News

FBI cyber cop: Salt Typhoon pwned 'nearly every American'

The Register - 10 hours 26 min ago
Plus millions of other people across 80+ countries

China's Salt Typhoon cyberspies hoovered up information belonging to millions of people in the United States over the course of the years-long intrusion into telecommunications networks, according to a top FBI cyber official.…

Categories: News

DHS says it needs $100M worth of counter-drone tech to protect America

The Register - Thu, 28/08/2025 - 21:05
Our drones are OK, but those other drones?

The US Department of Homeland Security has revealed plans to spend more than $100 million on systems designed to take out hostile drones.  …

Categories: News

Not in my browser! Vivaldi capo doubles down on generative AI ban

The Register - Thu, 28/08/2025 - 20:33
Web browsing belongs to the people, not the bots

Jon von Tetzchner, CEO of Norway-based browser maker Vivaldi, believes the tech industry's efforts to automate web browsing using generative AI models have gone too far.…

Categories: News

FBI, Dutch cops seize fake ID marketplace that sold identity docs for $9

The Register - Thu, 28/08/2025 - 20:10
$6.4M VerifTools marketplace offline

The FBI and Dutch police today said that they seized two domains and a blog tied to VerifTools, an international criminal marketplace that sold identity documents for as little as $9.…

Categories: News

How does China keep stealing our stuff, wonders DoD group responsible for keeping foreign agents out

The Register - Thu, 28/08/2025 - 19:40
'The homeland is no longer secure,' says Defense Counterintelligence and Security Agency leader

The Pentagon outfit responsible for preventing foriegn agents from infiltrating defense agencies says the US isn't doing a very good job of preventing state secrets from falling into Chinese hands.…

Categories: News

16 billion credentials exposed: why your business needs a password manager now

The Register - Thu, 28/08/2025 - 17:23
Your passwords may already be at risk.

Partner Content  Ever felt that gut punch after losing something important, like your house keys? Now picture those, along with 184 million others, resting in plain sight at the wildest equivalent of Comic-Con for criminals.…

Categories: News

SK Telecom walloped with $97M fine after schoolkid security blunders let attackers run riot

The Register - Thu, 28/08/2025 - 15:53
Regulator points to lack of 'basic access controls' between internet-facing systems, internal network

South Korea's privacy watchdog has slapped SK Telecom with a record ₩134.5 billion ($97 million) fine after finding that the mobile giant left its network wide open to hackers through a catalog of bungles.…

Categories: News

TransUnion admits 4.5M affected after third-party support app breached

The Register - Thu, 28/08/2025 - 14:54
Credit agency offers own services as compensation

Credit scoring and monitoring biz TransUnion says that it recently suffered a breach affecting nearly 4.5 million individuals.…

Categories: News

Thousands of Citrix NetScaler boxes still sitting ducks despite patches

The Register - Thu, 28/08/2025 - 14:17
Shadowserver counts more than 13,000 appliances still wide open – including thousands in US, Germany, and UK

Thousands of Citrix NetScaler appliances remain exposed to a trio of security flaws that the vendor patched this week, one of which is already being actively exploited in the wild.…

Categories: News

Ransomware crooks knock Swedish municipalities offline for measly sum of $168K

The Register - Thu, 28/08/2025 - 13:39
Miljödata meltdown leaves 200 local authorities scrambling over 1.5 BTC

Sweden's municipal governments have been knocked offline after ransomware crooks hit IT supplier Miljödata, reportedly demanding the bargain-basement sum of $168,000.…

Categories: News

Euro banks block billions in rogue PayPal direct debits after fraud glitch

The Register - Thu, 28/08/2025 - 12:41
US payments platform back in action, says it's informing affected customers

Shoppers and merchants in Germany found themselves dealing with billions of euros in frozen transactions this week, thanks to an apparent failure in PayPal's fraud-detection systems.…

Categories: News

Law firm email blunder exposes Church of England abuse victim details

The Register - Thu, 28/08/2025 - 12:02
Apology issued after names tied to redress scheme revealed in mass mailing

A London law firm leaked the details of nearly 200 people who requested to receive updates about the redress scheme set up for victims of abuse at the hands of the Church of England (CoE).…

Categories: News

If you thought China's Salt Typhoon was booted off critical networks, think again

The Register - Thu, 28/08/2025 - 08:32
13 governments sound the alarm about ongoing unpleasantness

China's Salt Typhoon cyberspies continue their years-long hacking campaign targeting critical industries around the world, according to a joint security alert from cyber and law enforcement agencies across 13 countries.…

Categories: News

ChatGPT hates LA Chargers fans

The Register - Thu, 28/08/2025 - 00:59
Harvard researchers find model guardrails tailor query responses to user's inferred politics and other affiliations

OpenAI's ChatGPT appears to be more likely to refuse to respond to questions posed by fans of the Los Angeles Chargers football team than to followers of other teams.…

Categories: News

Sting nails two front firms in Nork IT worker scam

The Register - Wed, 27/08/2025 - 21:27
There's also a rogue Russian on the list

The US Treasury Department has announced sanctions against two Asian companies and two individuals for allegedly helping North Korean IT workers fake their way into US jobs.…

Categories: News

Crims laud Claude to plant ransomware and fake IT expertise

The Register - Wed, 27/08/2025 - 20:53
AI lowers the bar for cybercrime, Anthropic admits

comment  Anthropic, a maker of AI tools, says that AI tools are now commonly used to commit cybercrime and facilitate remote worker fraud.…

Categories: News

Putin on the code: DoD reportedly relies on utility written by Russian dev

The Register - Wed, 27/08/2025 - 19:53
Fast-glob is widely used in government, security lab says

A Node.js utility used by thousands of public projects - and more than 30 Department of Defense ones - appears to have a sole maintainer whose online profiles identify him as a Yandex employee living in Russia.…

Categories: News

Nx NPM packages poisoned in AI-assisted supply chain attack

The Register - Wed, 27/08/2025 - 18:34
Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon

Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being uploaded to the NPM registry on Tuesday evening.…

Categories: News

The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams

The Register - Wed, 27/08/2025 - 17:51
Don't let it happen to you

Storm-0501, a financially motivated cybercrime crew, recently broke into a large enterprise's on-premises and cloud environments, ultimately exfiltrating and destroying data within the org's Azure environment. The criminals then contacted the victim via a Microsoft Teams account that they'd also compromised in the attack, demanding a ransom payment for the stolen files.…

Categories: News

Salesforce data missing? It might be due to Salesloft breach, Google says

The Register - Wed, 27/08/2025 - 14:04
Attackers steal OAuth tokens to access third-party sales platform, then CRM data in 'widespread campaign'

Google says a recent spate of Salesforce-related breaches was caused by attackers stealing OAuth tokens from the third-party Salesloft Drift app.…

Categories: News

Pages

Subscribe to Sec Tec Limited aggregator - News