News

Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant

The Register - 1 hour 47 min ago
Crooks 'like a sysadmin, with a malicious slant'

Exclusive  An extortionist armed with a new variant of MedusaLocker ransomware has infected more than 100 organizations a month since at least 2022, according to Cisco Talos, which recently discovered a "substantial" Windows credential data dump that sheds light on the criminal and their victims.…

Categories: News

Brits hate how big tech handles their data, but can't be bothered to do much about it

The Register - 2 hours 32 min ago
Managing the endless stream of cookie banners leaves little energy for anything else

Fewer than one in five Brits report being happy with the way their personal data is handled by big tech companies, yet the furthest many will go is to reject optional cookies on the web.…

Categories: News

700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking

The Register - Wed, 02/10/2024 - 22:33
With 14 serious security flaws found, what a gift for spies and crooks

Fourteen bugs in DrayTek routers — including one critical remote-code-execution flaw that received a perfect 10 out of 10 CVSS severity rating — could be abused by crooks looking to seize control of the equipment to then steal sensitive data, deploy ransomware, and launch denial-of-service attacks.…

Categories: News

Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

The Register - Wed, 02/10/2024 - 21:39
Poor use of PHP include() strikes again

Two trivial but critical security holes have been found in Optigo's Spectra Aggregation Switch, and so far no patch is available.…

Categories: News

NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great

The Register - Wed, 02/10/2024 - 13:31
Logjam 'hurting infosec processes world over' one expert tells us as US body blows its own Sept deadline

NIST has made some progress clearing its backlog of security vulnerability reports to process – though it's not quite on target as hoped.…

Categories: News

'Patch yesterday': Zimbra mail servers under siege through RCE vuln

The Register - Wed, 02/10/2024 - 11:50
Attacks began the day after public disclosure

"Patch yesterday" is the advice from infosec researchers as the latest critical vulnerability affecting Zimbra mail servers is now being mass-exploited.…

Categories: News

Protecting private data in AI deployments

The Register - Wed, 02/10/2024 - 08:39
Strategies for securing intellectual property in AI systems

Webinar  As enterprises increasingly incorporate AI, the challenge of protecting private intellectual property (IP) often becomes more difficult.…

Categories: News

The fix for BGP's weaknesses has big, scary, issues of its own, boffins find

The Register - Wed, 02/10/2024 - 07:31
Bother, given the White House has bet big on RPKI – just like we all rely on immature internet infrastructure that usually works

The Resource Public Key Infrastructure (RPKI) protocol has "software vulnerabilities, inconsistent specifications, and operational challenges" according to a pre-press paper from a trio of German researchers.…

Categories: News

Euro cops arrest 4 including suspected LockBit dev chilling on holiday

The Register - Tue, 01/10/2024 - 18:35
And what looks like proof stolen data was never deleted even after ransom paid

Building on the success of what's known around here as LockBit Leak Week in February, the authorities say they've arrested a further four individuals with ties to the now-scuppered LockBit ransomware empire.…

Categories: News

Evil Corp's deep ties with Russia and NATO member attacks exposed

The Register - Tue, 01/10/2024 - 16:35
Ransomware criminals believed to have taken orders from intel services

The relationship between infamous cybercrime outfit Evil Corp and the Russian state is thought to be extraordinarily close, so close that intelligence officials allegedly ordered the criminals to carry out cyberattacks on NATO members.…

Categories: News

NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate

The Register - Tue, 01/10/2024 - 15:08
Aleksandr Ryzhenkov alleged to have extorted around $100M from victims, built 60 LockBit attacks

The latest installment of the National Crime Agency's (NCA) series of ransomware revelations from February's LockBit Leak Week emerges today as the agency identifies a man it not only believes is a member of the long-running Evil Corp crime group but also a LockBit affiliate.…

Categories: News

Australian e-tailer digiDirect customers' info allegedly stolen and dumped online

The Register - Tue, 01/10/2024 - 01:26
Full names, contact details, and company info – all the fixings for a phishing holiday

Data allegedly belonging to more than 304,000 customers of Australian camera and tech e-tailer digiDirect has been leaked to an online cyber crime forum.…

Categories: News

Rackspace monitoring systems hit by zero-day

The Register - Tue, 01/10/2024 - 00:08
Intruders accessed internal web servers, limited info ... customers told not to worry

Exclusive  Rackspace has told customers intruders exploited a zero-day bug in a third-party application it was using, and abused that vulnerability to break into its internal performance monitoring environment. That intrusion forced the cloud-hosting outfit to temporarily take its monitoring dashboard offline for customers.…

Categories: News

Ransomware forces hospital to turn away ambulances

The Register - Mon, 30/09/2024 - 23:16
Only level-one trauma unit in 400 miles crippled

Ransomware scumbags have caused a vital hospital to turn away ambulances after infecting its computer systems with malware.…

Categories: News

T-Mobile US to cough up $31.5M after that long string of security SNAFUs

The Register - Mon, 30/09/2024 - 22:59
At least seven intrusions in five years? Yeah, those promises of improvement more than 'long overdue'

T-Mobile US has agreed to fork out $31.5 million to improve its cybersecurity and pay a fine after a string of network intrusions affected millions of customers between 2021 and 2023.…

Categories: News

If you're holding important data, Iran is probably trying spearphish it

The Register - Mon, 30/09/2024 - 14:35
It's election year for more than 50 countries and the Islamic Republic threatens a bunch of them

US and UK national security agencies are jointly warning about Iranian spearphishing campaigns, which remain an ongoing threat to various industries and governments.…

Categories: News

Remote ID verification tech is often biased, bungling, and no good on its own

The Register - Mon, 30/09/2024 - 13:40
Only 2 out of 5 tested products were equitable across demographics

A study by the US General Services Administration (GSA) has revealed that five remote identity verification (RiDV) technologies are unreliable, inconsistent, and marred by bias across different demographic groups.…

Categories: News

Cloud threats have execs the most freaked out because they're not prepared

The Register - Mon, 30/09/2024 - 12:30
Ransomware? More like 'we don't care' for everyone but CISOs

Efficiency and scalability are key benefits of enterprise cloud computing, but they come at a cost. Security threats specific to cloud environments are the leading cause of concern among top executives and they're also the ones organizations are least prepared to address.…

Categories: News

AI code helpers just can't stop inventing package names

The Register - Mon, 30/09/2024 - 04:59
LLMs are helpful, but don't use them for anything important

AI models just can't seem to stop making things up. As two recent studies point out, that proclivity underscores prior warnings not to rely on AI advice for anything that really matters.…

Categories: News

Forget the Kia Boyz: Hackers could hijack your car with just a smartphone

The Register - Mon, 30/09/2024 - 04:02
PLUS: UK man charged with hacking US firms for stock secrets; ransomware actor foils self; and more

Infosec In Brief  Put away that screwdriver and USB charging cable – the latest way to steal a Kia just requires a cellphone and the victim's license plate number.…

Categories: News

Pages

Subscribe to Sec Tec Limited aggregator - News