How to protect organizations from Business Email Compromise Webinar It is a stratospheric number of emails pinging around the globe and the sheer volume offers a seductively lucrative phishing opportunity to the legion of bad actors out there.… This article…
Tag: The Register – Security
Apple races to patch the latest zero-day iPhone exploit
No user interaction needed for this one as Pegasus turns up via iMessage Apple devices are again under attack, with a zero-click, zero-day vulnerability used to deliver Pegasus spyware to iPhones discovered in the wild.… This article has been indexed…
Microsoft, recently busted by Beijing, thinks it’s across China’s ever-changing cyber-offensive
Sometimes using AI to make hilariously wrong images that still drive social media engagement Microsoft, which earlier this week admitted not being able to detect a Chinese attack on its own infrastructure, has published a report [PDF] titled “Digital threats…
Russian infosec boss gets nine years for $100M insider-trading caper using stolen data
Confidential figures for Tesla, Snap, Roku, Avnet, others swiped and used to rack up millions in ill-gotten gains Vladislav Klyushin, the Russian owner of security penetration testing firm M-13, was jailed for nine years in the US on Thursday, for…
US, UK sanction more Russians linked to Trickbot
Top admin, HR managers, devs go on transatlantic deny-list The US and UK governments named and sanctioned 11 Russians said to be connected to the notorious Trickbot cybercrime crew this week.… This article has been indexed from The Register –…
Lawsuit claims Tesla corp data security is far less advanced than its cars
Sueball alleges company at fault after employee info leaked, including Musk’s An ex-Tesla staffer has filed a proposed class action lawsuit that blames poor access control at the carmaker for a data leak, weeks after Tesla itself sued the alleged…
If you like to play along with the illusion of privacy, smart devices are a dumb idea
You’re just giving manufacturers carte blanche to profit off personal data Depressingly predictable research from Which? serves as another reminder, if one was needed, that furnishing your home with internet-connected “smart” devices could be a dumb idea if you’d rather…
UK drops ‘spy clause’ for scanning encrypted messages, admits it’s not ‘feasible’
But don’t celebrate yet … it has simply kicked the online safety can down the road, Westminster style Comment Sanity appears to have prevailed in the debate over the UK Online Safety bill after the government agreed to ditch proposals…
China reportedly bans iPhones from more government offices
So what? Smartphones are routinely restricted in, or excluded from, sensitive locations Analysis Chinese authorities have reportedly banned Apple’s iPhones from some government offices.… This article has been indexed from The Register – Security Read the original article: China reportedly…
Microsoft: China stole secret key that unlocked US govt email from crash debug dump
Mistakes were made, lessons learned, stuff now fixed, says Windows maker Remember that internal super-secret Microsoft security key that China stole and used to break into US government email accounts back in July? … This article has been indexed from The…
Guy who ran Bitcoins4Less tells Feds he had less than zero laundering protections
What? Yogurt Monster isn’t really a legitimate customer’s name?! A California man has admitted he failed to bake anti-money laundering protections into his cryptocurrency exchange, thus allowing scammers and drug traffickers to launder millions of dollars through the service.… This…
Coffee Meets Bagel outage caused by cybercriminals deleting data and files
Did you potentially miss the love match of your life in week-long blackout? Nope, nobody could access it If you got snubbed by the object of your affections on dating app Coffee Meets Bagel (CMB) in late August, don’t feel…
Meatbag mishaps more menacing than malware? CISOs think so
Company boards, on the other hand, aren’t letting cybersecurity disturb their sleep as much Chief information security officers (or CISOs) see human error as the most significant risk to data protection compared to other UK board directors.… This article has…
You patched yet? Years-old Microsoft security holes still hot targets for cyber-crooks
We’re number one! We’re number one! We’re… It’s generally accepted that security flaws in Microsoft’s products are a top magnet for crooks and fraudsters: its sprawling empire of hardware and software is a target-rich ecosystem in that there is a…
Big Tech has failed to police Russian disinformation, EC study concludes
In Putin’s Russia, the planet hacks you The power of the EU’s Digital Services Act (DSA) to actually police the world’s very large online platforms (VLOPs) has been tested in a new study focused on Russian social media disinformation.… This…
Freecycle gives users the gift of a data breach notice
Change your passwords. And maybe give the recycling a miss this time Freecycle, the charity aimed at recycling detritus that would otherwise be headed for landfill, has become the latest organization to suffer at the hands of cyber attackers and…
Northern Ireland top cop quits in wake of data breach and disciplinary controversy
Simon Byrne faced backlash over FoI blunder, plus claims officers were ‘punished’ to appease Sinn Féin Northern Ireland’s police chief, Simon Byrne, resigned last night after an emergency meeting of the Policing Board amid discontent in the rank and file…
Attackers accessed UK military data through high-security fencing firm’s Windows 7 rig
Irony, not barbed wire, cuts the deepest The risk of running obsolete code and hardware was highlighted after attackers exfiltrated data from a UK supplier of high-security fencing for military bases. The initial entry point? A Windows 7 PC.… This…
Tsunami watch
Mitigating the threat of bot-driven DDoS attacks Webinar It’s sometimes easy to be lulled into a sense of false security and imagine that your organization or business will not become a target of highly professional cybercriminals, hacktivists and even nation-state…
Microsoft calls time on ancient TLS in Windows, breaking own stuff in the process
Hold onto your SQL Server, enterprise admins Microsoft has reminded users that TLS 1.0 and 1.1 will soon be disabled by default in Windows.… This article has been indexed from The Register – Security Read the original article: Microsoft calls…