Background check biz accused of negligence A lawsuit has accused a Florida data broker of carelessly failing to secure billions of records of people’s private information, which was subsequently stolen from the biz and sold on an online criminal marketplace.……
Tag: The Register – Security
Your copilot for improved cyber protection
Watch this video to learn how Palo Alto Networks is using GenAI to automate and simplify cybersecurity Sponsored Post Cyber security is complex right, particularly when you’re tyring to monitor and configure multiple tools across a host of different on-…
Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets
Malware logs users’ keystrokes, pilfers credentials, exfiltrates data Criminals are preying on Windows users yet again, this time in an effort to hit them with a keylogger that can also steal credentials and take screenshots.… This article has been indexed…
CrowdStrike unhappy about Delta’s ‘litigation threat,’ claims airline refused ‘free on-site help’
Vendor plans to aggressively defend its case before listing catalog of shortcomings at the airline CrowdStrike says it is “highly disappointed” and rejects the claims made by Delta and its lawyers that the vendor exhibited gross negligence in the events…
China starts testing national cyber-ID before consultation on the idea closes
Eighty-one apps signed up to pilot facial recognition and real name ID system Chinese app developers have signed up to beta test a national cyberspace ID system that will use facial recognition technology and the real names of users, according…
Google gamed into advertising a malicious version of Authenticator
Plus: CISA’s AI hire; and Canuck SIM swappers busted Infosec in brief Scammers have been using Google’s own ad system to fool people into downloading a borked copy of the Chocolate Factory’s Authenticator software.… This article has been indexed from…
DARPA suggests turning old C code automatically into Rust – using AI, of course
Now that’s a TRACTOR pull request To accelerate the transition to memory safe programming languages, the US Defense Advanced Research Projects Agency (DARPA) is driving the development of TRACTOR, a programmatic code conversion vehicle.… This article has been indexed from…
Israeli hacktivist group brags it took down Iran’s internet
WeRedEvils alleges successful attack on infrastructure, including data theft Israel-based hacktivists are taking credit for an ongoing internet outage in Iran.… This article has been indexed from The Register – Security Read the original article: Israeli hacktivist group brags it…
Respect your data, and protect it
Hear how AI runtime security secures applications in the complete journey from design to build to run Sponsored Post Ensuring access to mission critical, AI-enabled applications is important for modern businesses keen on boosting employee productivity and transforming customer operations.…
Fortune 50 biz coughed up record-breaking $75M ransom to halt leak of stolen data
They say crime doesn’t pay. They’re right – it’s the victims doing the paying An unnamed Fortune 50 corporation paid a stonking $75 million to a ransomware gang to stop it leaking terabytes of stolen data.… This article has been…
UK plans to revamp national cyber defense tools are already in motion
Work aims to build on the success of NCSC’s 2016 initiative – and private sector will play a part The UK’s National Cyber Security Centre (NCSC) says it’s in the planning stages of bringing a new suite of services to…
UK crimebusters shut down global call-spoofing outfit that claimed 170K-plus victims
Suspected devs behind Russian Coms cuffed – now to find the users of the nastyware The UK’s National Crime Agency (NCA) has shut down an outfit called Russian Coms – a call-spoofing service believed to have swindled hundreds of thousands…
Japan mandates app to ensure national ID cards aren’t forged
First delays, then data leaks – now fraud detection needed at point of use The Japanese government has released details of of an app that verifies the legitimacy of its troubled My Number Card – a national identity document.… This…
India contemplates compulsory dynamic 2FA for digital payments
SMS OTPs are overused, so bring on the tokens and biometrics India’s central bank on Wednesday proposed a requirement for dynamically generated second authentication factors for most digital payments.… This article has been indexed from The Register – Security Read…
US sends cybercriminals back to Russia in prisoner swap that freed WSJ journo, others
Techno-crooks greeted by grinning Putin after landing At least two Russian cybercriminals are among those being returned to their motherland as part of a multinational prisoner exchange deal announced Thursday.… This article has been indexed from The Register – Security…
Too late now for canary updates, says pension fund suing CrowdStrike
That horse has not just bolted, it’s trampled all over kernel space CrowdStrike, after suggesting canary testing as a way to ensure it avoids future blunders leading to global computer outages, has been sued in federal court by investors for…
How to counter adversarial AI
Using Precision AI to stop cyber threats in real time Sponsored Hackers and cyber criminals are busy finding new ways of using AI to launch attacks on businesses and organisations often unprepared to deal with the speed, scale and sophistication…
FBI, CISA remind US voters that DDoS attacks can’t touch election systems
PSA comes amid multiple IT services crises in recent days US law enforcement and cybersecurity agencies are reminding the public that the country’s voting systems will remain unaffected by distributed denial of service (DDoS) attacks as the next presidential election…
Mozilla follows Google in losing trust in Entrust’s TLS certificates
Compliance failures and unsatisfactory responses mount from the long-time certificate authority Mozilla is following in Google Chrome’s footsteps in officially distrusting Entrust as a root certificate authority (CA) following what it says was a protracted period of compliance failures.… This…
Germany names China as source of attack on government geospatial agency
Meanwhile, US apparently considers further AI hardware sanctions Germany’s government has named China-controlled actors as the perpetrators of a 2021 cyber attack on the Federal Office of Cartography and Geodesy (BKG) – the official mapping agency.… This article has been…