The Register
Mastercard splurges $2.65B on another big cyber buy – Recorded Future
Mastercard has added another security asset to its growing portfolio, laying down $2.65 billion for threat intelligence giant Recorded Future.…
Adobe patches Acrobat bug, neglects to mention whole zero-day, exploit thing
Adobe's patch for a remote code execution (RCE) bug in Acrobat doesn't mention that the vulnerability is considered a zero-day nor that a proof-of-concept (PoC) exploit exists, a researcher warns.…
Google Chrome gets a mind of its own for some security fixes
Google has enhanced Chrome's Safety Check so that it can make some security decisions on the user's behalf.…
Transport for London confirms 5,000 users' bank data exposed, pulls large chunks of IT infra offline
Breaking Transport for London's ongoing cyber incident has taken a dark turn as the organization confirmed that some data, including bank details, might have been accessed, and 30,000 employees' passwords will need to be reset via in-person appointments.…
EU kicks off an inquiry into Google's AI model
The European Union's key regulator for data privacy, Ireland's Data Protection Commission (DPC), has launched a cross-border inquiry into Google's AI model to ascertain if it complies with the bloc's rules.…
About that Windows Installer 'make me admin' security hole. Here's how it's exploited
In this week's Patch Tuesday Microsoft alerted users to, among other vulnerabilities, a flaw in Windows Installer that can be exploited by malware or a rogue user to gain SYSTEM-level privileges to hijack a PC.…
Mind your header! There's nothing refreshing about phishers' latest tactic
Palo Alto's Unit 42 threat intel team wants to draw the security industry's attention to an increasingly common tactic used by phishers to harvest victims' credentials.…
NIS2, DORA, and Tiber-EU expanding cybersecurity regulation
Webinar As cybersecurity threats evolve, so do the regulations designed to protect businesses.…
If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM
An anti-piracy system to protect online video streams from unauthorized copying is flawed – and can be broken to allow streamed media from Amazon, Netflix, and others to be saved, replayed, and spread at will, we're told.…
Pokémon GO was an intelligence tool, claims Belarus military official
A defense ministry official from Belarus has claimed augmented reality game Pokémon GO was a tool of Western intelligence agencies.…
Healthcare giant to pay $65M settlement after crooks stole and leaked nude patient pics
A US healthcare giant will pay out $65 million to settle a class-action lawsuit brought by its own patients after ransomware crooks stole their data – including their nude photographs – and published at least some of them online.…
Cyber crooks shut down UK, US schools, thousands of kids affected
Cybercriminals closed some schools in America and Britain this week, preventing kindergarteners in Washington state from attending their first-ever school day and shutting down all internet-based systems for Biggin Hill-area students in England for the next three weeks.…
Major sales and ops overhaul leads to much more activity ... for Meow ransomware gang
The Meow ransomware group has grabbed the second most active gang spot in an unexpected surge in activity following a major brand overhaul.…
Hunters International claims ransom on Chinese mega-bank's London HQ
Ransomware gang Hunters International reportedly claims to have stolen more than 5.2 million files belonging to the London branch of the Industrial and Commercial Bank of China (ICBC), a Chinese state-owned bank and financial service corporation, and set a deadline of September 13 to release all the data.…
So you paid a ransom demand … and now the decryptor doesn't work
For C-suite execs and security leaders, discovering your organization has been breached, your critical systems locked up and your data stolen, then receiving a ransom demand, is probably the worst day of your professional life.…
How $20 and a lapsed domain allowed security pros to undermine internet integrity
While trying to escape the Las Vegas heat during Black Hat last month, watchTowr Labs researchers decided to poke around for weaknesses in the WHOIS protocol. They claim to have found a way to undermine certificate authorities, which the world trusts to keep the internet safe by verifying the identity of websites.…
Mind the talent gap: Infosec vacancies abound, but hiring is flat
The shortfall between the number of working security professionals and the number of security job openings has reached 4.8 million – a new high, according to cyber security non-profit ISC2.…
India to train 5000 'Cyber Commandos'
India has announced a plan to train a specialized wing of 5000 "Cyber Commandos" in the next five years, as part of its efforts to address cyber crime.…
Microsoft says it broke some Windows 10 patching – as it fixes flaws under attack
Patch Tuesday Another Patch Tuesday has dawned, as usual with the unpleasant news that there are pressing security weaknesses and blunders to address.…
Crypto scams rake in $5.6B a year for cyberscum lowlifes, FBI says
The FBI just dropped its annual report examining the costs of crypto-related cybercrime, painting a predictably grim picture as total losses in the US exceeded $5.6 billion in 2023 – a 45 percent year-on-year increase.…