Acknowledges bulk customer data leak weeks after Telegram channels dangled it online Leading Indian health insurance provider Star Health has admitted to being the victim of a cyber attack after criminals claimed they had posted records of 30-milion-plus clients online.……
Tag: The Register – Security
Crooks stole personal info of 77k Fidelity Investments customers
But hey, no worries, the firm claims no evidence of data misuse Fidelity Investments has notified 77,099 people that their personal information was stolen in an August data breach. … This article has been indexed from The Register – Security Read…
Fore-get about privacy, golf tech biz leaves 32M data records on the fairway
Researcher spots 110 TB of sensitive info sitting in unprotected database Nearly 32 million records belonging to users of tech from Trackman were left exposed to the internet, sitting in a non-password protected database, for an undetermined amount of time,…
Secure your AI initiatives
Unlock the power of generative AI with AWS Webinar Generative AI (GenAI) has quickly transitioned from an emerging concept to a core driver of innovation across lots of different industries.… This article has been indexed from The Register – Security…
CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame
Usual three-week window to address significant risks to federal agencies applies The US Cybersecurity and Infrastructure Security Agency (CISA) says vulnerabilities in Fortinet and Ivanti products are now being exploited, earning them places in its Known Exploited Vulnerabilities (KEV) catalog.……
Mozilla patches critical Firefox vuln that attackers are already exploiting
Firefixed: It’s maintenance time for low-complexity, high-impact security flaw It’s patch time for Firefox fans as Mozilla issues a security advisory for a critical code execution vulnerability in the browser.… This article has been indexed from The Register – Security…
How to enable secure use of AI
Let the SANS AI Toolkit promote secure and responsible use of AI tools in the workplace Sponsored Post It’s Cybersecurity Awareness Month again this October – a timely reminder for public and private sector organisations to work together and raise…
How should CISOs respond to the rise of GenAI?
Apply comprehensive security with access control, secure coding, infrastructure protection and AI governance Partner Content As generative AI (GenAI) becomes increasingly integrated into the corporate world, it is transforming everyday operations across various industries.… This article has been indexed from…
Dutch cops reveal takedown of ‘world’s largest dark web market’
Two arrested after allegedly trying to make off with their ill-gotten gains The alleged administrators of the infamous Bohemia and Cannabia dark web marketplaces have been arrested after apparently shuttering the sites and trying to flee with their earnings.… This…
Internet Archive leaks user info and succumbs to DDoS
31 million users’ usernames, email addresses and salted-encrypted passwords are out there The Internet Archive had a bad day on the infosec front, after being DDoSed and exposing user data.… This article has been indexed from The Register – Security…
Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware
USB sticks help, but it’s unclear how tools that suck malware from them are delivered A cyberespionage APT crew named GoldenJackal hacked air-gapped PCs belonging to government and diplomatic entities at least twice using two sets of custom malware, according…
Smart TVs are spying on everyone
Regulators know this is a nightmare and have done little to stop it. Privacy advocacy group wants that to change Smart TVs are watching their viewers and harvesting their data to benefit brokers using the same ad technology that denies…
Marriott settles for a piddly $52M after series of breaches affecting millions
Intruders stayed for free on the network between 2014 and 2020 Marriott has agreed to pay a $52 million penalty and develop a comprehensive infosec program following a series of major data breaches between 2014 and 2020 that affected more…
National Public Data files for bankruptcy, admits ‘hundreds of millions’ potentially affected
One-man-band faces a mountain of lawsuits but has few assets The Florida business behind data brokerage National Public Data has filed for bankruptcy, admitting “hundreds of millions” of people were potentially affected in one of the largest information leaks of…
Microsoft cleans up hot mess of Patch Tuesday preview
Go forth and install your important security fixes Microsoft says that the problems with the Windows 11 Patch Tuesday preview have now been resolved.… This article has been indexed from The Register – Security Read the original article: Microsoft cleans…
Ransomware gang Trinity joins pile of scumbags targeting healthcare
As if hospitals and clinics didn’t have enough to worry about At least one US healthcare provider has been infected by Trinity, an emerging cybercrime gang with eponymous ransomware that uses double extortion and other “sophisticated” tactics that make it…
Microsoft issues 117 patches – some for flaws already under attack
Plus: SAP re-patches a failed patch for critical-rated flaw Patch Tuesday It’s the second Tuesday of the month, which means Patch Tuesday, bringing with it fixes for numerous flaws, bugs and vulnerabilities in major software. And this one is a…
Qualcomm urges device makers to push patches after ‘targeted’ exploitation
Given Amnesty’s involvement, it’s a safe bet spyware is in play Qualcomm has issued 20 patches for its chipsets’ firmware, including one Digital Signal Processor (DSP) software flaw that has been exploited in the wild.… This article has been indexed…
Using iPhone Mirroring at work? You might have just overshared to your boss
What does IT see but a dating app on your wee little screen If you’re using iPhone Mirroring at work: it’s time to stop, lest you give your employer’s IT department the capability to snoop through your dating apps, photos,…
Happy birthday, Putin – you’ve been pwned
Pro-Ukraine hackers claim credit for Russian state broadcasting shutdown Ukrainian hackers shut down Russian state news agency VGTRK’s online broadcasting and streaming services on Monday – president Vladimir Putin’s 72nd birthday – as Kremlin officials vowed to bring those responsible…