Theft happened in October, only now are details coming to light Sav-Rx has started notifying about 2.8 million people that their personal information was likely stolen during an IT intrusion that happened more than seven months ago.… This article has…
Tag: The Register – Security
BreachForums returns just weeks after FBI-led takedown
Website whack-a-mole getting worse BreachForums is back online just weeks after the notorious dark-web marketplace for stolen data was seized by law enforcement.… This article has been indexed from The Register – Security Read the original article: BreachForums returns just…
BreachForums returns, just weeks after FBI-led takedown
Website whack-a-mole getting worse BreachForums is back online just weeks after the notorious ransomware leak site was seized by law enforcement.… This article has been indexed from The Register – Security Read the original article: BreachForums returns, just weeks after…
SpiderOak One customers threaten to jump ship following datacenter upgrade
One tricky cluster is causing outrage among longstanding customers Over a month after an April datacenter upgrade coincided with problems with some of its customers’ backups, secure storage biz SpiderOak still isn’t fully operational, and some angry users say they’re…
Auction house Christie’s confirms criminals stole some client data
Centuries-old institution dodges questions on how it happened as ransomware gang claims credit International auctioning giant Christie’s has confirmed data was stolen during an online attack after a top-three ransomware group claimed credit.… This article has been indexed from The…
Take two APIs and call me in the morning: How healthcare research can cure cyber crime
In evolving smarter security, open source is the missing link Opinion Some ideas work better than others. Take DARPA, the US Defense Advanced Research Projects Agency. Launched by US President Dwight Eisenhower in 1957 response to Sputnik, its job is…
How’s Uncle Sam getting on with Biden’s AI exec order? Pretty good, we’re told
Former Pentagon deputy CIO Rob Carey tells us guardrails should steer Feds away from bad ML Interview President Biden’s October executive order encouraging the safe use of AI included a ton of requirements for federal government agencies that are developing…
Bayer and 12 other major drug companies caught up in Cencora data loss
PLUS: US water systems fail at cyber security More than a dozen big pharmaceutical suppliers have begun notifying individuals that their data was stolen when US drug wholesaler Cencora was breached in February.… This article has been indexed from The…
Man behind deepfake Biden robocall indicted on felony charges, faces $6M fine
FCC wants to hit this political genius with first-of-a-kind punishment The political consultant who admitted paying $150 to create a deepfake anti-Biden robocall has been indicted on charges of felony voter suppression and misdemeanor impersonation of a candidate.… This article…
Best Buy and Geek Squad were most impersonated orgs by scammers in 2023
But criminals posing as Microsoft workers scored the most ill-gotten gains The Federal Trade Commission (FTC) has shared data on the most impersonated companies in 2023, which include Best Buy, Amazon, and PayPal in the top three.… This article has…
Suspected supply chain attack backdoors courtroom recording software
An open and shut case, but the perps remain at large – whoever they are Justice is served… or should that be saved now that audio-visual software deployed in more than 10,000 courtrooms is once again secure after researchers uncovered…
Three-year-old Apache Flink flaw under active attack
We know IT admins have busy schedules but c’mon An improper access control bug in Apache Flink that was fixed in January 2021 has been added to the US government’s Known Exploited Vulnerabilities Catalog, meaning criminals are right now abusing…
Three-year-old Apache Flink flaw now under active attack
We know IT admins have busy schedules but c’mon An improper access control bug in Apache Flink that was fixed in January 2021 has been added to the US government’s Known Exploited Vulnerabilities Catalog, meaning criminals are right now abusing…
Here’s yet more ransomware using BitLocker against Microsoft’s own users
ShrinkLocker throws steel and vaccine makers into the hurt locker Yet more ransomware is using Microsoft BitLocker to encrypt corporate files, steal the decryption key, and then extort a payment from victim organizations, according to Kaspersky.… This article has been…
Casino cyberattacks put a bullseye on Scattered Spider – and the FBI is closing in
Clock is ticking to it’s time for the handcuffs, we’re told Interview The cyberattacks against Las Vegas casinos over the summer put a big target on the backs of Scattered Spider, the suspected perps, according to Mandiant Consulting’s CTO Charles…
Google guru roasts useless phishing tests, calls for fire drill-style overhaul
Current approaches aren’t working and demonize security teams A Google security bigwig has had enough of federally mandated phishing tests, saying they make colleagues hate IT teams for no added benefit.… This article has been indexed from The Register –…
Veeam says critical flaw can’t be abused to trash backups
It’s still a rough one, so patch up Veeam says the recent critical vulnerability in its Backup Enterprise Manager (VBEM) can’t be used by cybercriminals to delete an organization’s backups.… This article has been indexed from The Register – Security…
70% of CISOs worry their org is at risk of a material cyber attack
Wait, why do you want this job again? Chief information security officers around the globe “are nervously looking over the horizon,” according to a survey of 1,600 CISOs that found more than two thirds (70 percent) worry their organization is…
UK data watchdog wants six figures from N Ireland cops after 2023 data leak
Massive discount applied to save cop shop’s helicopter budget Following a data leak that brought “tangible fear of threat to life”, the UK’s data protection watchdog says it intends to fine the Police Service of Northern Ireland (PSNI) £750,000 ($955,798).……
How Apple Wi-Fi Positioning System can be abused to track people around the globe
SpaceX is smart on this, Cupertino and GL.iNet not so much In-depth Academics have suggested that Apple’s Wi-Fi Positioning System (WPS) can be abused to create a global privacy nightmare.… This article has been indexed from The Register – Security…