Researchers say attacks are laying the groundwork for stealthy espionage activity Around 50,000 ASUS routers have been compromised in a sophisticated attack that researchers believe may be linked to China, according to findings released today by SecurityScorecard’s STRIKE team.… This…
Tag: The Register – Security
Selling technology investments to the board: a strategic guide for CISOs and CIOs
The C-suite will have zero interest in zero trust without a good business case Partner Content In today’s enterprise environment, technology investments are no longer judged solely by their technical sophistication. Approval depends on their ability to support business goals,…
China recruiting spies in the UK with fake headhunters and ‘sites like LinkedIn’
MI5 sounds the alarm about attempts to source sensitive information Chinese spies are using social media and fake recruitment agents to recruit sources with access to sensitive information in the UK.… This article has been indexed from The Register –…
Self-replicating botnet attacks Ray clusters
Using AI to attack AI Malefactors are actively attacking internet-facing Ray clusters and abusing the open source AI framework to spread a self-replicating botnet that mines for cryptocurrency, steals data, and launches distributed denial of service (DDoS) attacks.… This article…
FCC looks to torch Biden-era cyber rules sparked by Salt Typhoon mess
Regulator sides with telcos that claimed new cybersecurity duties were too ‘burdensome’ The Federal Communications Commission (FCC) will vote this week on whether to scrap Biden-era cybersecurity rules, enacted after the Salt Typhoon attacks came to light in 2024, that…
Google Chrome bug exploited as an 0-day – patch now or risk full system compromise
Seventh Chrome 0-day this year Google pushed an emergency patch on Monday for a high-severity Chrome bug that attackers have already found and exploited in the wild.… This article has been indexed from The Register – Security Read the original…
Take fight to the enemy, US cyber boss says
When? Sean Cairncross wouldn’t say America is fed up with being the prime target for foreign hackers. So US National Cyber Director Sean Cairncross says Uncle Sam is going on the offensive – he just isn’t saying when.… This article…
Zoomers are officially worse at passwords than 80-year-olds
They can probably set up a printer faster, but look elsewhere for cryptography advice Gen Z can get off their digital high horses because their passwords are no more secure than their grandparents’.… This article has been indexed from The…
Pentagon and soldiers let too many secrets slip on social networks, watchdog says
Ready, aim, mire Loose lips sink ships, the classic line goes. Information proliferation in the internet age has government auditors reiterating that loose tweets can sink fleets, and they’re concerned that the Defense Department isn’t doing enough to stop sensitive…
‘Largest-ever’ cloud DDoS attack pummels Azure with 3.64B packets per second
Aisuru botnet strikes again, bigger and badder Azure was hit by the “largest-ever” cloud-based distributed denial of service (DDoS) attack, originating from the Aisuru botnet and measuring 15.72 terabits per second (Tbps), according to Microsoft.… This article has been indexed…
Security researcher calls BS on Coinbase breach disclosure timeline
Claims he reported the attack in January after fraudsters tried to scam him A security researcher says Coinbase knew about a December 2024 security breach during which miscreants bribed its support staff into handing over almost 70,000 customers’ details at…
Selling your identity to North Korean IT scammers isn’t a sustainable side hustle
Four US citizens tried it, and the DoJ just secured guilty pleas from all of ’em It sounds like easy money. North Koreans pay you to use your identity so they can get jobs working for American companies in IT.…
Game over: Europol storms gaming platforms in extremist content sweep
Law enforcement agency’s referral blitz hit gaming platforms hard, surfacing thousands of extremist URLs Europol’s Internet Referral Unit (EU IRU) says a November 13 operation across gaming and “gaming-adjacent” services led its partners to report thousands of URLs hosting terrorist…
Overconfidence is the new zero-day as teams stumble through cyber simulations
Readiness metrics have flatlined since 2023, with most sectors slipping backward as teams fumble crisis drills Teams that think they’re ready for a major cyber incident are scoring barely 22 percent accuracy and taking more than a day to contain…
Eurofiber admits crooks swiped data from French unit after cyberattack
Regulator reports suggest telco was extorted, but company remains coy as to whether it paid French telco Eurofiber says cybercriminals swiped company data during an attack last week that also affected some internal systems.… This article has been indexed from…
UK prosecutors seize £4.11M in crypto from Twitter mega-hack culprit
Civil recovery order targets PlugwalkJoe’s illicit gains while he serves US sentence British prosecutors have secured a civil recovery order to seize crypto assets worth £4.11 million ($5.39 million) from Twitter hacker Joseph James O’Connor, clawing back the proceeds of…
Jaguar Land Rover hack cost India’s Tata Motors around $2.4 billion and counting
PLUS: Active noise cancellation for entire rooms; More trouble for SK telecom; The Wiggles apologize for bad batteries; and more Asia In Brief India’s Tata Motors, owner of Jaguar Land Rover, has revealed the cyberattack that shut down production in…
Logitech leaks data after zero-day attack
PLUS: CISA still sitting on telecoms security report; DoorDash phished again; Lumma stealer returns; and more INFOSEC IN BRIEF The US Senate passed a resolution in July to force the US Cybersecurity and Infrastructure Security Agency (CISA) to publish a…
Fortinet finally cops to critical make-me-admin bug under active exploitation
More than a month after PoC made public Fortinet finally published a security advisory on Friday for a critical FortiWeb path traversal vulnerability under active exploitation – but it appears digital intruders got a month’s head start.… This article has…
Crims poison 150K+ npm packages with token-farming malware
Amazon spilled the TEA Yet another supply chain attack has hit the npm registry in what Amazon describes as “one of the largest package flooding incidents in open source registry history” – but with a twist. Instead of injecting credential-stealing…