Centuries-old institution dodges questions on how it happened as ransomware gang claims credit International auctioning giant Christie’s has confirmed data was stolen during an online attack after a top-three ransomware group claimed credit.… This article has been indexed from The…
Tag: The Register – Security
Take two APIs and call me in the morning: How healthcare research can cure cyber crime
In evolving smarter security, open source is the missing link Opinion Some ideas work better than others. Take DARPA, the US Defense Advanced Research Projects Agency. Launched by US President Dwight Eisenhower in 1957 response to Sputnik, its job is…
How’s Uncle Sam getting on with Biden’s AI exec order? Pretty good, we’re told
Former Pentagon deputy CIO Rob Carey tells us guardrails should steer Feds away from bad ML Interview President Biden’s October executive order encouraging the safe use of AI included a ton of requirements for federal government agencies that are developing…
Bayer and 12 other major drug companies caught up in Cencora data loss
PLUS: US water systems fail at cyber security More than a dozen big pharmaceutical suppliers have begun notifying individuals that their data was stolen when US drug wholesaler Cencora was breached in February.… This article has been indexed from The…
Man behind deepfake Biden robocall indicted on felony charges, faces $6M fine
FCC wants to hit this political genius with first-of-a-kind punishment The political consultant who admitted paying $150 to create a deepfake anti-Biden robocall has been indicted on charges of felony voter suppression and misdemeanor impersonation of a candidate.… This article…
Best Buy and Geek Squad were most impersonated orgs by scammers in 2023
But criminals posing as Microsoft workers scored the most ill-gotten gains The Federal Trade Commission (FTC) has shared data on the most impersonated companies in 2023, which include Best Buy, Amazon, and PayPal in the top three.… This article has…
Suspected supply chain attack backdoors courtroom recording software
An open and shut case, but the perps remain at large – whoever they are Justice is served… or should that be saved now that audio-visual software deployed in more than 10,000 courtrooms is once again secure after researchers uncovered…
Three-year-old Apache Flink flaw under active attack
We know IT admins have busy schedules but c’mon An improper access control bug in Apache Flink that was fixed in January 2021 has been added to the US government’s Known Exploited Vulnerabilities Catalog, meaning criminals are right now abusing…
Three-year-old Apache Flink flaw now under active attack
We know IT admins have busy schedules but c’mon An improper access control bug in Apache Flink that was fixed in January 2021 has been added to the US government’s Known Exploited Vulnerabilities Catalog, meaning criminals are right now abusing…
Here’s yet more ransomware using BitLocker against Microsoft’s own users
ShrinkLocker throws steel and vaccine makers into the hurt locker Yet more ransomware is using Microsoft BitLocker to encrypt corporate files, steal the decryption key, and then extort a payment from victim organizations, according to Kaspersky.… This article has been…
Casino cyberattacks put a bullseye on Scattered Spider – and the FBI is closing in
Clock is ticking to it’s time for the handcuffs, we’re told Interview The cyberattacks against Las Vegas casinos over the summer put a big target on the backs of Scattered Spider, the suspected perps, according to Mandiant Consulting’s CTO Charles…
Google guru roasts useless phishing tests, calls for fire drill-style overhaul
Current approaches aren’t working and demonize security teams A Google security bigwig has had enough of federally mandated phishing tests, saying they make colleagues hate IT teams for no added benefit.… This article has been indexed from The Register –…
Veeam says critical flaw can’t be abused to trash backups
It’s still a rough one, so patch up Veeam says the recent critical vulnerability in its Backup Enterprise Manager (VBEM) can’t be used by cybercriminals to delete an organization’s backups.… This article has been indexed from The Register – Security…
70% of CISOs worry their org is at risk of a material cyber attack
Wait, why do you want this job again? Chief information security officers around the globe “are nervously looking over the horizon,” according to a survey of 1,600 CISOs that found more than two thirds (70 percent) worry their organization is…
UK data watchdog wants six figures from N Ireland cops after 2023 data leak
Massive discount applied to save cop shop’s helicopter budget Following a data leak that brought “tangible fear of threat to life”, the UK’s data protection watchdog says it intends to fine the Police Service of Northern Ireland (PSNI) £750,000 ($955,798).……
How Apple Wi-Fi Positioning System can be abused to track people around the globe
SpaceX is smart on this, Cupertino and GL.iNet not so much In-depth Academics have suggested that Apple’s Wi-Fi Positioning System (WPS) can be abused to create a global privacy nightmare.… This article has been indexed from The Register – Security…
Would you buy Pegasus spyware from this scammer?
You shouldn’t – Indian infosec researchers warn you’ll get random junk instead Indian infosec firm CloudSEK warned on Wednesday that scammers are selling counterfeit code advertised as the NSO Group’s notorious Pegasus spyware.… This article has been indexed from The…
‘China-aligned’ spyware slingers operating since 2018 unmasked at last
Unfading Sea Haze adept at staying under the radar Bitdefender says it has tracked down and exposed an online gang that has been operating since 2018 nearly without a trace – and likely working for Chinese interests.… This article has…
Lawmakers advance bill to tighten White House grip on AI model exports
Vague ML definitions subject to change – yeah, great The House Foreign Affairs Committee voted Wednesday to advance a law bill expanding the White House’s authority to police exports of AI systems – including models said to pose a national…
Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam
Why should we get its paperwork? More than 100 medical industry groups have asked the Feds to make UnitedHealth Group, not them, go through the rigmarole of notifying everyone about the Change Healthcare ransomware infection.… This article has been indexed…