No prizes for guessing the victims A Nebraska man will appear in court today to face charges related to allegations that he defrauded cloud service providers of more than $3.5 million in a long-running cryptojacking scheme.… This article has been…
Tag: The Register – Security
SIM swap crooks solicit T-Mobile US, Verizon staff via text to do their dirty work
No breach responsible for employee contact info getting out, says T-Mo T-Mobile US employees say they are being sent text messages that offer them cash to perform illegal SIM swaps for supposed criminals.… This article has been indexed from The…
Open sourcerers say suspected xz-style attacks continue to target maintainers
Social engineering patterns spotted across range of popular projects Open source groups are warning the community about a wave of ongoing attacks targeting project maintainers similar to those that led to the recent attempted backdooring of a core Linux library.……
Change Healthcare’s ransomware attack costs edge toward $1B so far
First glimpse at attack financials reveals huge pain UnitedHealth, parent company of ransomware-besieged Change Healthcare, says the total costs of tending to the February cyberattack for the first calendar quarter of 2024 currently stands at $872 million.… This article has…
Google location tracking deal could be derailed by politics
$62 million settlement plan challenged over payments to progressive nonprofits Google’s plan to pay $62 million to settle allegations that it tracked people even when their Location History setting was switched off may have to be renegotiated based on several…
CISA in a flap as Chirp smart door locks can be trivially unlocked remotely
Hard-coded credentials last thing you want in home security app Some smart locks controlled by Chirp Systems’ software can be remotely unlocked by strangers thanks to a critical security vulnerability.… This article has been indexed from The Register – Security…
Roku makes 2FA mandatory for all after nearly 600K accounts pwned
Streamer says access came via credential stuffing Streaming giant Roku is making 2FA mandatory after attackers accessed around 591,000 customer accounts earlier this year.… This article has been indexed from The Register – Security Read the original article: Roku makes…
Delinea Secret Server customers should apply latest patches
Attackers could nab an org’s most sensitive keys if left unaddressed Customers of Delinea’s Secret Server are being urged to upgrade their installations “immediately” after a researcher claimed a critical vulnerability could allow attackers to gain admin-level access.… This article…
US senator wants to put the brakes on Chinese EVs
Fears of low-cost invasion and data spies spark call for ban Electric vehicles may become a new front in America’s tech war with China after a US senator called for Washington DC to block Chinese-made EVs to protect domestic industries…
Identifying third-party risk
The prima facie case for real-time threat intelligence Webinar Cybercriminals are always on the hunt for new ways to breach your privacy, and busy supply chains often look like a good way to get in under the wire.… This article…
US House approves FISA renewal – warrantless surveillance and all
PLUS: Chinese chipmaker Nexperia attacked; A Microsoft-signed backdoor; CISA starts scanning your malware; and more Infosec in brief US Congress nearly killed a reauthorization of FISA Section 702 last week over concerns that it would continue to allow warrantless surveillance…
Zero-day exploited right now in Palo Alto Networks’ GlobalProtect gateways
Out of the PAN-OS and into the firewall, a Python backdoor this way comes Palo Alto Networks on Friday issued a critical alert for an under-attack vulnerability in the PAN-OS software used in its firewall-slash-VPN products.… This article has been…
Google One VPN axed for everyone but Pixel loyalists … for now
Another one bytes the dust In an incredibly rare move, Google is killing off one of its online services – this time, VPN for Google One.… This article has been indexed from The Register – Security Read the original article:…
Microsoft breach allowed Russian spies to steal emails from US government
Affected federal agencies must comb through mails, reset API keys and passwords The US Cybersecurity and Infrastructure Security Agency (CISA) warns that Russian spies who gained access to Microsoft’s email system were able to steal sensitive data, including authentication details…
French issue alerte rouge after local governments knocked offline by cyber attack
Embarrassing, as its officials are in the US to discuss Olympics cyber threats Several French municipal governments’ services have been knocked offline following a “large-scale cyber attack” on their shared servers.… This article has been indexed from The Register –…
Apple stops warning of ‘state-sponsored’ attacks, now alerts about ‘mercenary spyware’
Report claims India’s government, which is accused of using Pegasus at home, was displeased Apple has made a significant change to the wording of its threat notifications, opting not to attribute attacks to a specific source or perpetrator, but categorizing…
Space Force boss warns ‘the US will lose’ without help from Musk and Bezos
