Move fast – miscreants compromised a domain controller in 17 hours Gootloader JavaScript malware, commonly used to deliver ransomware, is back in action after a period of reduced activity.… This article has been indexed from The Register – Security Read…
Tag: The Register – Security
Cisco warns of ‘new attack variant’ battering firewalls under exploit for 6 months
Plus 2 new critical vulns – patch now Cisco warned customers about another wave of attacks against its firewalls, which have been battered by intruders for at least six months. It also patched two critical bugs in its Unified Contact…
You’ll never guess what the most common passwords are. Oh, wait, yes you will
Most of you still can’t do better than 123456? 123456. admin. password. For years, the IT world has been reminding users not to rely on such predictable passwords. And yet here we are with another study finding that those sorts…
SonicWall fingers state-backed cyber crew for September firewall breach
Spies, not crooks, were behind digital heist – damage stopped at the backups, says US cybersec biz SonicWall has blamed an unnamed, state-sponsored collective for the September break-in that saw cybercriminals rifle through a cache of firewall configuration backups.… This…
Malware-pwned laptop gifts cybercriminals Nikkei’s Slack
Stolen creds let miscreants waltz into 17K employees’ chats, spilling info on staff and partners Japanese media behemoth Nikkei has admitted to a data breach after miscreants slipped into its internal Slack workspace, exposing the personal details of more than…
Why UK businesses are paying ICO millions for password mistakes you’re probably making right now
Strongly-worded emails to staff telling them to be more careful aren’t going to cut it anymore Partner Content UK GDPR Article 32 mandates “appropriate security measures”. The ICO has defined what that means: multi-million-pound fines for password failures. The violations…
Uncle Sam lets Google take Wiz for $32B
Second time’s the charm for after Wiz rejected Google’s $23B offer last year Google’s second attempt to acquire cloud security firm Wiz is going a lot better than the first, with the Department of Justice clearing the $32 billion deal,…
Google’s $32B deal for Wiz gets the all-clear from Uncle Sam
Second time’s the charm for after Wiz rejected Google’s $23B offer last year Google’s second attempt to acquire cloud security firm Wiz is going a lot better than the first, with the Department of Justice clearing the $32 billion deal,…
AMD red-faced over random-number bug that kills cryptographic security
Local privileges required to exploit flaw in Ryzen and Epyc CPUs. Some patches available, more on the way AMD will issue a microcode patch for a high-severity vulnerability that could weaken cryptographic keys across Epyc and Ryzen CPUs.… This article…
Attackers abuse Gemini AI to develop ‘Thinking Robot’ malware and data processing agent for spying purposes
Meanwhile, others tried to social-engineer the chatbot itself Nation-state goons and cybercrime rings are experimenting with Gemini to develop a “Thinking Robot” malware module that can rewrite its own code to avoid detection, and build an AI agent that tracks…
M&S pegs cyberattack cleanup costs at £136M as profits slump
Retailer’s tech systems aren’t down anymore, but the same can’t be said for its rocky financials Marks & Spencer says its April cyberattack will cost around £136 million ($177.2 million) in total.… This article has been indexed from The Register…
Famed software engineer DJB tries Fil-C… and likes what he sees
A ‘three-letter person’ experiments with the new type-safe C, and is impressed Famed mathematician, cryptographer and coder Daniel J. Bernstein has tried out the new type-safe C/C++ compiler, and he’s given it a favorable report.… This article has been indexed…
UK agri dept spent hundreds of millions upgrading to Windows 10 – just in time for end of support
After a £312M upgrade to the retiring OS, Defra still has 24,000 devices to replace The UK’s Department for Environment, Food & Rural Affairs (Defra) has spent £312 million (c $407 million) modernizing its IT estate, including replacing tens of…
Uncle Sam wants to scan your iris and collect your DNA, citizen or not
DHS rule would expand biometric collection to immigrants and some citizens linked to them If you’re filing an immigration form – or helping someone who is – the Feds may soon want to look in your eyes, swab your cheek,…
Russian spies pack custom malware into hidden VMs on Windows machines
Curly COMrades strike again Russia’s Curly COMrades is abusing Microsoft’s Hyper-V hypervisor in compromised Windows machines to create a hidden Alpine Linux-based virtual machine that bypasses endpoint security tools, giving the spies long-term network access to snoop and deploy malware.……
Consumer Financial Protection Bureau’s security falls apart amid layoffs
Security program fails to meet federal standards as government cuts drain resources The infosec program run by the US’ Consumer Financial Protection Bureau (CFPB) “is not effective,” according to a fresh audit published by the Office of the Inspector General…
Invasion of the message body snatchers! Teams flaw allowed crims to impersonate the boss
Check Point lifts lid on a quartet of Teams vulns that made it possible to fake the boss, forge messages, and quietly rewrite history Microsoft Teams, one of the world’s most widely used collaboration tools, contained serious, now-patched vulnerabilities that…
Cybercrooks getting violent more often to secure big payouts in Europe
France-based victims hit especially hard, while UK named most-targeted country generally Researchers are seeing a “dramatic” increase in cybercrime involving physical violence across Europe, with at least 18 cases reported since the start of the year.… This article has been…
OpenAI API moonlights as malware HQ in Microsoft’s latest discovery
Redmond uncovers SesameOp, a backdoor hiding its tracks by using OpenAI’s Assistants API as a command channel Hackers have found a new use for OpenAI’s Assistants API – not to write poems or code, but to secretly control malware.… This…
China’s president Xi Jinping jokes about backdoors in Xiaomi smartphones
South Korea’s president laughed, so perhaps it was funny? Unlike China’s censorship and snooping Chinese president Xi Jinping has joked that smartphones from Xiaomi might include backdoors.… This article has been indexed from The Register – Security Read the original…