Symantec suggests Black Basta crew beat Microsoft to the patch The Black Basta ransomware gang may have exploited a now-patched Windows privilege escalation bug as a zero-day, according to Symantec’s threat hunters.… This article has been indexed from The Register…
Tag: The Register – Security
White House report dishes deets on all 11 major government breaches from 2023
The MOVEit breach and ransomware weren’t kind to the Feds last year The number of cybersecurity incidents reported by US federal agencies rose 9.9 percent year-on-year (YoY) in 2023 to a total of 32,211, per a new White House report,…
China’s FortiGate attacks more extensive than first thought
Dutch intelligence says at least 20,000 firewalls pwned in just a few months The Netherlands’ cybersecurity agency (NCSC) says the previously reported attack on the country’s Ministry of Defense (MoD) was far more extensive than previously thought.… This article has…
Let’s kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows
Redmond splats dozens of bugs as does Adobe while Arm drivers and PHP under active attack Patch Tuesday Microsoft kicked off our summer season with a relatively light June Patch Tuesday, releasing updates for 49 CVE-tagged security flaws in its…
Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace
Secure storage company hasn’t spilled details on how they got in Pure Storage is the latest company to confirm it’s a victim of mounting Snowflake-related data breaches.… This article has been indexed from The Register – Security Read the original…
Cylance clarifies data breach details, except where the data came from
Customers, partners, operations remain uncompromised, BlackBerry says BlackBerry-owned cybersecurity shop Cylance says the data allegedly belonging to it and being sold on a crime forum doesn’t endanger customers, yet it won’t say where the information was stored originally.… This article…
UK and Canada’s data chiefs join forces to investigate 23andMe mega-breach
Three-pronged approach aims to uncover any malpractice at the Silicon Valley biotech biz The data protection watchdogs of the UK and Canada are teaming up to hunt down the facts behind last year’s 23andMe data breach.… This article has been…
Snowflake customers not using MFA are not unique – over 165 of them have been compromised
Mandiant warns criminal gang UNC5537, which may be friendly with Scattered Spider, is on the rampage An unknown financially motivated crime crew has swiped a “significant volume of records” from Snowflake customers’ databases using stolen credentials, according to Mandiant.… This…
Cyber attack flattens Japanese vid-sharing site Niconico and others
Total rebuild needed after four days off the air Japanese media conglomerate Kadokawa and several of its properties have been offline for four days after a major cyber attack.… This article has been indexed from The Register – Security Read…
Christie’s confirms RansomHub crooks stole data on 45K clients
A far cry from the half-million claim that crims originally boasted Auction house to the wealthy Christie’s says 45,798 people were affected by its recent cyberattack and resulting data theft.… This article has been indexed from The Register – Security…
Snowflake tells customers to enable MFA as investigations continue
Also, industry begs Uncle Sam for infosec reg harmony, dueling container-compromise campaigns, and crit vulns infosec in brief Cloud data analytics platform Snowflake said it is going to begin forcing customers to implement multi-factor authentication to prevent more intrusions. … This…
Two arrested in UK over fake cell tower-powered smishing campaign
Thousands of dodgy SMS messages bypassed network filters in UK-first case British police have arrested two individuals following an investigation into illegal homebrew phone masts used for SMS-based phishing campaigns.… This article has been indexed from The Register – Security…
Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief
Scott Small tells us gang’s ‘intent and capability’ should get the attention of CSOs Interview It might not be as big a name as BlackCat or LockBit, but the Akira ransomware is every bit as dangerous, says one cybersecurity researcher…
Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up
Lessons learned from the infosec chief convicted and punished for covering up theft of data from taxi app maker Interview Joe Sullivan – the now-former Uber chief security officer who was found guilty of covering-up a theft of data from…
‘New York Times source code’ leaks online via 4chan
Breaking breaking-news news A 4chan user claims to have leaked 270GB of internal New York Times data, including source code, via the notorious image board.… This article has been indexed from The Register – Security Read the original article: ‘New…
FCC takes some action against notorious BGP
How’s your RPKI-based security plan coming along? Feds want to know US broadband providers will soon have to provide proof to Uncle Sam that they are taking steps to prevent Border Gateway Protocol (BGP) hijacking and locking down internet routing…
Defiant Microsoft pushes ahead with controversial Recall – tho as an opt-in
Windows maker acknowledges ‘clear signal’ from everyone, then mostly ignores it Microsoft is not giving up on its controversial Windows Recall, though says it will give customers an option to opt in instead of having it on by default, and…
Frontier Communications: 750k people’s data stolen in April attack on systems
Company says just names and SSNs affected, watering down RansomHub’s claims Frontier Communications has confirmed more than 750,000 individuals were affected in an April cyberattack on its systems, according to a regulatory filing.… This article has been indexed from The…
Cisco fixes WebEx flaw that allowed government, military meetings to be spied on
Researchers were able to glean data from 10,000 meetings held by top Dutch gov officials Cisco squashed some bugs this week that allowed anyone to view WebEx meeting information and join them, potentially opening up security and privacy concerns for…
How to navigate NIS2 and secure your vulnerabilities
Meeting the challenges of managing risk for cyber-physical systems Webinar The risk of cyber attack hangs over every digital environment but cyber physical systems (CPS) tend to be more vulnerable – after all, they weren’t usually designed with security in…