China, Russia have muscled up, and whoever wins up there wins down here The commander of the US Space Force (USSF) has warned that America risks losing its dominant position in space, and therefore on Earth too.… This article has…
96% of US hospital websites share visitor info with Meta, Google, data brokers
Could have been worse – last time researchers checked it was 98.6% Hospitals – despite being places where people implicitly expect to have their personal details kept private – frequently use tracking technologies on their websites to share user information…
Global taxi software vendor exposes details of nearly 300K across UK and Ireland
High-profile individuals including MPs said to be caught up in leak Exclusive Taxi software biz iCabbi recently fixed an issue that exposed the personal information of nearly 300,000 individuals via an unprotected database.… This article has been indexed from The…
It’s 2024 and Intel silicon is still haunted by data-spilling Spectre
Go, go InSpectre Gadget Intel CPU cores remain vulnerable to Spectre data-leaking attacks, say academics at VU Amsterdam.… This article has been indexed from The Register – Security Read the original article: It’s 2024 and Intel silicon is still haunted…
Rust rustles up fix for 10/10 critical command injection bug on Windows
BatBadBut hits Erlang, Go, Python, Ruby as well Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on Windows machines.… This…
X fixes URL blunder that could enable convincing social media phishing campaigns
Poorly implemented rule allowed miscreants to deceive users with trusted URLs Elon Musk’s X has apparently fixed an embarrassing issue implemented earlier in the week that royally bungled URLs on the social media platform formerly known as Twitter.… This article…
Turning the tide on third-party risk
Using threat intelligence to mitigate against security breaches Webinar There are some unhappy projections out there about the prevalence of third-party security breaches.… This article has been indexed from The Register – Security Read the original article: Turning the tide…
Chrome Enterprise Premium promises extra security – for a fee
Paying for browsers is no longer a memory from the 1990s Cloud Next Hoping to upsell freeloading corporate users of its Chrome browser, Google has announced Chrome Enterprise Premium – which comes with a dash of AI security sauce for…
Microsoft squashes SmartScreen security bypass bug exploited in the wild
Plus: Adobe, SAP, Fortinet, VMware, Cisco issue pressing updates Patch Tuesday Microsoft fixed 149 security flaws in its own products this week, and while Redmond acknowledged one of those vulnerabilities is being actively exploited, we’ve been told another hole is…
Got an unpatched LG ‘smart’ television? It could be watching you back
Four fatal flaws allow TV takeover A handful of bugs in LG smart TVs running WebOS could allow an attacker to bypass authorization and gain root access on the device.… This article has been indexed from The Register – Security…
UK businesses shockingly unaware of how to handle security threats
Many decide to make no changes after detecting a breach UK businesses’ response to security breaches has “astounded” experts following the release of the government’s official cybercrime stats for 2024.… This article has been indexed from The Register – Security…
US insurers use drone photos to deny home insurance policies
Of course, it helps if you don’t live in a potential disaster zone US insurance companies are reportedly relying on aerial photos from drones to deny claims.… This article has been indexed from The Register – Security Read the original…
Home Depot confirms worker data leak after miscreant dumps info online
SaaS slip up leads to scumbags seeking sinecure Home Depot has confirmed that a third-party company accidentally exposed some of its employees’ personal details after a criminal copy-pasted the data online.… This article has been indexed from The Register –…
Home Depot confirms data theft after crook threatens to dump inside info online
SaaS slip up leads to scumbags seeking sinecure Home Depot has confirmed that a third-party company exposed some of its employees’ personal details after a criminal claimed to have posted the stolen data online.… This article has been indexed from…
Puppies, kittens, data at risk after ‘cyber incident’ at veterinary giant
IT systems pulled offline for chance to paws and reflect First, they came for hospitals, then it was charities and cancer centers. Now, cyber scumbags are coming for the puppies and kittens.… This article has been indexed from The Register…
Change Healthcare faces second ransomware dilemma weeks after ALPHV attack
Theories abound over who’s truly responsible Change Healthcare is allegedly being extorted by a second ransomware gang, mere weeks after recovering from an ALPHV attack.… This article has been indexed from The Register – Security Read the original article: Change…
Head of Israeli cyber spy unit exposed … by his own privacy mistake
PLUS: Another local government hobbled by ransomware; Huge rise in infostealing malware; and critical vulns In Brief Protecting your privacy online is hard. So hard, in fact, that even a top Israeli spy who managed to stay incognito for 20…
What can be done to protect open source devs from next xz backdoor drama?
