Feds probe massive alleged classified US govt data theft and leak

The Register - Thu, 04/04/2024 - 19:20
State Dept keeps schtum 'for security reasons'

Uncle Sam is investigating claims that some miscreant stole and leaked classified information from the Pentagon and other national security agencies.…

Categories: News

Ivanti commits to secure-by-design overhaul after vulnerability nightmare

The Register - Thu, 04/04/2024 - 16:07
CEO addresses whirlwind start to 2024 and how it plans to prevent a repeat

Ivanti has committed to adopting a secure-by-design approach to security as it gears up for an organizational overhaul in response to the multiple vulnerabilities in Connect Secure exploited earlier this year.…

Categories: News

Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits

The Register - Thu, 04/04/2024 - 11:49
INC Ransom emerges as a growing threat as some ex-LockBit/ALPHV affiliates get new gigs

Leicester City Council is finally admitting its "cyber incident" was carried out by a ransomware gang and that data was stolen, hours after the criminals forced its hand.…

Categories: News

When AI attacks

The Register - Thu, 04/04/2024 - 09:56
Watch this webinar for a hair raising journey into the darkest depths of GenAI enabled cyber crime

Sponsored Post  Artificial intelligence (AI) offers enormous commercial potential but also substantial risks to data security if it is harnessed by cyber criminals intent on stealing or corrupting sensitive information for their own gain.…

Categories: News

Nearly 1M medical records feared stolen from City of Hope cancer centers

The Register - Thu, 04/04/2024 - 00:33
Is there no cure for this cyber-plague?

Nearly one million individuals' personal details, financial account information, and medical records may have been stolen from City of Hope systems in the United States.…

Categories: News

Omni Hotels IT systems down since Friday, hitting bookings, payments, door locks

The Register - Wed, 03/04/2024 - 20:28
As WhatsApp, Facebook Messenger, and other Meta bits fall offline today

Luxury resort chain Omni Hotels & Resorts has had its computer systems knocked offline since Friday in what it has described as a "disruption," though sounds a lot like the MGM Resorts ransomware infection over the summer.…

Categories: News

Security pioneer Ross Anderson dies at 67

The Register - Wed, 03/04/2024 - 13:48
A man with a list of accolades long enough for several lifetimes, friends remember his brilliance

Obituary  Venerable computer scientist and information security expert Ross Anderson has died at the age of 67.…

Categories: News

Google bakes new cookie strategy that will leave crooks with a bad taste

The Register - Wed, 03/04/2024 - 13:08
Device Bound Session Credentials said to render cookie theft useless

Google reckons that cookie theft is a problem for users, and is seeking to address it with a mechanism to tie authentication data to a specific device, rendering any stolen cookies useless.…

Categories: News

Meet clickjacking's slicker cousin, 'gesture jacking,' aka 'cross window forgery'

The Register - Wed, 03/04/2024 - 07:33
Web devs advised to do their part to limit UI redress attacks

Web browsers still struggle to prevent clickjacking, an attack technique first noted in 2008 that repurposes web page interface elements to deceive visitors.…

Categories: News

Microsoft slammed for lax security that led to China's cyber-raid on Exchange Online

The Register - Wed, 03/04/2024 - 03:15
CISA calls for 'fundamental, security-focused reforms' to happen ASAP, delaying work on other software

A review of the June 2023 attack on Microsoft's Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a China-linked group called "Storm-0558" – has found that the incident would have been preventable save for Microsoft's lax infosec culture and sub-par cloud security precautions.…

Categories: News

Feds finally decide to do something about years-old SS7 spy holes in phone networks

The Register - Wed, 03/04/2024 - 00:17
And Diameter, too, for good measure

The FCC appears to finally be stepping up efforts to secure decades-old flaws in American telephone networks that are allegedly being used by foreign governments and surveillance outfits to remotely spy on and monitor wireless devices.…

Categories: News

OWASP server blunder exposes decade of resumes

The Register - Tue, 02/04/2024 - 19:30
Irony alerts: Open Web Application Security Project Foundation suffers lapse

A misconfigured MediaWiki web server allowed digital snoops to access members' resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.…

Categories: News

Pandabuy admits to data breach of 1.3 million unique records

The Register - Tue, 02/04/2024 - 17:30
Nothing says 'sorry' like 10 percent off shipping for a month

Ecommerce platform Pandabuy has apologized after two cybercriminals were spotted hawking personal data belonging to 1.3 million customers.…

Categories: News

Microsoft warns deepfake election subversion is disturbingly easy

The Register - Tue, 02/04/2024 - 16:00
Simple stuff like slapping on a logo fools more folks and travels further

As hundreds of millions of voters around the globe prepare to elect their leaders this year, there's no question that trolls will try to sway the outcomes using AI, according to Clint Watts, general manager of Microsoft's Threat Analysis Center.…

Categories: News

Rubrik files to go public following alliance with Microsoft

The Register - Tue, 02/04/2024 - 14:30
Cloud cyber resilience model could raise $700M despite $278M losses

Cloud security provider Rubrik has filed for an IPO on the New York Stock Exchange following a flurry of similar flotations.…

Categories: News

Polish officials may face criminal charges in Pegasus spyware probe

The Register - Tue, 02/04/2024 - 13:00
Victims of the powerful surveillance tool will soon find out the truth

Former Polish government officials may face criminal charges following an investigation into their use of the notorious spyware Pegasus to surveil political opponents and others.…

Categories: News

INC Ransom claims to be behind 'cyber incident' at UK city council

The Register - Tue, 02/04/2024 - 12:15
This follows attack on NHS services in Scotland last week

The cyber skids at INC Ransom are claiming responsbility for the ongoing cybersecurity incident at Leicester City Council, according to a post caught by eagle-eyed infosec watchers.…

Categories: News

Happy 20th birthday Gmail, you're mostly grown up – now fix the spam

The Register - Tue, 02/04/2024 - 10:27
Senders of more than 5K messages a day are in the crosshairs

It was 20 years ago on Monday that Google unleashed Gmail on the world, and the chocolate factory is celebrating with new rules that just might, hopefully, cut down on the amount of spam users receive.…

Categories: News

Apple's GoFetch silicon security fail was down to an obsession with speed

The Register - Tue, 02/04/2024 - 08:30
Ye cannae change the laws of physics, but you can change your mind

Opinion  Apple is good at security. It's good at processors. Thus GoFetch, a major security flaw in its processor architecture, is a double whammy.…

Categories: News

Six banks share customer info to help Singapore fight money laundering

The Register - Tue, 02/04/2024 - 01:59
PLUS: Google Cloud ANZ boss departs; Japan revives airliner ambitions; China-linked attackers target Asian entities

ASIA IN BRIEF  Singapore's Monetary Authority on Monday launched an application, intuitively named "COllaborative Sharing of Money Laundering/TF Information & Cases" (COSMIC for short, obviously) to target money laundering and terrorism financing.…

Categories: News


Subscribe to Sec Tec Limited aggregator - News