Gee, wonder why Beijing is so keen on the – checks notes – Committee on Foreign Investment in the US Chinese cyber-spies who broke into the US Treasury Department also stole documents from officials investigating real-estate sales near American military…
Category: The Register – Security
Drug addiction treatment service admits attackers stole sensitive patient data
Details of afflictions and care plastered online BayMark Health Services, one of the biggest drug addiction treatment facilities in the US, says it is notifying some patients this week that their sensitive personal information was stolen.… This article has been…
Devs sent into security panic by ‘feature that was helpful … until it wasn’t’
Screenshot showed it wasn’t a possible attack – unless you qualify everything Google does as a threat On Call Velkomin, Vælkomin, Hoş geldin, and welcome to Friday, and therefore to another edition of On Call – The Register‘s end-of-week celebration…
Look for the label: White House rolls out ‘Cyber Trust Mark’ for smart devices
Beware the IoT that doesn’t get a security tag The White House this week introduced a voluntary cybersecurity labeling program for technology products so that consumers can have some assurance their smart devices aren’t spying on them.… This article has…
Zero-day exploits plague Ivanti Connect Secure appliances for second year running
Factory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging those in charge of defending their orgs to take mitigation efforts “seriously” as Ivanti battles two dangerous new vulnerabilities, one of…
Security pros baited with fake Windows LDAP exploit traps
Tricky attackers trying yet again to deceive the good guys on home territory Security researchers are once again being lured into traps by attackers, this time with fake exploits of serious Microsoft security flaws.… This article has been indexed from…
Japanese police claim China ran five-year cyberattack campaign targeting local orgs
‘MirrorFace’ group found ways to run malware in the Windows sandbox, which is worrying Japan’s National Police Agency and Center of Incident Readiness and Strategy for Cybersecurity have confirmed third party reports of attacks on local orgs by publishing details…
Japanese Police claim China ran five-year cyberattack campaign targeting local orgs
‘MirrorFace’ group found ways to run malware in the Windows sandbox, which is worrying Japan’s National Police Agency and Center of Incident Readiness and Strategy for Cybersecurity have confirmed third party reports of attacks on local orgs by publishing details…
Japanese Police claim China ran five-year cyberattack campaign
‘MirrorFace’ group found ways to run malware in the Windows sandbox, which is worrying Japan’s National Police Agency and Center of Incident Readiness and Strategy for Cybersecurity have confirmed third party reports of attacks on local orgs by publishing details…
I tried hard, but didn’t fix all of cybersecurity, admits outgoing US National Cyber Director
In colossal surprise, ONCD boss Harry Coker says more work is needed The outgoing leader of the United States’ Office of the National Cyber Director has a clear message for whomever President-elect Trump picks to be his successor: There’s a…
Database tables of student, teacher info stolen from PowerSchool in cyberattack
Class act: Biz only serves 60M people across America, no biggie A leading education software maker has admitted its IT environment was compromised in a cyberattack, with students and teachers’ personal data – including some Social Security Numbers and medical…
I tried hard, but didn’t fix cybersecurity, admits outgoing US National Cyber Director
In colossal surprise, ONCD boss Harry Coker says more work is needed The outgoing leader of the USA’s Office of the National Cyber Director has a clear message for whoever President-elect Trump picks to be his successor: there’s a lot…
Mitel 0-day, 5-year-old Oracle RCE bug under active exploit
3 CVEs added to CISA’s catalog Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw – and a critical remote code execution vulnerability in Oracle WebLogic Server that has been abused for at least five years.……
Mitel 0-day, 5-year-old Oracle RCE bugs under active exploit
3 CVEs added to CISA’s catalog Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw, alongside a critical remote code execution vulnerability in Oracle WebLogic Server that has been exploited for at least five years.… This…
DNA sequencers found running ancient BIOS, posing risk to clinical research
Devices on six-year-old firmware vulnerable to takeover and destruction Argentine cybersecurity shop Eclypsium claims security issues affecting leading DNA sequencing devices could lead to disruptions in crucial clinical research.… This article has been indexed from The Register – Security Read…
UN’s aviation agency confirms attack on recruitment database
Various data points compromised but no risk to flight security The International Civil Aviation Organization (ICAO), the United Nations’ aviation agency, has confirmed to The Register that a cyber crim did indeed steal 42,000 records from its recruitment database.… This…
Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed
Here’s what $20 gets you these days More than 4,000 unique backdoors are using expired domains and/or abandoned infrastructure, and many of these expose government and academia-owned hosts – thus setting these hosts up for hijacking by criminals who likely…
Akamai to quit its CDN in China, seemingly not due to trouble from Beijing
Security and cloud compute have so much more upside than the boring business of shifting bits Akamai has decided to end its content delivery network services in China, but not because it’s finding it hard to do business in the…
FCC boss urges speedy spectrum auction to fund ‘Rip’n’Replace’ of Chinese kit
Telcos would effectively fund grants paid to protect national security The outgoing boss of the FCC, Jessica Rosenworcel, has called on her colleagues to “quickly” adopt rules allowing the US regulator to stage a radio spectrum auction, the proceeds of…
Turbulence at UN aviation agency as probe into potential data theft begins
Crime forum-dweller claims to have leaked 42,000 documents packed with personal info The United Nations’ aviation agency is investigating “a potential information security incident” after a cybercriminal claimed they had laid hands on 42,000 of the branch’s documents.… This article…