As sanctioned Russian infosec firm says it has working exploit code Adobe has put out a warning about another critical security bug affecting its Magento/Adobe Commerce product – and IT pros need to install a second patch after an initial update earlier this week failed to fully plug the …
US football team bitten by BlackByte gang the FBI just warned us about American football team the San Francisco 49ers have been hit by ransomware, with the criminals responsible claiming to have stolen corporate data and threatened to publish it.... [...]
Best plug HiveNightmare if you haven't already, unless you like new admins The US government has added 15 vulns under active attack to a little-known but very useful public database: its Known Exploited Vulnerabilities catalogue.... [...]
Suggests accounting'n'umbrella firm didn't pay ransom What appears to be stolen data belonging to customers of accounting conglomerate Optionis Group has surfaced on the dark web weeks after the firm confirmed intruders had broken into its systems.... [...]
Don't pay extortionists? Firms shelled out $5bn in Bitcoin in 6 months Ransomware attacks are proliferating as criminals turn to gangs providing turnkey post-compromise services, Britain's National Cyber Security Centre (NCSC) has warned.... [...]
Crim has 80 months to think on choices made in life A Canadian who used the Netwalker ransomware to attack 17 organisations and had C$30m (US$23.6m) in cash and Bitcoin when police raided his house has been jailed for more than six years.... [...]
Age verification for large chunks of WWW to be mandatory Adults will have to hand over credit card or passport details before they can access social media sites, the British government threatened this morning.... [...]
Shadow foreign secretary says work is visibly overdue The shadow foreign secretary for UK's opposition Labour party, David Lammy MP, has asked why the reform of the Computer Misuse Act appears to have stalled in an open letter to government.... [...]
Read all about it – Beijing probably already has Online work accounts of News Corporation journalists were broken into by snoops seemingly with ties to China, it was claimed today.... [...]
Craft Helm chart, receive secrets A zero-day vulnerability in open-source Kubernetes development tool Argo lets malicious people steal passwords from git-crypt and other sensitive information by simply uploading a crafted Helm chart.... [...]
Spoof site looks real because it is... but you're not talking to who you think In the beginning we had passwords. Their hackability made a lot of people very angry and passwords were widely regarded as a bad move. Then we had two-factor authentication – and now Proofpoint reckons criminals …
Firm doesn't know when it'll restart salty goodness deliveries Some of Britain's favourite pub munch could end up in short supply after KP Snacks, makers of nuts and crisps, suffered a ransomware attack.... [...]
Firm doesn't know when it'll restart salty goodness deliveries Some of Britain's favourite pub munch could end up in short supply after KP Snacks, makers of nuts and crisps, suffered a ransomware attack.... [...]
Oh what a problem to have Fresh from years of complaining about underfunding and not having enough staff to deal with problems, infosec bods are now complaining that corporate execs merely firehose cash at them without getting their own hands dirty or engaging with the problem.... [...]
Terror watchdog is a bad model to follow, though Even think tanks with close links to the UK's Conservative government are now criticising the Online Safety Bill, with the Institute of Economic Affairs (IEA) describing it today as "a significant threat to freedom of speech, privacy and innovation."... [...]
Researcher tells world after being stonewalled There is a live cross-site scripting (XSS) vulnerability in takedowns website DMCA-dot-com's user interface. It's existed for more than a year and the site's operators don't appear to be interested in fixing it.... [...]
Muscle-flexing rather than publicised 'sabotage right here' plan A Russian naval exercise in the Atlantic, near several submarine cables between Britain, France and the US, is more likely to be sabre-rattling than an attempt to sabotage critical communication links.... [...]
Plus: Cops' surveillance is used against drug gangs and not child abusers, says Tutanota Britain's controversial Online Safety Bill will leave Britons more exposed to internet harms than ever before, the Internet Society has said, while data from other countries suggests surveillance mostly isn't used to target child abusers …
Nasty demands hefty Bitcoin ransom QNAP has urged NAS users to act "immediately" to install its latest updates and enable security protections after warning that product-specific ransomware called Deadbolt is targeting users' boxen.... [...]
Bitter contract dispute revealed HLR lookup capability baked into agreement Exclusive Britain's tax collection agency asked a contractor to use the SS7 mobile phone signalling protocol that would make available location data of alleged tax defaulters, a High Court lawsuit has revealed.... [...]
See that? That's a promise of fat contracts, that is Big industry players have praised the latest cybersecurity strategy emitted by the British government, rubbing their hands with glee at its promises of lucrative public contracts for the rest of the 2020s.... [...]
Now you see a harmless PNG. Now it's a malicious payload. Look into my eyes A security bod scored a $100,500 bug bounty from Apple after discovering a vulnerability in Safari on macOS that could have been exploited by a malicious website to potentially access victims' logged-in online …
Are you competent? Ethical? Welcome to UKCSC's new list Frustrated at lack of activity from the "standard setting" UK Cyber Security Council, the government wants to pass new laws making it into the statutory regulator of the UK infosec trade.... [...]
And to pay for the privilege. Consultation's open, though Small and medium-sized managed service providers (MSPs) could find themselves subject to the Network and Information Systems Regulations under government plans to tighten cybersecurity laws – and have got three months to object to the tax hikes that will follow.... [...]
So far we've got a pisspoor video and... er, that's it Opinion The British government's PR campaign to destroy popular support for end-to-end encryption on messaging platforms has kicked off, under the handle "No Place To Hide", and it's as broad as any previous attack on the safety-guaranteeing technology …