What happened, how it was found, and what your vultures have made of it all Kettle It’s been about a week since the shock discovery of a hidden and truly sophisticated backdoor in the xz software library that ordinarily is…
US government excoriates Microsoft for ‘avoidable errors’ but keeps paying for its products
In what other sphere does a bad supplier not feel pain for its foulups? Analysis You might think that when a government supplier fails in one of its key duties it would find itself shunned or at least feel financial…
Hotel check-in terminal bug spews out access codes for guest rooms
Attacks could be completed in seconds, compromising customer safety A self-service check-in terminal used in a German Ibis budget hotel was found leaking hotel room keycodes, and the researcher behind the discovery claims the issue could potentially affect hotels around…
Academics probe Apple’s privacy settings and get lost and confused
Just disabling Siri requires visits to five submenus A study has concluded that Apple’s privacy practices aren’t particularly effective, because default apps on the iPhone and Mac have limited privacy settings and confusing configuration options.… This article has been indexed…
World’s second-largest eyeglass lens-maker blinded by infosec incident
Also makes components for chips, displays, and hard disks, and has spent four days groping for a fix If ever there was an incident that brings the need for good infosec into sharp focus, this is the one: Japan’s Hoya…
Feds probe alleged classified US govt data theft and leak
State Dept keeps schtum ‘for security reasons’ Updated Uncle Sam is investigating claims that some miscreant stole and leaked classified information from the Pentagon and other national security agencies.… This article has been indexed from The Register – Security Read…
Feds probe massive alleged classified US govt data theft and leak
State Dept keeps schtum ‘for security reasons’ Uncle Sam is investigating claims that a criminal stole and leaked classified information from the Pentagon and other national security agencies.… This article has been indexed from The Register – Security Read the…
Ivanti commits to secure-by-design overhaul after vulnerability nightmare
CEO addresses whirlwind start to 2024 and how it plans to prevent a repeat Ivanti has committed to adopting a secure-by-design approach to security as it gears up for an organizational overhaul in response to the multiple vulnerabilities in Connect…
Ransomware gang did steal residents’ confidential data, UK city council admits
INC Ransom emerges as a growing threat as some ex-LockBit/ALPHV affiliates get new gigs Leicester City Council is finally admitting its “cyber incident” was carried out by a ransomware gang and that data was stolen, hours after the criminals forced…
When AI attacks
Watch this webinar for a hair raising journey into the darkest depths of GenAI enabled cyber crime Sponsored Post Artificial intelligence (AI) offers enormous commercial potential but also substantial risks to data security if it is harnessed by cyber criminals…
Nearly 1M medical records feared stolen from City of Hope cancer centers
Is there no cure for this cyber-plague? Nearly one million individuals’ personal details, financial account information, and medical records may have been stolen from City of Hope systems in the United States.… This article has been indexed from The Register…
Omni Hotels IT systems down since Friday, hitting bookings, payments, door locks
As WhatsApp, Facebook Messenger, and more fall offline today Luxury resort chain Omni Hotels & Resorts has had its computer systems knocked offline since Friday in what it has described as a “disruption,” though sounds a lot like the MGM…
Security pioneer Ross Anderson dies at 67
A man with a list of accolades long enough for several lifetimes, friends remember his brilliance Obituary Venerable computer scientist and information security expert Ross Anderson has died at the age of 67.… This article has been indexed from The…
Google bakes new cookie strategy that will leave crooks with a bad taste
Device Bound Session Credentials said to render cookie theft useless Google reckons that cookie theft is a problem for users, and is seeking to address it with a mechanism to tie authentication data to a specific device, rendering any stolen…
Meet clickjacking’s slicker cousin, ‘gesture jacking,’ aka ‘cross window forgery’
Web devs advised to do their part to limit UI redress attacks Web browsers still struggle to prevent clickjacking, an attack technique first noted in 2008 that repurposes web page interface elements to deceive visitors.… This article has been indexed…
Microsoft slammed for lax security that led to China’s cyber-raid on Exchange Online
CISA calls for ‘fundamental, security-focused reforms’ to happen ASAP, delaying work on other software A review of the June 2023 attack on Microsoft’s Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a…
Microsoft slammed for lax security that led to Exchange Online attack
CISA calls for ‘fundamental, security-focused reforms’ to happen ASAP, delaying work on other software A review of the June 2023 attack on Microsoft’s Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a…
Feds finally decide to do something about years-old SS7 spy holes in phone networks
