Civil recovery order targets PlugwalkJoe’s illicit gains while he serves US sentence British prosecutors have secured a civil recovery order to seize crypto assets worth £4.11 million ($5.39 million) from Twitter hacker Joseph James O’Connor, clawing back the proceeds of…
Category: The Register – Security
Jaguar Land Rover hack cost India’s Tata Motors around $2.4 billion and counting
PLUS: Active noise cancellation for entire rooms; More trouble for SK telecom; The Wiggles apologize for bad batteries; and more Asia In Brief India’s Tata Motors, owner of Jaguar Land Rover, has revealed the cyberattack that shut down production in…
Logitech leaks data after zero-day attack
PLUS: CISA still sitting on telecoms security report; DoorDash phished again; Lumma stealer returns; and more INFOSEC IN BRIEF The US Senate passed a resolution in July to force the US Cybersecurity and Infrastructure Security Agency (CISA) to publish a…
Fortinet finally cops to critical make-me-admin bug under active exploitation
More than a month after PoC made public Fortinet finally published a security advisory on Friday for a critical FortiWeb path traversal vulnerability under active exploitation – but it appears digital intruders got a month’s head start.… This article has…
Crims poison 150K+ npm packages with token-farming malware
Amazon spilled the TEA Yet another supply chain attack has hit the npm registry in what Amazon describes as “one of the largest package flooding incidents in open source registry history” – but with a twist. Instead of injecting credential-stealing…
FBI flags scam targeting Chinese speakers with bogus surgery bills
Crooks spoof US insurers, threaten bogus extradition to pry loose personal data and cash Chinese speakers in the US are being targeted as part of an aggressive health insurance scam campaign, the FBI warns.… This article has been indexed from…
CISA flags imminent threat as Akira ransomware starts hitting Nutanix AHV
Advisory updated as leading cybercrime crew opens up its target pool The US Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidance to organizations on the Akira ransomware operation, which poses an imminent threat to critical sectors.… This article…
Clop claims it hacked ‘the NHS.’ Which bit? Your guess is as good as theirs
Cybercrime crew has ravaged multiple private organizations using Oracle EBS zero-day for months The UK’s National Health Service (NHS) is investigating claims of a cyberattack by extortion crew Clop.… This article has been indexed from The Register – Security Read…
Kubernetes overlords decide Ingress NGINX isn’t worth saving
Maintenance to end next year after ‘helpful options’ became ‘serious security flaws’ Kubernetes maintainers have decided it’s not worth trying to save Ingress NGINX and will instead stop work on the project and retire it in March 2026.… This article…
Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded
Anthropic dubs this the first AI-orchestrated cyber snooping campaign Chinese cyber spies used Anthropic’s Claude Code AI tool to attempt digital break-ins at about 30 high-profile companies and government organizations – and the government-backed snoops “succeeded in a small number…
Ransomed CTO falls on sword, refuses to pay extortion demand
Checkout.com will instead donate the amount to fund cybercrime research Ransomware is a huge business, because affected orgs keep forking over money to get their data back. However, instead of paying a ransom demand after getting hit by extortionists last…
Ubuntu 25.10’s Rusty sudo holes quickly welded shut
The goal of ‘oxidizing’ the Linux distro hits another bump Two vulnerabilities in Ubuntu 25.10’s new “sudo-rs” command have been found, disclosed, and fixed in short order.… This article has been indexed from The Register – Security Read the original…
Extra, extra, read all about it: Washington Post clobbered in Clop caper
Nearly 10,000 staff and contractors warned after attackers raided newspaper’s Oracle EBS setup The Washington Post has confirmed that nearly 10,000 employees and contractors had sensitive personal data stolen in the Clop-linked Oracle E-Business Suite (EBS) attacks.… This article has…
Rhadamanthys malware admin rattled as cops seize a thousand-plus servers
Operation Endgame also takes down Elysium and VenomRAT infrastructure International cops have pulled apart the Rhadamanthys infostealer operation, seizing 1,025 servers tied to the malware in coordinated raids between November 10-13.… This article has been indexed from The Register –…
NHS supplier ends probe into ransomware attack that contributed to patient death
Synnovis’s 18-month forensic review of Qilin intrusion completed, now affected patients to be notified Synnovis has finally wrapped up its investigation into the 2024 ransomware attack that crippled pathology services across London, ending an 18-month effort to untangle what the…
Google sues 25 China-based scammers behind Lighthouse ‘phishing for dummies’ kit
600+ phishing websites and 116 of these use a Google logo Google has filed a lawsuit against 25 unnamed China-based scammers, which it claims have stolen more than 115 million credit card numbers in the US as part of the…
Attackers turned Citrix, Cisco 0-day exploits into custom-malware hellscape
Vendors (still) keep mum An “advanced” attacker exploited CitrixBleed 2 and a max-severity Cisco Identity Services Engine (ISE) bug as zero-days to deploy custom malware, according to Amazon Chief Information Security Officer CJ Moses.… This article has been indexed from…
Bitcoin bandit’s £5B bubble bursts as cops wrap seven-year chase
Metropolitan Police lands lengthy sentence following ‘complex’ investigation The Metropolitan Police’s seven-year investigation into a record-setting fraudster has ended after she was sentenced to 11 years and eight months in prison on Tuesday.… This article has been indexed from The…
UK’s Cyber Security and Resilience Bill makes Parliamentary debut
Various touch-ups added as MPs seek greater resilience to attacks on critical sectors UK government introduced the Cyber Security and Resilience (CSR) Bill to Parliament today, marking a significant overhaul of local cybersecurity legislation to sharpen the security posture of…
Aviation watchdog says organized drone attacks will shut UK airports ‘sooner or later’
Skies are open for mischief as hard-to-trace drones and fast-moving cyber raids promise new wave of disruption Britain’s aviation watchdog has warned it’s only a matter of time before organized drone attacks bring UK airports to a standstill.… This article…