Discover unified strategies to secure and manage all endpoints across your organization Webinar As organizations expand their digital footprint, the range of endpoints – spanning from laptops to IoT devices – continues to grow.… This article has been indexed from…
Category: The Register – Security
Bitfinex burglar bags 5 years behind bars for Bitcoin heist
A nervous wait for rapper wife who also faces a stint in the clink The US is sending the main figure behind the 2016 intrusion at crypto exchange Bitfinex to prison for five years after he stole close to 120,000…
Microsoft Power Pages misconfigurations exposing sensitive data
NHS supplier that leaked employee info fell victim to fiddly access controls that can leave databases dangling online Private businesses and public-sector organizations are unwittingly exposing millions of people’s sensitive information to the public internet because they misconfigure Microsoft’s Power…
Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost
Plus a bonus hard-coded local API key A now-patched, high-severity bug in Fortinet’s FortiClient VPN application potentially allows a low-privilege rogue user or malware on a vulnerable Windows system to gain higher privileges from another user, execute code and possibly…
Cybercriminal devoid of boundaries gets 10-year prison sentence
Serial extortionist of medical facilities stooped to cavernous lows in search of small payouts A rampant cybercrook and repeat attacker of medical facilities in the US is being sentenced to a decade in prison, around seven years after the first…
Kids’ shoemaker Start-Rite trips over security again, spilling customer card info
Full details exposed, putting shoppers at serious risk of fraud Children’s shoemaker Start-Rite is dealing with a nasty “security incident” involving customer payment card details, its second significant lapse during the past eight years.… This article has been indexed from…
NatWest blocks bevy of apps in clampdown on unmonitorable comms
From guidance to firm action… no more WhatsApp, Meta’s Messenger, Signal, Telegram and more The full list of messaging apps officially blocked by Brit banking and insurance giant NatWest Group is more extensive than WhatsApp, Meta’s Messenger, and Skype –…
Asda security chief replaced, retailer sheds jobs during Walmart tech divorce
British grocer’s workers called back to office as clock ticks for contractors The head of tech security at Asda, the UK’s third-largest food retailer, has left amid an ongoing tech divorce from US grocery giant Walmart.… This article has been…
Five Eyes infosec agencies list 2024’s most exploited software flaws
Slack patching remains a problem – which is worrying as crooks increasingly target zero-day vulns The cyber security agencies of the UK, US, Canada, Australia, and New Zealand have issued their annual list of the 15 most exploited vulnerabilities, and…
Reminder: China-backed crews compromised ‘multiple’ US telcos in ‘significant cyber espionage campaign’
Feds don’t name Salt Typhoon, but describe Beijing band’s alleged deeds The US government has confirmed there was “a broad and significant cyber espionage campaign” conducted by China-linked snoops against “multiple” American telecommunications providers’ networks.… This article has been indexed…
China-backed crews compromised ‘multiple’ US telcos in ‘significant cyber espionage campaign’
Feds don’t name Salt Typhoon, but describe Beijing band’s alleged deeds The US government has detected “a broad and significant cyber espionage campaign” conducted by China-linked attackers and directed at “multiple” US telecommunications providers’ networks.… This article has been indexed…
ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue
Plus: CISA’s ScubaGear dives deep to fix M365 misconfigs Bitdefender has released a free decryption tool that can unlock data encrypted by the ShrinkLocker ransomware.… This article has been indexed from The Register – Security Read the original article: ShrinkLocker…
Data broker amasses 100M+ records on people – then someone snatches, sells it
We call this lead degeneration What’s claimed to be more than 183 million records of people’s contact details and employment info has been stolen or otherwise obtained from a data broker and put up for sale by a miscreant.… This…
Ransomware fiends boast they’ve stolen 1.4TB from US pharmacy network
American Associated Pharmacies yet to officially confirm infection American Associated Pharmacies (AAP) is the latest US healthcare organization to have had its data stolen and encrypted by cyber-crooks, it is feared.… This article has been indexed from The Register –…
Microsoft slips Task Manager and processor count fixes into Patch Tuesday
Sore about cores no more Microsoft has resolved two issues vexing Windows 11 24H2 and Windows Server 2025 users among the many security updates that emerged on Patch Tuesday.… This article has been indexed from The Register – Security Read…
China’s Volt Typhoon crew and its botnet surge back with a vengeance
Ohm, for flux sake China’s Volt Typhoon crew and its botnet are back, compromising old Cisco routers once again to break into critical infrastructure networks and kick off cyberattacks, according to security researchers.… This article has been indexed from The…
Admins can give thanks this November for dollops of Microsoft patches
Don’t be a turkey – get these fixed Patch Tuesday Patch Tuesday has swung around again, and Microsoft has released fixes for 89 CVE-listed security flaws in its products – including two under active attack – and reissued three more.……
Air National Guardsman gets 15 years after splashing classified docs on Discord
Jack Teixeira, 22, talked of ‘culling the weak minded’ – hmm! A former Air National Guard member who stole classified American military secrets, and showed them to his gaming buddies on Discord, has been sentenced to 15 years in prison.……
Here’s what we know about the suspected Snowflake data extortionists
A Canadian and an American living in Turkey ‘walk into’ cloud storage environments… Two men allegedly compromised what’s believed to be multiple organizations’ Snowflake-hosted cloud environments, stole sensitive data within, and extorted at least $2.5 million from at least three…
‘Cybersecurity issue’ at Food Lion parent blamed for US grocery mayhem
Stores still open, but customers report delayed deliveries, invoicing issues, and more at Stop & Shop and others Retail giant Ahold Delhaize, which owns Food Lion and Stop & Shop, among others, is confirming outages at several of its US…