No more illicit gains, for a while at least The FBI, in combination with police around the world, have taken control of the website and Telegram channel of ransomware brokerage site BreachForums.... [...]
On the plus side, infosec's a good bet for a long, stable career Interview This year is an unfortunate anniversary for information security: We're told it's a decade since ransomware started infecting corporations.... [...]
Developer of Square and Cash App reportedly has big back-end problems it was slow to fix Fintech biz Block is reportedly under investigation by US prosecutors over claims by a former employee that lax compliance checks mean its Square and Cash App services may have been used by terrorists …
What happened, how it was found, and what your vultures have made of it all Kettle It's been about a week since the shock discovery of a hidden and truly sophisticated backdoor in the xz software library that ordinarily is used by countless systems.... [...]
One might say this is a wurst case scenario The German Federal Office for Information Security (BIS) has issued an urgent alert about the poor state of Microsoft Exchange Server patching in the country.... [...]
Longtime host Caesars ends relationship at short notice It's an annual meme that DEF CON infosec conference has been canceled, but this time it actually happened, ish.... [...]
'The federal government has almost entirely abdicated its responsibility' For a country that prides itself on being free, America does seem to have an awful lot of spying going on, as the new Street Surveillance Hub from the Electronic Frontier Foundation shows.... [...]
After a week of incidents, Register vultures pick over the innards Kettle In this week's Kettle the topic is one that's been much in the news this week - the much-underrated insider threat issue.... [...]
BlackCat pounces on 7TB of data and theatens to release it Staff at one of the UK's largest hospital groups have spent a nervous week wondering if private data, stolen from their employer's IT systems by a ransomware gang, is going to be splurged online after a deadline to …
Plus OIG finds Uncle Sam fibbed over Login.gov In brief A team of hackers from French security shop Synacktiv have won $100,000 and a Tesla Model 3 after subverting the Muskmobile's entertainment system, and from there opening up the car's core management systems.... [...]
Plus: Cracked Piers Morgan spews offensive tweets, not the usual kind A miscreant this Christmas weekend said they are willing to sell public and private info on more than 400 million Twitter accounts.... [...]
COVID, flood surfing, crowds – what to pick? Black Hat As last week's hacker summer camps would down it's clear that attendee numbers are still well down on the pre-COVID days, although things are recovering.... [...]
'Until someone has to go to jail for doing it wrong the teeth are not going to be the same' Black Hat video The security industry needs to take a leaf from the manual of an industry where smart incident response is literally life and death, if it is …
Katie Moussouris tells it like it is Black Hat With the world's largest collection of security folk gathering in Las Vegas for the Black Hat conference there are encouraging signs that the US government might actually be getting smarter about hiring.... [...]
Levy and Robinson are at it again Comment Two notorious characters from the British security services have published a paper that once again suggests breaking end-to-end encryption would be a good thing for society.... [...]
Levy and Robinson are at it again Comment Two notorious characters from the British security services have published a paper that once again suggests breaking strong end-to-end encryption would be a good thing for society.... [...]
Well, we'll see in a week or so RSA Conference For the first time in over two years the streets of San Francisco have been filled by attendees at the RSA Conference and it seems that the days of physical cons are back on.... [...]
Plus: Adafruit customer data leak fallout, infosec burnout, and more In brief A Linux local privilege escalation flaw dubbed Dirty Pipe has been discovered and disclosed along with proof-of-concept exploit code.... [...]
Also don't try to unlock your GPU cards with fake mining tool, and more In brief Nvidia is probing a cyberattack that caused outages within its internal network.... [...]
Also don't try to unlock your GPU cards with fake mining tool, and more In brief Nvidia is probing what may be a ransomware infection that caused outages on its internal network.... [...]
Plus advice for Cisco admins from the NSA and blurring's not the best In brief If you're using the UpdraftPlus WordPress plugin to back up your systems, you'll need it patched – or else risk sharing your backups with strangers.... [...]
What geopolitical standoff could this possibly be linked to? The websites of the Ukrainian military and at least two of the nation's biggest banks were knocked offline in a cyberattack today.... [...]
Plus new breach disclosure rules for US investment firms In brief The bug hunters at Google's Project Zero team have released their latest time-to-fix data and Linux is smashing the opposition.... [...]
Plus: Nigerian BEC gang bust, NSO woes, and more In brief Twitter's head of security and CISO both ejected from the social media biz this month.... [...]
Plus: FIFA 22 players lose their identity and Texas gets phony QR codes In brief Thieves operating for the North Korean government made off with almost $400m in digicash last year in a concerted attack to steal and launder as much currency as they could.... [...]