Despite arrests, eight-legged menace targeted more victims this year Despite several arrests last year, Scattered Spider’s social engineering attacks are continuing into 2025 as the cybercrime collective targets high-profile organizations and adds another phishing kit to its arsenal along with…
Tag: The Register – Security
As CISA braces for more cuts, threat intel sharing takes a hit
Will ‘gutting’ the civilian defense agency make American cybersecurity great again? Analysis Slashing staff at the US govt’s Cybersecurity and Infrastructure Security Agency, aka CISA, and scrapping vital programs, isn’t exactly boosting national security, say infosec and national security officials…
Oracle says its cloud was in fact compromised
Reliability, honesty, accuracy. And then there’s this lot Oracle has briefed some customers about a successful intrusion into its public cloud, as well as the theft of their data, after previously denying it had been compromised.… This article has been…
That massive GitHub supply chain attack? It all started with a stolen SpotBugs token
But this mystery isn’t over yet, Unit 42 opines That massive GitHub supply chain attack that spilled secrets from countless projects? It traces back to a stolen token from a SpotBugs workflow – exposed way back in November, months earlier…
Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victims
Crummy OPSEC leads to potentially decades in prison Noah Michael Urban, 20, of alleged Scattered Spider infamy, has pleaded guilty to various charges and potentially faces decades in prison.… This article has been indexed from The Register – Security Read…
UK’s attempt to keep details of Apple ‘backdoor’ case secret… denied
Last month’s secret hearing comes to light Details of Apple’s appeal against the UK’s so-called “backdoor order” will now play out in public after the Home Office failed in its bid to keep them secret on national security grounds.… This…
Chrome to patch decades-old flaw that let sites peek at your history
After 23 years, the privacy plumber has finally arrived to clean up this mess A 23-year-old side-channel attack for spying on people’s web browsing histories will get shut down in the forthcoming Chrome 136, released last Thursday to the Chrome…
Tribunal denies UK’s attempt to keep details of Apple ‘backdoor’ case secret
Last month’s secret hearing comes to light Details of Apple’s appeal against the UK’s so-called “backdoor order” will now play out in public after the Home Office failed in its bid to keep them secret on national security grounds.… This…
What native cloud security tools won’t catch
Native tools help, but they don’t cover everything – here’s what they miss and how to close the gaps Partner Content : AWS provides a number of security services, such as GuardDuty, Inspector, Config, and Security Hub, designed to protect…
Asian tech players react to US tariffs with delays, doubts, deal-making
PLUS: Qualcomm acquires Vietnamese AI outfit; China claims US hacked winter games; India’s browser challenge winner disputed; and more Asia In Brief Asian nations and tech companies are trying to come to terms with the USA’s new universal import tariffs…
Signalgate solved? Report claims journalist’s phone number accidentally saved under name of Trump official
PLUS: Google re-patches Quick Share flaws; Critical Cisco flaw exploited; WordPress plugin trouble; and more Infosec in Brief How did journalist Jeffrey Goldberg’s phone number end up in a Signal group chat? According to The Guardian, US national security adviser…
Trump fires NSA boss, deputy
Intelligence chief booted after less than two years on the job President Trump today fired the head of the NSA and US Cyber Command and his deputy.… This article has been indexed from The Register – Security Read the original…
30 minutes to pwn town: Are speedy responses more important than backups for recovery?
The industry’s approach to keeping quality backups may be masking the importance of other recovery mainstays Maintaining good-quality backups is often seen as the spine of any organization’s ability to recover from cyberattacks quickly. Naturally, given the emphasis placed on…
Alan Turing Institute: UK can’t handle a fight against AI-enabled crims
Law enforcement facing huge gap in ‘AI adoption’ The National Crime Agency (NCA) will “closely examine” the recommendations made by the Alan Turing Institute after it claimed the UK was ill-equipped to tackle AI-enabled crime.… This article has been indexed…
Ex-ASML, NXP staffer accused of stealing chip secrets, peddling them to Moscow
We’re not Putin up with this alleged industrial espionage, say the Dutch A Russian national appeared in a Netherlands court on Thursday accused of industrial espionage against ASML, the world’s leading manufacturer of chip factory equipment and a key supplier…
Retirement funds reportedly raided after unexplained portal probes and data theft
Australians checking their pensions are melting down call centres and websites Australian retirement fund operators are scrambling after reports emerged of unauthorized access to customer accounts leading to theft of cash.… This article has been indexed from The Register –…
Signalgate: Pentagon watchdog probes Defense Sec Hegseth
Classification compliance? Records retention requirements? How quaint A US Department of Defense watchdog has opened an investigation into its own Secretary of Defense, Pete Hegseth, over his use of instant-messaging app Signal to discuss government business.… This article has been…
Flux off: CISA, annexable allies warn of hot DNS threat
Shape shifting technique described as menace to national security The US govt’s Cybersecurity Infrastructure Agency, aka CISA, on Thursday urged organizations, internet service providers, and security firms to strengthen defenses against so-called fast flux attacks.… This article has been indexed…
Suspected Chinese spies right now hijacking buggy Ivanti gear – for third time in 3 years
Simple denial-of-service blunder turned out to be a remote unauth code exec disaster Suspected Chinese government spies have been exploiting a newly disclosed critical bug in Ivanti VPN appliances since mid-March. This is now at least the third time in…
When disaster strikes, proper preparation prevents poor performance
It’s going to happen to you one day, so get your ducks in a row As Benjamin Franklin famously said: “An ounce of prevention is worth a pound of cure,” and that’s especially true when it comes to disaster recovery.……