New malware, even better social engineering chops The FBI and a host of international cyber and law enforcement agencies on Tuesday warned that Scattered Spider extortionists have changed their tactics and are now breaking into victims’ networks using savvier social…
Category: The Register – Security
Raspberry Pi RP2350 A4 update fixes old bugs and dares you to break it again
5 V-tolerant GPIO opens the way to some intriguing retro-nerdery The Raspberry Pi team has released an update to the RP2350 microcontroller with bug fixes, hardening, and a GPIO tweak that will delight retro hardware enthusiasts.… This article has been…
War Games: MoD asks soldiers with 1337 skillz to compete in esports
Troopers to swap radios for Turtle Beaches in preparation for ‘21st century challenges’ The UK’s Ministry of Defence (MoD) is doubling down on its endorsement of esports by tasking the British Esports Federation to establish a new tournament to upskill…
Microsoft spotlights Apple bug patched in March as SharePoint exploits continue
Look over there! Amidst its own failure to fix a couple of bugs now under mass exploitation and being abused for espionage, data theft, and ransomware infections, Microsoft said Monday that it spotted a macOS vulnerability some months ago that…
Security pros are drowning in threat-intel data and it’s making everything more dangerous
Plus, 60% don’t have enough analysts to make sense of it Too many threats, too much data, and too few skilled security analysts are making companies more vulnerable to cyberattacks, according to the IT and security leaders tasked with protecting…
Majority of 1.4M customers caught in Allianz Life data heist
No word on who’s behind it, but attack has hallmarks of the usual suspects Financial services biz Allianz says the majority of customers of one of its North American subsidiaries had their data stolen in a cyberattack.… This article has…
Aeroflot aeroflops over ‘IT issues’ after attackers claim year-long compromise
Russia’s top airline cancels 49 flights, delays affect many more Russia’s largest airline, Aeroflot, canceled numerous flights on Monday morning following what it says was a failure in its IT systems – something hacktivists are claiming responsiblity for.… This article…
US spy satellite agency breached, but insists no classified secrets spilled
Plus, leak site for BlackSuit seized, Tea spilt, and avoid crime if you’ve got a famous dad Infosec in brief A computer intrusion hit the US spy satellite agency, but officials insist no classified secrets were lost – just some…
Congress tries to outlaw AI that jacks up prices based on what it knows about you
Surveillance-based pricing? Two lawmakers say enough Two Democratic members of Congress, Greg Casar (D-TX) and Rashida Tlaib (D-MI,) have introduced legislation in the US House of Representatives to ban the use of AI surveillance to set prices and wages.… This…
Blame a leak for Microsoft SharePoint attacks, researcher insists
MAPP program to blame? A week after Microsoft told the world that its July software updates didn’t fully fix a couple of bugs, which allowed miscreants to take over on-premises SharePoint servers and remotely execute code, researchers have assembled much…
Senator to Google: Give us info from telco Salt Typhoon probes
AT&T and Verizon refused to hand over the security assessments, says Cantwell US Senator Maria Cantwell (D-WA) has demanded that Google-owned incident response firm Mandiant hand over the Salt Typhoon-related security assessments of AT&T and Verizon that, according to the…
Freelance dev shop Toptal caught serving malware after GitHub account break-in
Malicious code lurking in over 5,000 downloads, says Socket researcher Developer freelancing platform Toptal has been inadvertently spreading malicious code after attackers broke into its systems and began distributing malware through developer accounts.… This article has been indexed from The…
Microsoft admits it ‘cannot guarantee’ data sovereignty
Under oath in French Senate, exec says it would be compelled – however unlikely – to pass local customer info to US admin Microsoft says it “cannot guarantee” data sovereignty to customers in France – and by implication the wider…
Advisor to Brit tech contractors Qdos confirms client data leak
Policy management not affected, but some personal data may have been snaffled Business insurance and employment status specialist Qdos has confirmed that an intruder has stolen some customers personal data, according to a communication to tech contractors that was seen…
DNS security is important but DNSSEC may be a failed experiment
Nobody thinks of running a website without HTTPs. Safer DNS still seems optional Systems Approach Last week I turned on DNSSEC (Domain Name System Security Extensions) for the systemsapproach.org domain. No need to applaud; I was just trying to get…
Laptop farmer behind $17M North Korean IT worker scam locked up for 8.5 years
Plus she has to cough up a slice of Pyongyang’s payday An Arizona woman who ran a laptop farm from her home – helping North Korean IT operatives pose as US-based remote workers – has been sentenced to eight and…
Euro healthcare giant AMEOS Group shuts down IT systems after mystery attack
Good luck getting an appointment with your doctor The AMEOS Group, which runs over 100 hospitals across Europe, has shut down its entire network after crims busted in.… This article has been indexed from The Register – Security Read the…
No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers
Shadowserver claims miscreants were already poking at a critical hole in early July, long before Switchzilla patched it Threat actors have actively exploited a newly patched vulnerability in Cisco’s Identity Services Engine (ISE) software since early July, weeks before the…
So much for watermarks: UnMarker tool nukes AI provenance tags
Boffins insist your deepfake tracking tech won’t work Computer scientists with the University of Waterloo in Ontario, Canada, say they’ve developed a way to remove watermarks embedded in AI-generated images.… This article has been indexed from The Register – Security…
Microsoft: SharePoint attacks now officially include ransomware infections
Let the games begin Ransomware has officially entered the Microsoft SharePoint exploitation ring.… This article has been indexed from The Register – Security Read the original article: Microsoft: SharePoint attacks now officially include ransomware infections