The Register
Microsoft: Another Chinese cyberspy crew targeting US critical orgs 'as of yesterday'
A Chinese government-linked group that Microsoft tracks as Storm-0227 yesterday started targeting critical infrastructures organisations and US government agencies, according to Redmond's threat intel team.…
Solana blockchain's popular web3.js npm package backdoored to steal keys, funds
Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry, according to an advisory issued Wednesday by project maintainer Steven Luscher.…
Explore strategies for effective endpoint control
Webinar Managing endpoints in today's dynamic IT environments is becoming increasingly complex.…
British hospitals hit by cyberattacks still battling to get systems back online
Both National Health Service trusts that oversee the various hospitals hit by separate cyberattacks last week have confirmed they're still in the process of restoring systems.…
BT Group confirms attackers tried to break into Conferencing division
BT Group confirmed it is dealing with an attempted attack on one of its legacy business units after the Black Basta ransomware group claimed they broke in.…
Shape the future of UK cyber security
Partner Content The opportunity to identify, foster and nurture talented young people towards a cyber security career should always be grabbed with both hands.…
Ransomware hangover, Putin grudge blamed for vodka maker's bankruptcy
Two US subsidiaries of alcohol giant Stoli Group filed for bankruptcy protection this week over financial difficulties exacerbated by an August ransomware attack.…
T-Mobile US CSO: Spies jumped from one telco to another in a way 'I've not seen in my career'
interview While Chinese-government-backed spies maintained access to US telecommunications providers' networks for months – and in some cases still haven't been booted out – T-Mobile US thwarted successful attacks on its systems "within a single-digit number of days," according to the carrier's security boss Jeff Simon.…
Cops arrest suspected admin of German-language crime bazaar
German authorities say they have again shut down the perhaps unwisely named Crimenetwork platform and arrested a suspected admin.…
Microsoft says premature patch could make Windows Recall forget how to work
Microsoft has pinned down why some eager Windows Insiders could not persuade the Recall preview to save any snapshots. It's all down to a pesky non-security preview.…
Eurocops take down 'secure' criminal chat system known as Matrix
French and Dutch police have taken down the Matrix chat app, which was designed by criminals for criminals to be a secure encrypted messaging tool.…
FTC scolds two data brokers for allegedly selling your location to the metre
The FTC has reached a settlement with two data brokerages over allegations they harvested precise location data that shows when people entered hospitals, places of worship, and even attended protests supporting the late George Floyd.…
Perfect 10 directory traversal vuln hits SailPoint's IAM solution
It's time to rev up those patch engines after SailPoint disclosed a perfect 10/10 severity vulnerability in its identity and access management (IAM) platform IdentityIQ.…
Major energy contractor reports 'limited' access to IT after ransomware locks files
American energy contractor ENGlobal disclosed that access to its IT systems remains limited following a ransomware infection in late November.…
Severity of the risk facing the UK is widely underestimated, NCSC annual review warns
The number of security threats in the UK that hit the country's National Cyber Security Centre's (NCSC) maximum severity threshold has tripled compared to the previous 12 months.…
Russia gives life sentence to Hydra dark web kingpin after seizing a ton of drugs
A Russian court has handed a life sentence to the head of the infamous online drugs souk Hydra, and 15 of his co-conspirators will also spend many years behind bars.…
Data on 760K workers from Xerox, Nokia, BofA, Morgan Stanley and more dumped online
Hundreds of thousands of employees from major corporations including Xerox, Nokia, Koch, Bank of America, Morgan Stanley and others appear to be the latest victims in a massive data breach linked to last year's attacks on file transfer tool MOVEit.…
AWS unveils cloud security IR service for a mere $7K a month
Re:Invent Amazon Web Services has a new incident response service that combines automation and people to protect customers' AWS accounts - at a hefty price.…
Discover the future of Linux security
Webinar Linux security is a component that sits at the heart of today's IT landscape.…
Russia arrests one of its own – a cybercrime suspect on FBI's most wanted list
An alleged former affiliate of the LockBit and Babuk ransomware operations, who also just happens to be one of the most wanted cybercriminals in the US, is now reportedly in handcuffs.…