Government body claims there is no evidence of customer data being compromised Transport for London (TfL) – responsible for much of the public network carrying people around England’s capital – is battling to stay on top of an unfolding “cyber…
Tag: The Register – Security
Application builders get ready
Head down to Grey Matter ISV Partner Day to learn about the latest Microsoft technologies Sponsored Post This year’s Grey Matter ISV Partner Day will bring together Microsoft-focused ISVs, SaaS Providers and application builders from the UK and Ireland to…
Telegram CEO was ‘too free’ on content moderation, says Russian minister
CEO Pavel Durov charged in France, messaging platform insists it abides by EU laws Telegram CEO Pavel Durov, who was cuffed and charged by the French police last week, was “too free” in his approach to managing the global messaging…
Novel attack on Windows spotted in phishing campaign run from and targeting China
Resources hosted at Tencent Cloud involved in Cobalt Strike campaign Chinese web champ Tencent’s cloud is being used by unknown attackers as part of a phishing campaign that aims to achieve persistent network access at Chinese entities.… This article has…
Check your IP cameras: There’s a new Mirai botnet on the rise
Also, US offering $2.5M for Belarusian hacker, Backpage kingpins jailed, additional MOVEit victims, and more in brief A series of IP cameras still used all over the world, despite being well past their end of life, have been exploited to…
RansomHub hits 210 victims in just 6 months
The ransomware gang recruits high-profile affiliates from LockBit and ALPHV As RansomHub continues to scoop up top talent from the fallen LockBit and ALPHV operations while accruing a smorgasbord of victims, security and law enforcement agencies in the US feel…
Green Berets storm building after hacking its Wi-Fi
Relax, it’s just a drill. This time at least. US Army Special Forces, aka the Green Berets, have been demonstrating their hacking chops in the recent Swift Response 24 military exercises in May, the military has now confirmed.… This article…
Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers
Infosec hounds say they spotted vulnerability during routine travel in the US Cybersecurity researchers say they’ve found a vulnerability that allowed them to skip US airport security checks and even fly in the cockpit on some scheduled flights.… This article…
Iran hunts down double agents with fake recruiting sites, Mandiant reckons
Farsi-language posts target possibly-pro-Israel individuals Government-backed Iranian actors allegedly set up dozens of fake recruiting websites and social media accounts to hunt down double agents and dissidents suspected of collaborating with the nation’s enemies, including Israel.… This article has been…
US indicts duo over alleged Swatting spree that targeted elected officials
Targeted elected officials and others with over 100 fake crime reports and threats The US government has indicted two men for allegedly reporting almost 120 fake emergencies or crimes in the hope of provoking action by armed law enforcement agencies.……
What a coincidence. Spyware makers, Russia’s Cozy Bear seem to share same exploits
Google researchers note similarities, can’t find smoking-gun link Google’s Threat Analysis Group (TAG) has spotted an interesting pattern: A Kremlin-linked cyber-espionage crew and commercial spyware makers exploiting specific security vulnerabilities in pretty much the same way.… This article has been…
Oh, great. Attacks developed by spyware vendors are being re-used by Russia’s Cozy Bear cretins
Google researchers note the similarities, can’t find a link Google’s Threat Analysis Group (TAG) has spotted a disturbing similarity in attack tactics used by commercial spyware vendors and Russia-linked attack gangs.… This article has been indexed from The Register –…
Feds claim sinister sysadmin locked up thousands of Windows workstations, demanded ransom
Sordid search history ‘evidence’ in case that could see him spend 35 years for extortion and wire fraud A former infrastructure engineer who allegedly locked IT department colleagues out of their employer’s systems, then threatened to shut down servers unless…
Rock Chrome hard enough and get paid half a million
Google revises Chrome Vulnerability Rewards Program with higher payouts for bug hunters Google’s Chrome Vulnerability Rewards Program (VRP) is now significantly more rewarding – with a top payout that’s at least twice as substantial.… This article has been indexed from…
Brain Cipher claims attack on Olympic venue, promises 300 GB data leak
French police reckon financial system targeted during Summer Games Nearly four weeks after the cyberattack on dozens of French national museums during the Olympic Games, the Brain Cipher ransomware group claims responsibility for the incident and says 300 GB of…
CrowdStrike’s meltdown didn’t dent its market dominance … yet
Total revenue for Q2 grew 32 percent CrowdStrike’s major meltdown a month ago doesn’t look like affecting the cyber security vendor’s market dominance anytime soon, based on its earnings reported Wednesday.… This article has been indexed from The Register –…
Microsoft hosts a security summit but no press, public allowed
CrowdStrike, other vendors, friendly govt reps…but not anyone would can tell you what happened op-ed Microsoft will host a security summit next month with CrowdStrike and other “key” endpoint security partners joining the fun — and during which the CrowdStrike-induced…
Proof-of-concept code released for zero-click critical Windows vuln
If you haven’t deployed August’s patches, get busy before others do Windows users who haven’t yet installed the latest fixes to their operating systems will need to get a move on, as code now exists to exploit a critical Microsoft…
Iran’s Pioneer Kitten hits US networks via buggy Check Point, Palo Alto gear
The government-backed crew also enjoys ransomware as a side hustle Iranian government-backed cybercriminals have been hacking into US and foreign networks as recently as this month to steal sensitive data and deploy ransomware, and they’re breaking in via vulnerable VPN…
Dick’s Sporting Goods discloses cyberattack
Authorities probing unwanted intrusion; hard questions ahead Dick’s Sporting Goods, America’s largest retail chain for outdoorsy types, has admitted that it suffered a cyberattack last week.… This article has been indexed from The Register – Security Read the original article:…