UK councils bat away DDoS barrage from pro-Russia keyboard warriors
Local authority websites downed in response to renewed support for Ukraine
Cyber-crime01 Nov 2024 | 16
Connor is a cybersecurity journalist for The Register, reporting on what you need to know to keep your systems secure. Based in the UK, he has previously held positions ranging from news editor to staff writer.
LottieFiles supply chain attack exposes users to malicious crypto wallet drainer
A scary few Halloween hours for team behind hugely popular web plugin
Cyber-crime31 Oct 2024 | 11
Russian spies use remote desktop protocol files in unusual mass phishing drive
The prolific Midnight Blizzard crew cast a much wider net in search of scrummy intel
Cyber-crime30 Oct 2024 | 17
Belgian cops cuff 2 suspected cybercrooks in Redline, Meta infostealer sting
US also charges an alleged Redline dev, no mention of an arrest
Cyber-crime29 Oct 2024 | 1
Admins better Spring into action over latest critical open source vuln
Patch up: The Spring framework dominates the Java ecosystem
Security29 Oct 2024 | 1
Delta officially launches lawyers at $500M CrowdStrike problem
Legal action comes months after alleging negligence by Falcon vendor
Cybersecurity Month28 Oct 2024 | 23
Dutch cops pwn the Redline and Meta infostealers, leak 'VIP' aliases
Legal proceedings underway with more details to follow
Cybersecurity Month28 Oct 2024 | 5
Here's a NIS2 compliance checklist since no one cares about deadlines anymore
Only two EU members have completed the transposition into domestic law
Cybersecurity Month24 Oct 2024 | 11
Akira ransomware is encrypting victims again following pure extortion fling
Crooks revert to old ways for greater efficiency
Cybersecurity Month22 Oct 2024 | 2
Pixel perfect Ghostpulse malware loader hides inside PNG image files
Miscreants combine it with an equally tricky piece of social engineering
Cybersecurity Month22 Oct 2024 | 34
macOS HM Surf vuln might already be under exploit by major malware family
Like keeping your camera and microphone private? Patch up
Cybersecurity Month21 Oct 2024 | 14
Alleged Bitcoin crook faces 5 years after SEC's X account pwned
SIM swappers strike again, warping cryptocurrency prices
Cybersecurity Month18 Oct 2024 | 14
ESET denies it was compromised as Israeli orgs targeted with 'ESET-branded' wipers
Says 'limited' incident isolated to 'partner company'
Cybersecurity Month18 Oct 2024 | 3
Healthcare Services Group discloses 'cybersecurity incident' in SEC filing
Laundry and dining provider still investigating cause and scope
Cybersecurity Month18 Oct 2024 | 5
Uncle Sam puts $10M bounty on Russian troll farm Rybar
Propaganda op focuses on anti-West narratives to meddle with elections
Security18 Oct 2024 | 9
Brazilian police claim they've cuffed serial cybercrook behind FBI and Airbus attacks
Early stage opsec failures lead to landmark arrest of suspected serial data thief
Cybersecurity Month17 Oct 2024 | 3
WeChat devs introduced security flaws when they modded TLS, say researchers
No attacks possible, but enough issues to cause concern
Cybersecurity Month17 Oct 2024 | 15
US contractor pays $300K to settle accusation it didn't properly look after Medicare users' data
Resolves allegations it improperly stored screenshots containing PII that were later snaffled
Cybersecurity Month16 Oct 2024 | 7
Microsoft says more ransomware stopped before reaching encryption
Volume of attacks still surging though, according to Digital Defense Report
Cyber-crime15 Oct 2024 | 6
Microsoft says tougher punishments needed for state-sponsored cybercriminals
Although it also reaffirmed commitment to secure-by-design initiatives
Cloud Infrastructure Month15 Oct 2024 | 17
US healthcare org admits up to 400,000 people's personal info was snatched
It waited till just before Columbus Day weekend to make mandated filing, but don't worry, we saw it
Cybersecurity Month14 Oct 2024 | 3
Thousands of Fortinet instances vulnerable to actively exploited flaw
No excuses for not patching this nine-month-old issue
Cybersecurity Month14 Oct 2024 | 8
INC ransomware rebrands to Lynx – same code, new name, still up to no good
Researchers point to evidence that scumbags visited the strategy boutique
Cybersecurity Month11 Oct 2024 | 10
Ukraine cyber cops collar man who allegedly hooked citizens up to Russian internet
'Self-taught hacker' facing a possible 15 years in the slammer
Cybersecurity Month11 Oct 2024 | 10
Keir Starmer hands ex-Darktrace boss investment minister gig
What's harder? Convincing people to invest in a beleaguered security business or a tiny island everybody hates?
