Brain drain, budget cuts, constant cyberthreats – who wouldn’t want this job? The US Cybersecurity and Infrastructure Security Agency (CISA) has a new No. 2: Madhu Gottumukkala, stepping in as the nation’s lead civilian cyber agency faces budget cuts, a…
Category: The Register – Security
CISA has a new No. 2 – but still no official top dog
Brain drain, budget cuts, and constant cyberthreats – who wouldn’t want this job? The US Cybersecurity and Infrastructure Security Agency (CISA) has a new No. 2: Madhu Gottumukkala, stepping in as the nation’s lead civilian cyber agency faces budget cuts,…
SEC SIM-swapper who Googled ‘signs that the FBI is after you’ put behind bars
Proving yet again that crims are bad at search hygiene An Alabama man who SIM-swapped his way into the SEC’s official X account, enabling a fake ETF announcement that briefly pumped Bitcoin, has been sentenced to 14 months in prison…
Millions at risk after attackers steal UK legal aid data dating back 15 years
Cybercriminals lifted info including addresses, ID numbers, and financial records from agency systems A “significant amount of personal data” belonging to legal aid applicants dating back to 2010 in the UK was stolen by cybercriminals, the Ministry of Justice (MoJ)…
IT chiefs of UK’s massive health service urge vendors to make public security pledge
Enormous org has been hit by ransomware again and again, on multiple fronts, over the past year Top cybersecurity officials within the UK government and the National Health Service (NHS) are asking CEOs of tech suppliers to pledge their allegiance…
Eeek! p0wned Alabama hit by unspecified ‘cybersecurity event’
PLUS: Euro-cops take down investment scammers; Fancy Bear returns to Ukraine; and more Infosec In Brief The Alabama state government is investigating an unspecified “cybersecurity event” that it said has affected some state systems, but didn’t involve the theft of…
China launches an AI cloud into orbit -12 sats for now, 2,800 in coming years
PLUS: South Korea signs for massive supercomputer; HCL gets into chipmaking; US tariffs slow APAC tech buying; and more Asia In Brief Chinese company Guoxing Aerospace last launched a dozen satellites, each packing a 744 TOPS of computing power, in…
Ex-NSA bad-guy hunter listened to Scattered Spider’s fake help-desk calls: ‘Those guys are good’
Plus, Co-op tells The Reg: ‘we took early and decisive action’ to block the crooks INTERVIEW The call came into the help desk at a large US retailer. An employee had been locked out of their corporate accounts. … This article…
Boffins devise technique that lets users prove location without giving it away
ZKLP system allows apps to confirm user presence in a region without exposing exactly where Computer scientists from universities in Germany, Hong Kong, and the United Kingdom have proposed a way to provide verifiable claims about location data without surrendering…
Fired US govt workers, Uncle Xi wants you! – to apply for this fake consulting gig
Phony LinkedIn recruitment ads? Groundbreaking Chinese government snoops – hiding behind the guise of fake consulting companies – are actively trying to recruit the thousands upon thousands of US federal employees who have been fired since President Trump took office.……
America’s consumer watchdog drops leash on proposed data broker crackdown
Crooks must be licking their lips at the possibilities Uncle Sam’s consumer watchdog has scrapped plans to implement Biden-era rules that would’ve treated certain data brokers as credit bureaus, forcing them to follow stricter laws when flogging Americans’ sensitive data.……
Defamation case against DEF CON terminated with prejudice
‘We hope it makes attendees feel safe reporting violations’ A Seattle court this week dismissed with prejudice the defamation case brought against DEF CON and its organizer Jeff Moss by former conference stalwart Christopher Hadnagy.… This article has been indexed…
Broadcom employee data stolen by ransomware crooks following hit on payroll provider
The tech biz was in the process of dropping the payroll company as it learned of the breach EXCLUSIVE A ransomware attack at a Middle Eastern subsidiary of payroll company ADP has led to customer data theft at Broadcom, The…
Good luck to Atos’ 7th CEO and its latest biz transformation
We suspect Philippe Salle will need it, not to mention staff and customers If at first you don’t succeed, transform, transform, and transform again is the corporate motto at Atos these days. The lumbering French-based megacorp has created another blueprint…
From hype to harm: 78% of CISOs see AI attacks already
AI attacks are keeping most practitioners up at night, says Darktrace, and with good reason Sponsored feature From the written word through to gunpowder and email, whenever an enabling technology comes along, you can be sure someone will be ready…
DoorDash scam used fake drivers, phantom deliveries to bilk $2.59M
Entire process took less than five minutes, prosecutors say A former DoorDash driver has pleaded guilty to participating in a $2.59 million scheme that used fake accounts, insider access to reassign orders, and bogus delivery reports to trigger payouts for…
Scammers are deepfaking voices of senior US government officials, warns FBI
They’re smishing, they’re vishing The FBI has warned that fraudsters are impersonating “senior US officials” using deepfakes as part of a major fraud campaign.… This article has been indexed from The Register – Security Read the original article: Scammers are…
Cyber fiends battering UK retailers now turn to US stores
DragonForce-riding ransomware ring also has ‘shiny object syndrome’ so will likely move on to another sector soon The same miscreants behind recent cyberattacks on British retailers are now trying to dig their claws into major American retailers’ IT environments –…
Coinbase extorted for $20M. Support staff bribed. Customers scammed. One hell of a breach disclosure…
One expert tells us: ‘It is the most unique breach disclosure I’ve ever seen’ Coinbase says some of its overseas support staff were paid off to steal information on behalf of cybercriminals, and the company is now being extorted for…
Socket buys Coana to tell you which security alerts you can ignore
Sometimes, less information is more In its latest gambit to reduce the noise of unnecessary security alerts, Socket has acquired Coana, a startup founded in 2022 by researchers from Aarhus University in Denmark that tells users which vulnerabilities they can…