Recent attacks on healthcare thrust infosec agency into alert mode CISA is calling on the software industry to stamp out directory traversal vulnerabilities following recent high-profile exploits of the 20-year-old class of bugs.… This article has been indexed from The…
Tag: The Register – Security
Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks
ALSO: Microsoft promises to git gud on cybersecurity; unqualified attackers are targeting your water systems, and more infosec in brief It was just around a year ago that a spate of allegedly Russian-orchestrated cyberattacks hit government agencies in Germany, and…
End-to-end encryption may be the bane of cops, but they can’t close that Pandora’s Box
Internet Society’s Robin Wilton tells us the war on privacy won’t be won by the plod interview Police can complain all they like about strong end-to-end encryption making their jobs harder, but it doesn’t matter because the technology is here…
Dating apps kiss’n’tell all sorts of sensitive personal info
Privacy Not Included label slapped on 22 of 25 top lonely-hearts corners Dating apps ask people to disclose all kinds of personal information in the hope of them finding love, or at least a hook-up.… This article has been indexed…
Kaspersky hits back at claims its AI helped Russia develop military drone systems
Ready, set, sanctions? If volunteer intelligence gatherers are correct, the US may have a good reason to impose sanctions on Russian infosec firm Kaspersky, whose AI was allegedly used to help Russia produce drones for its war on Ukraine.… This…
Kaspersky hits back at claims it helped Russia develop military drone systems
Ready, set, sanctions? If volunteer intelligence gatherers are correct, the US may have a good reason to impose sanctions on Russian infosec firm Kaspersky, which has been accused of helping Russia design drones used in the invasion of Ukrainian.… This…
Kaspersky accused of helping Russia develop military drone systems
Ready, set, sanctions? If volunteer intelligence gatherers are correct, the US might have a good reason to impose sanctions on Russian infosec firm Kaspersky, which has been accused of helping Russia design drones used in the Ukrainian war.… This article…
It may take decade to shore up software supply chain security, says infosec CEO
Sure, we’re waking to the risk, but we gotta get outta bed, warns Endor Labs founder Varun Badhwar interview The more cybersecurity news you read, the more often you seem to see a familiar phrase: Software supply chain (SSC) vulnerabilities.…
Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters
Cops prevented crims from bilking victims out of more than €10m – but couldn’t stop crime against art A Europol-led operation dubbed “Pandora” has shut down a dozen phone scam centers, and arrested 21 suspects. The cops reckon the action…
Indonesia sneakily buys spyware, claims Amnesty International
A ‘murky’ web sees many purchases run through Singapore in a way that hides potential users Indonesia has acquired spyware and surveillance technologies through a “murky network” that extends into Israel, Greece, Singapore and Malaysia for equipment sourcing, according to…
Chinese government website security is often worryingly bad, say Chinese researchers
Bad configurations, insecure versions of jQuery, and crummy cookies are some of myriad problems Exclusive Five Chinese researchers examined the configurations of nearly 14,000 government websites across the country and found worrying lapses that could lead to malicious attacks, according…
Microsoft, Google do a victory lap around passkeys
Windows giant extends passwordless tech to everyone else Microsoft today said it will now let us common folk — not just commercial subscribers — sign into their Microsoft accounts and apps using passkeys with their face, fingerprint, or device PIN.… This…
Florida man gets 6 years behind bars for flogging fake Cisco kit to US military
Operation busted after dodgy devices ended up at Air Force Miami resident Onur Aksoy has been sentenced to six and a half years in prison for running a multi-million-dollar operation selling fake Cisco equipment that ended up in the US…
Patch up – 4 critical bugs in ArubaOS lead to remote code execution
Ten vulnerabilities in total for admins to apply Network admins are being urged to patch a bundle of critical vulnerabilities in ArubaOS that lead to remote code execution as a privileged user.… This article has been indexed from The Register…
Federal frenzy to patch gaping GitLab account takeover hole
Warning comes exactly a year after the vulnerability was introduced The US Cybersecurity and Infrastructure Security Agency (CISA) is forcing all federal agencies to patch a critical vulnerability in GitLab’s Community and Enterprise editions, confirming it is very much under…
Think tank: China’s tech giants refine and define Beijing’s propaganda push
Taking down TikTok won’t stop the CCP’s attempt to control global narratives Chinese tech companies that serve as important links in the world’s digital supply chains are helping Beijing to execute and refine its propaganda strategy, according to an Australian…
REvil ransomware scum sentenced to almost 14 years inside, ordered to pay $16 million
After extorting $700 million from thousands of victims A Ukrainian man has been sentenced to almost 14 years in prison and ordered to pay more than $16 million in restitution for his role in infecting thousands of victims with REvil…
Think tank: China’s tech brands refine and define Beijing’s propaganda push
Taking down TikTok won’t stop the CCP’s attempt to control global narratives Chinese tech companies that serve as important links in the world’s digital supply chains are helping Beijing to execute and refine its propaganda strategy, according to an Australian…
A million Australian pubgoers wake up to find personal info listed on leak site
Allegations fly regarding unpaid contractors and iffy infosec Over a million records describing Australians who visited local pubs and clubs have apparently been posted online.… This article has been indexed from The Register – Security Read the original article: A…
Dropbox dropped the ball on security, haemorrhaging customer and third-party info
Only from its digital doc-signing service, which is isolated from its cloudy storage Dropbox has revealed a major attack on its systems that saw customers’ personal information accessed by unknown and unauthorized entities.… This article has been indexed from The…