Phishing and ancient vulns still do the trick for one of the most prolific groups around Researchers say the Sidewinder offensive cyber crew is starting to target maritime and nuclear organizations.… This article has been indexed from The Register –…
Tag: The Register – Security
Rhysida pwns two US healthcare orgs, extracts over 300K patients’ data
Terabytes of sensitive info remain available for download Break-ins to systems hosting the data of two US healthcare organizations led to thieves making off with the personal and medical data of more than 300,000 patients.… This article has been indexed…
Consumer Reports calls out slapdash AI voice-cloning safeguards
Study finds 4 out of 6 providers don’t do enough to stop impersonation Four out of six companies offering AI voice cloning software fail to provide meaningful safeguards against the misuse of their products, according to research conducted by Consumer…
How NOT to f-up your security incident response
Experts say that the way you handle things after the criminals break in can make things better or much, much worse Feature Experiencing a ransomware infection or other security breach ranks among the worst days of anyone’s life — but…
The NHS security culture problem is a crisis years in the making
Insiders say board members must be held accountable and drive positive change from the top down Analysis Walk into any hospital and ask the same question – “Which security system should we invest in?” – to both a doctor and…
Strap in, get ready for more Rust drivers in Linux kernel
Likening memory safety bugs to smallpox may not soothe sensitive C coders Rust is alive and well in the Linux kernel and is expected to translate into noticeable benefits shortly, though its integration with the largely C-oriented codebase still looks…
Microsoft admits GitHub hosted malware that infected almost a million devices
Also, phone cleaner apps are a data-sucking scam, Singapore considering the literal rod for scammers, and more Infosec in Brief Microsoft has spotted a malvertising campaign that downloaded nastyware hosted on GitHub and exposed nearly a million devices to information…
Microsoft admits GitHub used to store malware that infected almost a million devices
Also, phone cleaner apps are a data-sucking scam, Singapore considering the literal rod for scammers, and more Infosec in Brief Microsoft has spotted a malvertising campaign that downloaded nastyware hosted on GitHub and exposed nearly a million devices to information…
India wants backdoors into clouds, email, SaaS, for tax inspectors
PLUS: Malaysia teams with Arm for local chip designs; NTT warns of possible breach; Samsung strikers settle; and more Asia in Brief India’s government has proposed giving its tax authorities sweeping powers to access private email systems and applications.… This…
Kernel saunters – How Apple rearranged its XNU kernel with exclaves
iPhone giant compartmentalizes OS for the sake of security Apple has been working to harden the XNU kernel that powers its various operating systems, including iOS and macOS, with a feature called “exclaves.”… This article has been indexed from The…
Developer sabotaged ex-employer with kill switch activated when he was let go
IsDavisLuEnabledInActiveDirectory? Not any more. IsDavisLuGuilty? Yes. IsDavisLuFacingJail? Also yes A federal jury in Cleveland has found a senior software developer guilty of sabotaging his employer’s systems – and he’s now facing a potential ten years behind bars.… This article has…
Developer sabotaged ex-employer with kill switch that activated when he was let go
IsDavisLuEnabledInActiveDirectory? Not any more. IsDavisLuGuilty? Yes. IsDavisLuFacingJail? Also yes A federal jury in Cleveland has found a senior software developer guilty of sabotaging his employer’s systems – and he’s now facing a potential ten years behind bars.… This article has…
Uncle Sam charges alleged Garantex admins after crypto-exchange web seizures
$96B in transactions, some even labeled ‘dirty funds,’ since 2019, say prosecutors The Feds today revealed more details about the US Secret Service-led Garantex takedown, a day after seizing websites and freezing assets belonging to the Russian cryptocurrency exchange in…
Alleged cyber scalpers Swiftly cuffed over $635K Taylor ticket heist
I knew you were trouble, Queens DA might have said Police have made two arrests in their quest to start a cybercrime crew’s prison eras, alleging the pair stole hundreds of Taylor Swift tickets and sold them for huge profit. ……
Like whitebox servers, rent-a-crew crime ‘affiliates’ have commoditized ransomware
Which is why taking down chiefs and infra behind big name brand operations isn’t working Interview There’s a handful of cybercriminal gangs that Jason Baker, a ransomware negotiator with GuidePoint Security, regularly gets called in to respond to these days,…
The Badbox botnet is back, powered by up to a million backdoored Androids
Best not to buy cheap hardware and use third-party app stores if you want to stay clear of this vast ad fraud effort Human Security’s Satori research team says it has found a new variant of the remote-controllable Badbox malware,…
International cops seize ransomware crooks’ favorite Russian crypto exchange
Did US Secret Service not get the memo, or? A coalition of international law enforcement has shut down Russian cryptocurrency exchange Garantex, a favorite of now-defunct ransomware crew Conti and others criminals for money laundering.… This article has been indexed…
Uncle Sam mulls policing social media of all would-be citizens
President ordered officials to ramp up vetting ‘to the maximum degree’ The US government’s Citizenship and Immigration Service (USCIS) is considering monitoring not just the social media posts of non-citizens coming into the country, but also all those already in…
Uncle Sam mulls policing social media of would-be citizens
President ordered officials to ramp up vetting ‘to the maximum degree’ The US government’s Citizenship and Immigration Service (USCIS) is considering monitoring not just the social media posts of non-citizens coming into the country, but also those already in America…
Toronto Zoo ransomware crooks snatch decades of visitor data
Akira really wasn’t horsing around with this one Toronto Zoo’s final update on its January 2024 cyberattack arrived this week, revealing that visitor data going back to 2000 had been compromised.… This article has been indexed from The Register –…