Leaked chats and spilled secrets as AI helps decode circa 200K private talks Southern Water neither confirms nor denies offering Black Basta a $750,000 ransom payment following its ransomware attack in 2024.… This article has been indexed from The Register…
Tag: The Register – Security
How nice that state-of-the-art LLMs reveal their reasoning … for miscreants to exploit
Blueprints shared for jail-breaking models that expose their chain-of-thought process Analysis AI models like OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking can mimic human reasoning through a process called chain of thought.… This article has been indexed from The…
Google binning SMS MFA at last and replacing it with QR codes
Everyone knew texted OTPs were a dud back in 2016 Google has confirmed it will phase out the use of SMS text messages for multi-factor authentication in favor of more secure technologies.… This article has been indexed from The Register…
US Dept of Housing screens sabotaged to show deepfake of Trump sucking Elon’s toes
‘Appropriate action will be taken,’ we’re told – as federal HR email sparks uproar, ax falls on CISA staff Visitors to the US Department of Housing and Urban Development’s headquarters in the capital got some unpleasant viewing on Monday morning…
Shifting the cybersecurity odds
Four domains to build resilience Partner Content Security can feel like fighting a losing battle, but it doesn’t have to be.… This article has been indexed from The Register – Security Read the original article: Shifting the cybersecurity odds
The software UK techies need to protect themselves now Apple’s ADP won’t
No matter how deep you are in Apple’s ‘ecosystem,’ there are ways to stay encrypted in the UK Apple customers, privacy advocates, and security sleuths have now had the weekend to stew over the news of the iGadget maker’s decision…
Rather than add a backdoor, Apple decides to kill iCloud E2EE for UK peeps
PLUS: SEC launches new crypto crime unit; Phishing toolkit upgraded; and more Infosec in brief Apple has responded to the UK government’s demand for access to its customers’ data stored in iCloud by deciding to turn off its Advanced Data…
Experts race to extract intel from Black Basta internal chat leaks
Researchers say there’s dissent in the ranks. Plus: An AI tool lets you have a go yourself at analysing the data Hundreds of thousands of internal messages from the Black Basta ransomware gang were leaked by a Telegram user, prompting…
Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws
PoC exploit code shows why this is a patch priority Security engineers have released a proof-of-concept exploit for four critical Ivanti Endpoint Manager bugs, giving those who haven’t already installed patches released in January extra incentive to revisit their to-do…
Thailand ready to welcome 7,000 trafficked scam call center victims back from Myanmar
It comes amid a major crackdown on the abusive industry that started during COVID Thailand is preparing to receive thousands of people rescued from scam call centers in Myanmar as the country launches a major crackdown on the pervasive criminal…
Linux royalty backs adoption of Rust for kernel code, says its rise is inevitable
Nobody wants memory bugs. Penguinistas continue debate on how to squish ’em Some Linux kernel maintainers remain unconvinced that adding Rust code to the open source project is a good idea, but its VIPs are coming out in support of…
Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes
Said bugs ‘can have significant implications’ – glad to hear that from Redmond Microsoft is so concerned about security in its Copilot products for folks that it’s lifted bug bounty payments for moderate-severity vulnerabilities from nothing to a maximum of…
Oops, some of our customers’ Power Pages sites were exploited, says Microsoft
Don’t think this is SaaS and you can relax: Redmond wants a few of you to check your websites Microsoft has fixed a security flaw in its Power Pages website-building SaaS, after criminals got there first – and urged users…
US minerals company says crooks broke into email and helped themselves to $500K
A painful loss for young company that’s yet to generate revenue A NASDAQ-listed US minerals company says cybercriminals broke into its systems on Valentine’s Day and paid themselves around $500,000 – money earmarked for a vendor.… This article has been…
Critical flaws in Mongoose library expose MongoDB to data thieves, code execution
Bugs fixed, updating to the latest version is advisable Security sleuths found two critical vulnerabilities in a third-party library that MongoDB relies on, which means bad guys can potentially steal data and run code.… This article has been indexed from…
Two arrested after pensioner scammed out of six-figure crypto nest egg
The latest in a long line of fraud stings worth billions each year Two men are in police custody after being arrested in connection with a July cryptocurrency fraud involving a man in his seventies.… This article has been indexed…
Ghost ransomware crew continues to haunt IT depts with scarily bad infosec
FBI and CISA issue reminder – deep sigh – about the importance of patching and backups The operators of Ghost ransomware continue to claim victims and score payments, but keeping the crooks at bay is possible by patching known vulnerabilities…
Medusa ransomware gang demands $2M from UK private health services provider
2.3 TB held to ransom as biz formerly known as Virgin Care tells us it’s probing IT ‘security incident’ Exclusive HCRG Care Group, a private health and social services provider, has seemingly fallen victim to the Medusa ransomware gang, which…
US Army soldier linked to Snowflake extortion rampage admits breaking the law
That’s the way the cookie melts A US Army soldier suspected of hacking AT&T and Verizon has admitted leaking online people’s private call records.… This article has been indexed from The Register – Security Read the original article: US Army…
US Army soldier linked to Snowflake extortion admits breaking the law
That’s the way the cookie melts A US Army soldier suspected of hacking AT&T and Verizon has admitted leaking online people’s private call records.… This article has been indexed from The Register – Security Read the original article: US Army…