And Diameter, too, for good measure The FCC appears to finally be stepping up efforts to secure decades-old flaws in American telephone networks that are allegedly being used by foreign governments and surveillance outfits to remotely spy on and monitor…
OWASP server blunder exposes decade of resumes
Irony alerts: Open Web Application Security Project Foundation suffers lapse A misconfigured MediaWiki web server allowed digital snoops to access members’ resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.… This article has been indexed…
OWASP breach exposes decade of resumes due to misconfigured server
Irony alerts: Open Web Application Security Project Foundation suffers lapse A misconfigured MediaWiki web server allowed digital snoops to access members’ resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.… This article has been indexed…
Pandabuy admits to data breach of 1.3 million unique records
Nothing says ‘sorry’ like 10 percent off shipping for a month Ecommerce platform Pandabuy has apologized after two cybercriminals were spotted hawking personal data belonging to 1.3 million customers.… This article has been indexed from The Register – Security Read…
Microsoft warns deepfake election subversion is disturbingly easy
Simple stuff like slapping on a logo fools more folks and travels further As hundreds of millions of voters around the globe prepare to elect their leaders this year, there’s no question that trolls will try to sway the outcomes…
Rubrik files to go public following alliance with Microsoft
Cloud cyber resilience model could raise $700M despite $278M losses Cloud security provider Rubrik has filed for an IPO on the New York Stock Exchange following a flurry of similar flotations.… This article has been indexed from The Register –…
Polish officials may face criminal charges in Pegasus spyware probe
Victims of the powerful surveillance tool will soon find out the truth Former Polish government officials may face criminal charges following an investigation into their use of the notorious spyware Pegasus to surveil political opponents and others.… This article has…
INC Ransom claims to be behind ‘cyber incident’ at UK city council
This follows attack on NHS services in Scotland last week The cyber skids at INC Ransom are claiming responsbility for the ongoing cybersecurity incident at Leicester City Council, according to a post caught by eagle-eyed infosec watchers.… This article has…
Happy 20th birthday Gmail, you’re mostly grown up – now fix the spam
Senders of more than 5K messages a day are in the crosshairs It was 20 years ago on Monday that Google unleashed Gmail on the world, and the chocolate factory is celebrating with new rules that just might, hopefully, cut…
Apple’s GoFetch silicon security fail was down to an obsession with speed
Ye cannae change the laws of physics, but you can change your mind Opinion Apple is good at security. It’s good at processors. Thus GoFetch, a major security flaw in its processor architecture, is a double whammy.… This article has…
Six banks share customer info to help Singapore fight money laundering
PLUS: Google Cloud ANZ boss departs; Japan revives airliner ambitions; China-linked attackers target Asian entities ASIA IN BRIEF Singapore’s Monetary Authority on Monday launched an application, intuitively named “COllaborative Sharing of Money Laundering/TF Information & Cases” (COSMIC for short, obviously)…
US House of Reps tells staff: No Microsoft Copilot for you!
At least not until Redmond’s government edition is ready to roll Staff working at the US House Of Representatives have been barred from using Microsoft’s Copilot chatbot and AI productivity tools, pending the launch of a version tailored to the…
Malicious xz backdoor reveals fragility of open source
This time, we got lucky. It mostly affected bleeding-edge distros. But that’s not a defense strategy Analysis The discovery last week of a backdoor in a widely used open source compression library called xz could have been a security disaster…
Nearly 3M people hit in Harvard Pilgrim healthcare data theft
Also, TheMoon botnet back for EoL SOHO routers, Sellafield to be prosecuted for ‘infosec failures’, plus critical vulns Infosec in brief Nearly a year on from the discovery of a massive data theft at healthcare biz Harvard Pilgrim, and the…
Ex-White House CIO tells The Reg: TikTok ban may be diplomatic disaster
Theresa Payton on why US needs a national privacy law Interview Congress is mulling legislation that will require TikTok’s Chinese parent ByteDance to cut ties with the video-sharing mega-app, or the social network will be banned in the USA.… This…
AT&T admits massive 70m+ mid-March data dump is real, but claims it’s years old
Time to update that password – and four-digit account pin, which was also among the pilfered records That rumored AT&T dark web customer data dump from mid-March has been confirmed, and it’s a whopper: A total of more than 73…
Rust developers at Google are twice as productive as C++ teams
Code shines up nicely in production, says Chocolate Factory’s Bergstrom Echoing the past two years of Rust evangelism and C/C++ ennui, Google reports that Rust shines in production, to the point that its developers are twice as productive using the…
Malicious SSH backdoor sneaks into xz, Linux world’s data compression library
