in play Google pushed an emergency patch for a high-severity Chrome flaw, already under active exploitation. So it’s time to make sure you’re running the most recent version…
Crims bust through SonicWall to grab sensitive config data
Vendor pulls plug on cloud backup feature, urges admins to reset passwords and re-secure devices SonicWall is telling some customers to reset passwords after attackers broke into its cloud backup service and accessed firewall configuration data.… This article has been…
Cybercriminals pwn 850k+ Americans’ healthcare data
Three US medical centers fess up to serious breaches Cybercriminals broke in and stole nearly a million Americans’ data in the space of a week, in the course of three digital burglaries at healthcare providers.… This article has been indexed…
Cybercriminals pwn 850k+ Americans healthcare data
Three US medical centers fess up to serious breaches Cybercriminals broke in and stole nearly a million Americans’ data in the space of a week, after three digital burglaries at healthcare providers.… This article has been indexed from The Register…
Cloudflare DDoSed itself with React useEffect hook blunder
Dashboard loop caused API outage that was hard to troubleshoot Cloudflare has confessed to a coding error using a React useEffect hook, notorious for being problematic if not handled carefully, that caused an outage for the platform’s dashboard and many…
Two ‘Scattered Spider’ teens charged over attack on London’s transport network
Decisive action comes nearly a year after the attack and first arrest took place Two teenagers are set to appear in court today after being charged with offences related to the cyberattack on Transport for London (TfL) in August 2024.……
Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet
VC giant rebuilt boxes, patched holes, and says it’s beefed up security – but won’t say who did it Venture capital giant Insight Partners has confirmed that a January ransomware attack compromised the personal data of more than 12,000 people,…