Public Sector11 Oct 2024 | 53
CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame
Usual three-week window to address significant risks to federal agencies applies
Cybersecurity Month10 Oct 2024 |
Mozilla patches critical Firefox vuln that attackers are already exploiting
Firefixed: It's maintenance time for low-complexity, high-impact security flaw
Cybersecurity Month10 Oct 2024 | 26
About a quarter million Comcast subscribers had their data stolen from debt collector
Cable giant says ransomware involved, FBCS keeps schtum
Cybersecurity Month04 Oct 2024 | 6
Apple fixes bug that let VoiceOver shout your passwords
Not a great look when the iGiant just launched its first password manager
Cybersecurity Month04 Oct 2024 | 6
Sensitive data on 61K+ patients accessed in Alabama hospital cyberattack
Intruder pored over medical records, insurance details, Social Security numbers in some cases
Cybersecurity Month03 Oct 2024 |
Two British-Nigerian men sentenced over multimillion-dollar business email scam
Fraudsters targeted local government, colleges, and construction firms in Texas and North Carolina
Cybersecurity Month03 Oct 2024 | 13
Brits hate how big tech handles their data, but can't be bothered to do much about it
Managing the endless stream of cookie banners leaves little energy for anything else
Cybersecurity Month03 Oct 2024 | 38
'Patch yesterday': Zimbra mail servers under siege through RCE vuln
Attacks began the day after public disclosure
Cybersecurity Month02 Oct 2024 | 5
Euro cops arrest 4 including suspected LockBit dev chilling on holiday
And what looks like proof stolen data was never deleted even after ransom paid
Cybersecurity Month01 Oct 2024 | 15
Evil Corp's deep ties with Russia and NATO member attacks exposed
Ransomware criminals believed to have taken orders from intel services
Cyber-crime01 Oct 2024 | 9
NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate
Aleksandr Ryzhenkov alleged to have extorted around $100M from victims, built 60 LockBit attacks
Cybersecurity Month01 Oct 2024 |
If you're holding important data, Iran is probably trying spearphish it
It's election year for more than 50 countries and the Islamic Republic threatens a bunch of them
Cyber-crime30 Sep 2024 | 6
Cloud threats have execs the most freaked out because they're not prepared
Ransomware? More like 'we don't care' for everyone but CISOs
Research30 Sep 2024 | 3
Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud
Defenders beware: Data theft, extortion, and backdoors on Storm-0501's agenda
Research27 Sep 2024 | 6
Victims lose $70K to one single wallet-draining app on Google's Play Store
Attackers got 10K people to download 'trusted' web3 brand cheat before Mountain View intervened
Cyber-crime26 Sep 2024 | 22
Public Wi-Fi operator investigating cyberattack at UK's busiest train stations
Updated See it, say it… not sorted just yet as network access remains offline
Cyber-crime26 Sep 2024 | 62
RansomHub genius tries to put the squeeze on Delaware Libraries
Extorting underfunded public services for $1M isn't a good look
Cyber-crime25 Sep 2024 | 5
Northern Ireland cops whose info was leaked in 2023 may get £240M+ damages
Officers put in danger when republican dissidents grabbed hold of their names and details
Legal25 Sep 2024 | 2
Russia's digital warfare on Ukraine shows no signs of slowing: Malware hits surge
Severe incidents may be down, but Putin had to throw one in for good measure
Cyber-crime24 Sep 2024 | 9
How to spot a North Korean agent before they get comfy inside payroll
Mandiant publishes cheat sheet for weeding out fraudulent IT staff
Cyber-crime24 Sep 2024 | 19
Necro malware continues to haunt side-loaders of dodgy Android mods
Updated 11M devices exposed to trojan, Kaspersky says
Cyber-crime23 Sep 2024 | 2
UPS supplier's password policy flip-flops from unlimited, to 32, then 64 characters
That 'third party' person sure is responsible for a lot of IT blunders, eh?
Security23 Sep 2024 | 38
US indicts two over socially engineered $230M+ crypto heist
Just one victim milked of nearly a quarter of a billion bucks
Cyber-crime20 Sep 2024 | 26
Ivanti patches exploited admin command execution flaw
Fears over chained attacks affecting EOL product
Patches20 Sep 2024 | 8
Cybercrooks strut away with haute couture Harvey Nichols data
Nothing high-end about the sparsely detailed, poorly publicized breach
Cyber-crime20 Sep 2024 | 10
1 in 10 orgs dumping their security vendors after CrowdStrike outage
Many left reeling from July's IT meltdown, but not to worry, it was all unavoidable
Security19 Sep 2024 | 8
Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations
Updated Better check your widgets, people
Research19 Sep 2024 | 7
UK activists targeted with Pegasus spyware ask police to charge NSO Group
4 file complaint with London's Met, alleging malware maker helped autocratic states violate their privacy
Security19 Sep 2024 | 13
Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform
Italian mafia mobsters and Irish crime families scuppered by international cops
Cyber-crime18 Sep 2024 | 18
Rhysida ransomware gang ships off Port of Seattle data for $6M
Auction acts as payback after authority publicly refuses to pay up
Cyber-crime17 Sep 2024 | 2
Predator spyware kingpins added to US sanctions list
Designations come as new infrastructure spins up in Africa
Security17 Sep 2024 | 2
Snowflake slams 'more MFA' button again – months after Ticketmaster, Santander breaches
Now it's the default for all new accounts
Security16 Sep 2024 | 2
Germany’s CDU still struggling to restore data months after June cyberattack
Putting a spanner in work for plans of opposition party to launch a comeback during next year's elections
Cyber-crime16 Sep 2024 | 1
Prison just got rougher as band of heinously violent cybercrims sentenced to lengthy stints
Orchestrators of abductions, torture, crypto thefts, and more get their comeuppance
Cyber-crime16 Sep 2024 | 20
Feeld dating app's security too open-minded as private data swings into public view
No love for months-long wait to fix this, either
Research13 Sep 2024 | 7
Biting the hand that feeds IT
