No word yet on scope of attacks A critical, hardcoded credential bug in SolarWinds’ Web Help Desk products has been found and exploited by criminals, according to the US Cybersecurity and Infrastructure Security Agency, which has added the flaw to…
Tag: The Register – Security
China’s infosec leads accuse Intel of NSA backdoor, cite chip security flaws
Uncle Sam having a secret way into US tech? Say it ain’t so A Chinese industry group has accused Intel of backdooring its CPUs, in addition to other questionable security practices while calling for an investigation into the chipmaker, claiming…
Strengthen your cybersecurity with automation
Find out how to enhance efficiency using Google Security Operations Webinar In an era of ever-evolving cyber threats, staying ahead of potential security risks is essential.… This article has been indexed from The Register – Security Read the original article:…
Internet Archive wobbles back online, with limited functionality
DDoS detectives deduce Mirai used to do the deed, using home entertainment boxes in Korea, China, and Brazil The Internet Archive has come back online, in slightly degraded mode, after repelling an October 9 DDoS attack and then succumbing to…
IBM acquires Indian SaaS startup Prescinto to shine a light on renewable energy assets
ALSO: Crypto-hub Binance helps Delhi police shut down solar power scam IBM announced on Tuesday it has acquired Prescinto, a Bangalore-based provider of asset performance management software for renewable energy.… This article has been indexed from The Register – Security…
WhatsApp may expose the OS you use to run it – which could expose you to crooks
Messaging service creates persistent user IDs that have different qualities on each device An analysis of Meta’s WhatsApp messaging software reveals that it may expose which operating system a user is running, and their device setup information – including the…
Cisco confirms ‘ongoing investigation’ after crims brag about selling tons of data
IntelBroker claims the breach impacts Microsoft, SAP, AT&T, Verizon, T-Mobile US, and more Cisco has confirmed it is investigating claims of stealing — and now selling — data belonging to the networking giant.… This article has been indexed from The Register…
Microsoft says more ransomware stopped before reaching encryption
Volume of attacks still surging though, according to Digital Defense Report Microsoft says ransomware attacks are up 2.75 times compared to last year, but claims defenses are actually working better than ever.… This article has been indexed from The Register…
AI amplifies systemic risk to financial sector, says India’s Reserve Bank boss
Who also worries misinformation on social media could threaten liquidity The governor of India’s Reserve Bank, Shri Shaktikanta Das, yesterday warned that AI – and the platforms that provide it – could worsen systemic risk to the nation’s financial system.……
China again claims Volt Typhoon hack gang was invented by the US to discredit it
Enough with the racist-sounding ‘dragons’ and ‘pandas’, Beijing complains – then points the finger at koalas Chinese authorities have published another set of allegations that assert the Volt Typhoon threat actor is an invention of the US and its allies,…
US healthcare org admits up to 400,000 people’s personal info was snatched
It waited till just before Columbus Day weekend to make mandated filing, but don’t worry, we saw it A Houston-based services provider to healthcare organizations says a crook may have grabbed up to 400,000 people’s information after the miscreant accessed…
Leveraging AI/ML for next-gen SOC environments
Technologies that help SOCs detect, analyze, and respond to emerging threats faster and more accurately Sponsored Post This article discusses some of the challenges traditional SOCs face and how integrating artificial intelligence/machine learning (AI/ML) modules could help solve the challenges…
Trump campaign arms up with ‘unhackable’ phones after Iranian intrusion
Florida man gets his hands on ‘the best ever’ With less than a month to go before American voters head to the polls to choose their next president, the Trump campaign has been investing in secure tech to make sure…
Thousands of Fortinet instances vulnerable to actively exploited flaw
No excuses for not patching this nine-month-old issue More than 86,000 Fortinet instances remain vulnerable to the critical flaw that attackers started exploiting last week, according to Shadowserver’s data.… This article has been indexed from The Register – Security Read…
How to head off data breaches with CIAM
Let Okta lift the lid on customer identity in this series of webinars Sponsored Post Recent reports suggest that stolen identity and privileged access credentials now account for 61 percent of all data breaches.… This article has been indexed from…
Crypto-apocalypse soon? Chinese researchers find a potential quantum attack on classical encryption
With an off-the-shelf D-Wave machine Chinese researchers claim they have found a way to use D-Wave’s quantum annealing systems to develop a promising attack on classical encryption.… This article has been indexed from The Register – Security Read the original…
Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between
Reading, writing, and cyber mayhem, amirite? If we were to draw an infosec Venn diagram, with one circle representing “sensitive info that attackers would want to steal” and the other “limited resources plus difficult-to-secure IT environments,” education would sit in…
US and UK govts warn: Russia scanning for your unpatched vulnerabilities
Also, phishing’s easier over the phone, and your F5 cookies might be unencrypted, and more in brief If you need an excuse to improve your patching habits, a joint advisory from the US and UK governments about a massive, ongoing…
INC ransomware rebrands to Lynx – same code, new name, still up to no good
Researchers point to evidence that scumbags visited the strategy boutique Researchers at Palo Alto’s Unit 42 believe the INC ransomware crew is no more and recently rebranded itself as Lynx over a three-month period.… This article has been indexed from…
US lawmakers seek answers on alleged Salt Typhoon breach of telecom giants
Cyberspies abusing a backdoor? Groundbreaking Lawmakers are demanding answers about earlier news reports that China’s Salt Typhoon cyberspies breached US telecommunications companies Verizon, AT&T, and Lumen Technologies, and hacked their wiretapping systems. They also urge federal regulators to hold these…