Learn how Britvic eliminates blind spots in Operational Technology systems Webinar Cyberattacks on industrial control systems are becoming more common, and there isn’t likely to be a let up any time soon.… This article has been indexed from The Register…
Tag: The Register – Security
Indian politicians say Apple warned them of state-sponsored attacks
Nobody knows which state, but India’s government never quite shrugged off claims it uses spyware Indian politicians and media figures have reported that Apple has warned them their accounts may be under attack by state-sponsored actors.… This article has been…
US officials close to persuading allies to not pay off ransomware crooks
‘We’re still in the final throes of getting every last member to sign’ Top White House officials are working to secure an agreement between almost 50 countries to not pay ransom demands to cybercriminals as the international Counter Ransomware Initiative…
‘Mass exploitation’ of Citrix Bleed underway as ransomware crews pile in
At least two extortion gangs abusing CVE-2023-4966, we’re told Citrix Bleed, the critical information-disclosure bug that affects NetScaler ADC and NetScaler Gateway, is now under “mass exploitation,” as thousands of Citrix NetScaler instances remain vulnerable, according to security teams.… This…
Now Russians accused of pwning JFK taxi system to sell top spots to cabbies
US unlikely to get a bite of them at this rate, though For a period of two years between September 2019 and September 2021, two Americans and two Russians allegedly compromising the taxi dispatch system at John F. Kennedy International…
Ace holed: Hardware store empire felled by cyberattack
US outfit scrambles to repair operations, restore processing of online orders Ace Hardware appears to have been the latest organization to succumb to a cyberattack, judging by its website and a message from CEO John Venhuizen.… This article has been…
Finance orgs have 30 days to confess cyber sins under incoming FTC rules
Follows similar efforts from the SEC and DHS in recent months The US has approved mandatory data breach reporting requirements that impose a 30-day deadline for non-banking financial organizations to report incidents.… This article has been indexed from The Register…
Cybersecurity snafu sends British Library back to the Dark Ages
Internet, phone lines, websites, and more went down on Saturday morning The British Library has confirmed to The Register that a “cyber incident” is the cause of a “major” multi-day IT outage.… This article has been indexed from The Register…
UK policing minister urges doubling down on face-scanning tech
‘No question’ it will solve more crimes, Tory MP claims A UK minister for policing has called for forces to double their use of algorithmic-assisted facial recognition in a bid to snare more criminals.… This article has been indexed from…
Meta’s ad-free scheme dares you to buy your privacy back, one euro at a time
If you’re in the EU, EEA, or Switzerland From November, it will be possible to pay Meta to stop shoveling ads in your Instagram or Facebook feeds and slurping your data for marketing purposes so long as you live in…
Stop what you’re doing and patch this critical Confluence flaw, warns Atlassian
Risk of ‘significant data loss’ for on-prem customers Atlassian has told customers they “must take immediate action” to address a newly discovered flaw in its Confluence collaboration tool.… This article has been indexed from The Register – Security Read the…
Florida man jailed after draining $1M from victims in crypto SIM swap attacks
Not old enough to legally buy a beer, old enough for a 30-month term A 20-year-old Florida man has been sentenced to 30 months behind bars for his role in a SIM-swapping ring that stole nearly $1 million in cryptocurrency…
Unpatched NGINX ingress controller bugs can be abused to steal Kubernetes cluster secrets
Just tricks, no treats with these 3 vulns Three unpatched high-severity bugs in the NGINX ingress controller can be abused by miscreants to steal credentials and other secrets from Kubernetes clusters. … This article has been indexed from The Register –…
Cryptojackers steal AWS credentials from GitHub in 5 minutes
Researchers just scratching surface of their understanding of campaign dating back to 2020 Security researchers have uncovered a multi-year cryptojacking campaign they claim autonomously clones GitHub repositories and steals their exposed AWS credentials.… This article has been indexed from The…
Stanford schooled in cybersecurity after Akira claims ransomware attack
This marks the third criminal intrusion at the institution in as many years Stanford University has confirmed it is “investigating a cybersecurity incident” after an attack last week by the Akira ransomware group.… This article has been indexed from The…
LockBit alleges it boarded Boeing, stole ‘sensitive data’
ALSO: CISA begs for a consistent budget, Las Vegas school breach; Nigeria arrests six cyber princes, the week’s critical vulnerabilities Security In Brief Notorious ransomware gang LockBit has reportedly exfiltrated “a tremendous amount of sensitive data from aerospace outfit Boeing.……
Apple Private Wi-Fi hasn’t worked for the past three years
Not exactly the MAC daddy Three years after Apple introduced a menu setting called Private Wi-Fi Address, a way to spoof network identifiers called MAC addresses, the privacy protection may finally work as advertised, thanks to a software fix.… This…
F5 hurriedly squashes BIG-IP remote code execution bug
Fixes came earlier than scheduled as vulnerability became known to outsiders F5 has issued a fix for a remote code execution (RCE) bug in its BIG-IP suite carrying a near-maximum severity score.… This article has been indexed from The Register…
Microsoft unveils shady shenanigans of Octo Tempest and their cyber-trickery toolkit
Gang thought to be behind attack on MGM Resorts has a skillset larger than most cybercrime groups in existence Microsoft’s latest report on “one of the most dangerous financial criminal groups” operating offers security pros an abundance of threat intelligence…
King Charles III signs off on UK Online Safety Act, with unenforceable spying clause
It’s now up to Ofcom to sort out this messy legislation With the assent of King Charles, the United Kingdom’s Online Safety Act has become law, one that the British government says will “make the UK the safest place in…