White hat bounty looks more like a beg bounty The founder of the Poloniex has offered to pay off thieves who drained an estimated $120 million of user funds from the cryptocurrency exchange in a raid on Friday.… This article…
Tag: The Register – Security
Strangely enough, no one wants to buy a ransomware group that has cops’ attention
Ransomed.vc shuts after 20% discount fails to entice bids Short-lived ransomware outfit Ransomed.vc claims to have shut down for good after a number of suspected arrests.… This article has been indexed from The Register – Security Read the original article:…
ICBC hit by ransomware impacting global trades
CitrixBleed patch has been available for around a month China’s largest bank, ICBC, was hit by ransomware that resulted in disruption of financial services (FS) systems on Thursday Beijing time, according to a notice on its website.… This article has…
Downfall fallout: Intel knew AVX chips were insecure and did nothing, lawsuit claims
Billions of data-leaking processors sold despite warnings and patch just made them slower, punters complain Intel has been sued by a handful of PC buyers who claim the x86 goliath failed to act when informed five years ago about faulty…
SolarWinds says SEC sucks: Watchdog ‘lacks competence’ to regulate cybersecurity
IT software slinger publishes fierce response to lawsuit brought last month SolarWinds has come out guns blazing to defend itself following the US Securities and Exchange Commission’s announcement that it will be suing both the IT software maker and its…
SolarWinds: SEC ‘lacks the competence’ to regulate cybersecurity
Company publishes fierce response to lawsuit brought last month SolarWinds has come out guns blazing to defend itself following the Securities and Exchange Commission’s announcement that it will be suing both the company and its CISO over the 2020 SUNBURST…
MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts
Second novel zero-day exploited by Lace Tempest this year offers notable demonstration of skill, especially for a ransomware affiliate The cybercriminals behind the rampant MOVEit exploits from earlier this year are making use a zero-day vulnerability in on-prem instances of…
Russia’s Sandworm – not just missile strikes – to blame for Ukrainian power blackouts
Online attack coincided with major military action, Mandiant says Blackouts in Ukraine last year were not just caused by missile strikes on the nation but also by a seemingly coordinated cyberattack on one of its power plants. That’s according to…
What to do with a cloud intrusion toolkit in 2023? Slap a chat assistant on it, duh
Don’t worry, this half-baked Python script is for educational purposes onl-hahaha Infosec bods have detailed an underground cybersecurity tool dubbed Predator AI that not only can be used to compromise poorly secured cloud services and web apps, but has an…
Microsoft, Meta detail plans to fight election disinformation in 2024
Strategies differ, though both have gaps that could hurt efficacy Microsoft and Meta have very different initiatives to combat misinformation in 2024, slated to be a busy election year all over the globe, but whether they’ll be effective is another…
Atlassian cranks up the threat meter to max for Confluence authorization flaw
Attackers secure admin rights after vendor said they could only steal data Atlassian reassessed the severity rating of the recent improper authorization vulnerability in Confluence Data Center and Server, raising the CVSS score from 9.1 to a maximum of 10.……
Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach
It’s the latest in a string of unusual wallet-draining attacks that began in April The Monero Project is admitting that one of its wallets was drained by an unknown source in September, losing the equivalent of around $437,000 at today’s…
Preventing data theft with ADX technology
Ensuring data stays secure even after cyberattack infiltration Webinar Daily incursions are underway with the aim of removing every bit of data that you’ve got – the cyber criminals’ aim is to break in and get out again laden with…
Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections
EFF warns incoming rules may return web ‘to the dark ages of 2011’ Lawmakers in Europe are expected to adopt digital identity rules that civil society groups say will make the internet less secure and open up citizens to online…
Microsoft likens MFA to 1960s seatbelts, buckles admins in yet keeps eject button
Admins have 90 days to opt out before MFA is deployed automatically Microsoft is introducing three Conditional Access policies for sysadmins as it continues to promote the implementation of multi-factor authentication (MFA) in organizations.… This article has been indexed from…
UK may demand tech world tell it about upcoming security features
Campaigners say proposals to reform laws are ‘dangerous’ and an attack on safety The UK government has set in train plans to introduce legislation requiring tech companies to let it know when they plan to introduce new security technologies and…
UK may demand tech world tell it about upcoming security features so it can ‘disable them’
Campaigners say proposals to reform laws are ‘dangerous’ and an attack on safety The UK government has set in train plans to introduce legislation requiring tech companies to let it know when they plan to introduce new security technologies and…
Fresh find shines new light on North Korea’s latest macOS malware
Months of work reveals how this tricky malware family targets… the financial services sector A brand-new macOS malware strain from North Korean state-sponsored hackers has been spotted in the wild.… This article has been indexed from The Register – Security…
Woman jailed after Rentahitman.com assassin turned out to be – surprise – FBI
18 months in the slammer no laughing matter, but the rest… maybe A 34-year-old woman has been jailed for 18 months after trying to use Rentahitman.com – no, really – to pay a contract killer to eliminate a rival she…
ICE faces heat after agents install thousands of personal apps, VPNs on official phones
Audit: Craptastic security could potentially put govt info in hands of enemies America’s immigration cops have pushed back against an official probe that concluded their lax mobile device security potentially put sensitive government information at risk of being stolen by…