Red Hat in all caps says STOP USAGE OF ANY FEDORA RAWHIDE INSTANCES Red Hat on Friday warned that a malicious backdoor found in the widely used data compression library called xz may be present in Fedora Linux 40 and…
Malicious backdoor sneaks into xz, Linux world’s data compression library and tool
Red Hat in all caps says STOP USAGE OF ANY FEDORA RAWHIDE INSTANCES Red Hat on Friday warned that a malicious backdoor found in the widely used data compression library called xz may be present in Fedora Linux 40, 41,…
Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching
CVE-2024-1086 turns the page tables on system admins A Linux privilege-escalation proof-of-concept exploit has been published that, according to the bug hunter who developed it, typically works effortlessly on kernel versions between at least 5.14 and 6.6.14. … This article has…
JetBrains keeps mum on 26 ‘security problems’ fixed after Rapid7 spat
Vendor takes hardline approach to patch disclosure to new levels JetBrains TeamCity users are urged to apply the latest version upgrade this week after the vendor disclosed 26 new security issues in the CI/CD web application.… This article has been…
Nvidia’s newborn ChatRTX bot patched for security bugs
Flaws enable privilege escalation and remote code execution Nvidia’s AI-powered ChatRTX app launched just six week ago but already has received patches for two security vulnerabilities that enabled attack vectors, including privilege escalation and remote code execution.… This article has…
US critical infrastructure cyberattack reporting rules inch closer to reality
After all, it’s only about keeping the essentials on – no rush America’s long-awaited cyber attack reporting rules for critical infrastructure operators are inching closer to implementation, after the Feds posted a notice of proposed rulemaking for the Cyber Incident…
Canonical cracks down on crypto cons following Snap Store scam spree
In happier news, Ubuntu Pro extended support now goes up to 12 years After multiple waves of cryptocurrency credential-stealing apps were uploaded to the Snap store, Canonical is changing its policies.… This article has been indexed from The Register –…
INC Ransom claims responsibility for attack on NHS Scotland
Sensitive documents dumped on leak site amid claims of 3 TB of data stolen in total NHS Scotland says it managed to contain a ransomware group’s malware to a regional branch, preventing the spread of infection across the entire institution.……
These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb
One might say this is a wurst case scenario The German Federal Office for Information Security (BIS) has issued an urgent alert about the poor state of Microsoft Exchange Server patching in the country.… This article has been indexed from…
AI hallucinates software packages and devs download them – even if potentially poisoned with malware
Simply look out for libraries imagined by ML and make them real, with actual malicious code. No wait, don’t do that In-depth Several big businesses have published source code that incorporates a software package previously hallucinated by generative AI.… This…
Execs in Japan busted for winning dev bids then outsourcing to North Koreans
Government issues stern warning over despot money-making scheme Two executives were issued arrest warrants in Japan on Wednesday, reportedly for charges related to establishing a business that outsourced work to North Korean IT engineers.… This article has been indexed from…
China encouraged armed offensive against Myanmar government to protest proliferation of online scams
Report claims Beijing is most displaced by junta’s failure to address slave labor scam settlements The military junta controlling Myanmar has struggled to control all of its territory thanks in part to China backing rebel forces as a way of…
Apple fans deluged with phony password reset requests
Beware support calls offering a fix Apple device owners, consider yourselves warned: a targeted multi-factor authentication bombing campaign is under way, with the goal of exhausting iUsers into allowing an unwanted password reset.… This article has been indexed from The…
Apple fans flooded with phony password reset requests
Beware support calls offering a fix Apple device owners, consider yourselves warned: A targeted multi-factor authentication bombing campaign is going around with the goal of exhausting iUsers into accidentally allowing a password reset.… This article has been indexed from The…
Majority of Americans now use ad blockers
We’re dreaming of a white list, because we’re just like the ones you used to know More than half of Americans are using ad blocking software, and among advertising, programming, and security professionals that fraction is more like two-thirds to…
‘Thousands’ of businesses at mercy of miscreants thanks to unpatched Ray AI flaw
Anyscale claims issue is ‘long-standing design decision’ – as users are raided by intruders Thousands of companies remain vulnerable to a remote-code-execution bug in Ray, an open-source AI framework used by Amazon, OpenAI, and others, that is being abused by…
Meta accused of snarfing people’s Snapchat data via traffic decryption
