News
UK Home Office opens wallet for £60M automated number plate project
The UK's Home Office is inviting tech suppliers to take part in a £60 million "market engagement" for an application that uses data from automated number plate recognition (ANPR) systems.…
Credential stuffing: £2.31 million fine shows passwords are still the weakest link
Partner Content If you're still using "password123" for more than one account, there's a good chance you've already exposed yourself to credential stuffing attacks — one of the most prevalent and damaging forms of automated cybercrime today. Just ask the 6.9 million users of 23andMe who discovered their personal details were compromised when cybercriminals used recycled credentials from other breaches to infiltrate their accounts.…
Scattered Lapsus$ Hunters offering $10 in Bitcoin to 'endlessly harass' execs
Scattered Lapsus$ Hunters has launched an unusual crowdsourced extortion scheme, offering $10 in Bitcoin to anyone willing to help pressure their alleged victims into paying ransoms.…
Radiant Group won't touch kids' data now, but apparently hospitals are fair game
First they targeted a preschool network, now new kids on the ransomware block Radiant Group say they've hit a hospital in the US, continuing their deplorable early cybercrime careers.…
Thieves steal IDs and payment info after data leaks from Discord support vendor
Discord has confirmed customers' data was stolen – but says the culprit wasn't its own servers, just a compromised support vendor.…
Jaguar Land Rover engines ready to roar again after weeks-long cyber stall
Jaguar Land Rover is readying staff to resume manufacturing in the coming days, a company spokesperson confirmed to The Reg.…
Clop crew hits Oracle E-Business Suite users with fresh zero-day
Oracle rushed out an emergency fix over the weekend for a zero-day vulnerability in its E-Business Suite (EBS) that criminal crew Clop has already abused for data theft and extortion.…
Leak suggests US government is fibbing over FEMA security failings
Infosec in brief On August 29, the US Federal Emergency Management Agency fired its CISO, CIO, and 22 other staff for incompetence but insisted it wasn't in response to an online attack. New material suggests FEMA's claim may be false.…
Red Hat fesses up to GitLab breach after attackers brag of data theft
What started as cyber crew bragging has now been confirmed by Red Hat: someone gained access to its consulting GitLab system and walked away with data.…
Apple ices ICE agent tracker app under government heat
Apple has deep-sixed an app that tracks the movements of US Immigration and Customs Enforcement (ICE) agents – apparently bowing to government pressure.…
Munich Airport chaos after drone sightings spook air traffic control
Munich Airport was temporarily closed last night following reports of drones buzzing around the area.…
UK government says digital ID won't be compulsory – honest
The British government has finally given more details about the proposed digital ID project, directly responding to the 2.76 million naysayers that signed an online petition calling for it to be ditched.…
Oracle tells Clop-targeted EBS users to apply July patch, problem solved
Oracle has finally broken its silence on those Clop-linked extortion emails, but only to tell customers what they already should have known: patch your damn systems.…
Criminals take Renault UK customer data for a joyride
Renault UK customers are being warned their personal data may be in criminal hands after one of its supplier was hacked.…
Subpoena tracking platform blames outage on AWS social engineering attack
A software platform used by law enforcement agencies and major tech companies to manage subpoenas and data requests went dark this week after attackers socially engineered AWS into freezing its domain.…
Clop-linked crims shake down Oracle execs with data theft claims
Criminals with potential links to the notorious Clop ransomware mob are bombarding Oracle execs with extortion emails, claiming to have stolen sensitive data from Big Red's E-Business Suite, according to researchers.…
EU funds are flowing into spyware companies, and politicians are demanding answers
An arsenal of angry European Parliament members (MEPs) is demanding answers from senior commissioners about why EU subsidies are ending up in the pockets of spyware companies.…
Cybercrims claim raid on 28,000 Red Hat repos, say they have sensitive customer files
A hacking crew claims to have broken into Red Hat's private GitHub repositories, exfiltrating some 570GB of compressed data, including sensitive documents belonging to customers. …
US gov shutdown leaves IT projects hanging, security defenders a skeleton crew
The US government shut down at 1201 ET on October 1, halting non-essential IT modernization and leaving cybersecurity operations to run on skeleton crews.…
'Delightful' root-access bug in Red Hat OpenShift AI allows full cluster takeover
A 9.9 out of 10 severity bug in Red Hat's OpenShift AI service could allow a remote attacker with minimal authentication to steal data, disrupt services, and fully hijack the platform.…
Pages
