Was a 2009 directive on interoperability to blame? Did the EU force Microsoft to let third parties like CrowdStrike run riot in the Windows kernel as a result of a 2009 undertaking? This is the implication being peddled by the…
Tag: The Register – Security
Two Russians sanctioned over cyberattacks on US critical infrastructure
Supposed hacktivist efforts previously linked to the Kremlin’s GRU Flying under the radar on Clownstrike day last week, two members of the Cyber Army of Russia Reborn (CARR) hacktivist crew are the latest additions to the US sanctions list.… This…
Cellebrite got into Trump shooter’s Samsung device in just 40 minutes
Also: Second-string Russian hackers sanctioned; Senators demand answers from Snowflake, and more Infosec in brief Unable to access the Samsung smartphone of the deceased Trump shooter for clues, the FBI turned to a familiar – if controversial – source to…
CrowdStrike’s Falcon Sensor also linked to Linux kernel panics and crashes
Rapid restore tool being tested as Microsoft estimates 8.5 million machines went down CrowdStrike’s now-infamous Falcon Sensor software, which last week led to widespread outages of Windows-powered computers, has also caused crashes of Linux machines.… This article has been indexed…
UK cops arrest teen suspect in MGM Resorts cyberattack probe
17-year-old cuffed as FBI says it will ‘relentlessly pursue’ miscreants around the globe Cops in the UK have arrested a suspected member of the notorious Scattered Spider crime gang, which is accused of crippling MGM Resorts in Las Vegas with…
UK cops arrest teen suspect in MGM cyberattack probe
17-year-old cuffed as FBI says it will ‘relentlessly pursue’ miscreants around the globe Cops in the UK have arrested a suspected member of the notorious Scattered Spider crime gang, which is accused of crippling MGM Resorts in Las Vegas with…
CrowdStrike file update bricks Windows machines around the world
Falcon Sensor putting hosts into deathloop – but there’s a workaround Updated An update to a product from infosec vendor CrowdStrike is bricking computers running Windows globally.… This article has been indexed from The Register – Security Read the original…
CrowdStrike Windows patchpocalypse could take weeks to fix, IT admins fear
Our vultures gather to review this very freaky Friday Kettle If you’re an IT administrator with Windows boxes on your network, Friday can’t have been a lot of fun. What’s likely millions of systems were or still are stuck in…
CrowdStrike code update bricking Windows machines around the world
Falcon Sensor putting hosts into deathloop Breaking An update to a product from infosec vendor CrowdStrike is bricking computers running Windows.… This article has been indexed from The Register – Security Read the original article: CrowdStrike code update bricking Windows…
North Korea likely behind takedown of Indian crypto exchange WazirX
Firm halts trades after seeing $230 million disappear Indian crypto exchange WazirX has revealed it lost virtual assets valued at over $230 million after a cyber attack that has since been linked to North Korea.… This article has been indexed…
Beijing’s attack gang Volt Typhoon was a false flag inside job conspiracy: China
Run by the NSA, the FBI, and Five Eyes nations, who fooled infosec researchers, apparently China has asserted that the Volt Typhoon gang, which Five Eyes nations accuse of being a Beijing-backed attacker that targets critical infrastructure, was in fact…
Judge mostly drags SEC’s lawsuit against SolarWinds into the recycling bin
Russia-invaded software biz ‘grateful for the support we have received’ A judge has mostly thrown out a lawsuit brought by America’s financial watchdog that accused SolarWinds and its chief infosec officer of misleading investors about its computer security practices and…
Kaspersky challenges US government to put up or shut up about Kremlin ties
Stick an independent probe in our software, you won’t find any Putin.DLL backdoor Kaspersky has hit back after the US government banned its products – by proposing an independent verification that its software is above board and not backdoored by…
Russia’s FIN7 is peddling its EDR-nerfing malware to ransomware gangs
Major vendors’ products scuppered by novel techniques Prolific Russian cybercrime syndicate FIN7 is using various pseudonyms to sell its custom security solution-disabling malware to different ransomware gangs.… This article has been indexed from The Register – Security Read the original…
Maximum-severity Cisco vulnerability allows attackers to change admin passwords
You’re going to want to patch this one Cisco just dropped a patch for a maximum-severity vulnerability that allows attackers to change the password of any user, including admins.… This article has been indexed from The Register – Security Read…
Firms skip security reviews of major app updates about half the time
Complicated, costly, time-consuming – pick three Cyber security workers only review major updates to software applications only 54 percent of the time, according to a poll of tech managers.… This article has been indexed from The Register – Security Read…
Release the hounds! Securing datacenters may soon need sniffer dogs
Nothing else can detect attackers with implants designed to foil physical security Sniffer dogs may soon become a useful means of improving physical security in datacenters, as increasing numbers of people are adopting implants like NFC chips that have the…
Merged Exabeam and LogRhythm cut jobs, face lawsuit
Unconfirmed reports suggest 30 percent reduction in headcount Exabeam and LogRhythm – a pair of cyber security firms – finalized their merger on Wednesday, an occasion The Register understands was marked by swift job cuts and shareholder action to investigate…
Kaspersky gives US customers six months of free updates as a parting gift
So long, farewell, do svidaniya, goodbye Embattled Russian infosec shop Kaspersky is giving US customers six months of security updates for free as a parting gift as Uncle Sam kicks the antivirus maker out of the American market.… This article…
Ransomware continues to pile on costs for critical infrastructure victims
Millions more spent without any improvement in recovery times Costs associated with ransomware attacks on critical national infrastructure (CNI) organizations skyrocketed in the past year.… This article has been indexed from The Register – Security Read the original article: Ransomware…