I ain’t afraid of no ghosts, but in this case… To spy on rival Snapchat and get data on how the app was being used, Meta – when it was operating as Facebook – allegedly initiated a program called Project…
Google reveals zero-day exploits in enterprise tech surged 64% last year
Crooks know where the big bucks are Zero-day exploits targeting enterprise-specific software and appliances are now outpacing zero-day bugs overall, according to Google’s threat hunting teams.… This article has been indexed from The Register – Security Read the original article:…
Street newspaper appears to have Big Issue with Qilin ransomware gang
The days of cybercriminals having something of a moral compass are over The parent company of The Big Issue, a street newspaper and social enterprise for homeless people, is wrestling with a cybersecurity incident claimed by the Qilin ransomware gang.……
The easy road to pervasive DLP
How Forcepoint Data Security Everywhere does what it says on the tin Sponsored Post The coronavirus pandemic appears to have changed the employment landscape forever, with estimates suggesting that up to a quarter of staff still spend some of their…
Uncle Sam’s had it up to here with ‘unforgivable’ SQL injection flaws
Software slackers urged to up their game The US has clearly had enough of software vendors shipping products with “unforgivable” vulnerabilities, and is now urging them to launch formal code reviews to stamp out SQL injection flaws.… This article has…
Ransomware can mean life or death at hospitals, but DEF CON hackers have a plan
ARPA-H joins the challenge, adds $20M to cash rewards Interview As ransomware gangs target critical infrastructure – especially hospitals and other healthcare organizations – DARPA has added another government agency partner to its Artificial Intelligence Cyber Challenge (AIxCC).… This article…
FreeBSD Foundation hands out Beacon gongs for safer software
Multiple CHERI-related projects win money for important research that prizes safety over speed The inaugural Beacon Awards has handed three prizes to projects working on safer software for CHERI-enabled hardware running on the CheriBSD operating system.… This article has been…
UK elections are unaffected by China’s cyber-interference, says deputy PM
Sanctions galore for APT31, which has been blamed for two major attacks on democracy The UK’s deputy prime minister, Oliver Dowden, says China has been unsuccessful in its attempts to undermine UK elections.… This article has been indexed from The…
Row breaks out over true severity of two DNSSEC flaws
Some of us would be happy being rated 7.5 out of 10, just sayin’ Two DNSSEC vulnerabilities were disclosed last month with similar descriptions and the same severity score, but they are not the same issue.… This article has been…
New Zealand to world: China attacked us, too!
Reveals 2021 incident that saw parliamentary agencies briefly probed The government of South Pacific island nation New Zealand has revealed that it, too, has been attacked by China.… This article has been indexed from The Register – Security Read the…
US charges Chinese nationals with cyber-spying on pretty much everyone for Beijing
Plus: Alleged front sanctioned, UK blames PRC for Electoral Commission theft, and does America need a Cyber Force? The United States on Monday accused seven Chinese men of breaking into computer networks, email accounts, and cloud storage belonging to numerous…
Chinese nationals charged with cyber-spying on US biz and more for Beijing
Plus: Alleged front sanctioned, UK blames PRC for Electoral Commission theft, and does America need a Cyber Force? The United States on Monday accused seven Chinese men of breaking into computer networks, email accounts, and cloud storage belonging to numerous…
Over 170K users caught up in poisoned Python package ruse
Supply chain attack targeted GitHub community of Top.gg Discord server More than 170,000 users are said to have been affected by an attack using fake Python infrastructure with “successful exploitation of multiple victims.”… This article has been indexed from The…
Over 170K users hit by poisoned Python package ruse
Supply chain attack targeted GitHub community of Top.gg Discord server More than 170,000 users have been affected by an attack using fake Python infrastructure with “successful exploitation of multiple victims.”… This article has been indexed from The Register – Security…
Tech trade union confirms cyberattack behind IT, email outage
Systems have been pulled offline as a precaution Exclusive The Communications Workers Union (CWU), which represents hundreds of thousands of employees in sectors across the UK economy including tech and telecoms, is currently working to mitigate a cyberattack.… This article…
Mozilla fixes $100,000 Firefox zero-days following two-day hackathon
Users may have to upgrade twice to protect their browsers Mozilla has swiftly patched a pair of critical Firefox zero-days after a researcher debuted them at a Vancouver cybersec competition.… This article has been indexed from The Register – Security…
GoFetch security exploit can’t be disabled on M1 and M2 Apple chips
For now, cryptographic work should be run on slower Icestorm cores The GoFetch vulnerability found on Apple M-series and Intel Raptor Lake CPUs has been further unpacked by the researchers who first disclosed it.… This article has been indexed from…