Has the US just had enough, or is it just a strategic retreat? The clear and dark web sites run by the REvil ransomware gang have gone offline, leaving netizens wondering if the extortionists have closed down – or been closed down.... [...]
Plus: Beware bogus crypto-mining phone apps, and more In brief Late last week, President Biden said he brought up the epidemic of ransomware hitting American businesses in a phone call with his Russian counterpart, and hinted America may start hitting back.... [...]
'Single threat actor' already abusing RCE flaw, Microsoft reports SolarWinds has issued an emergency patch after a critical security hole in its Serv-U Managed File Transfer and Serv-U Secure FTP was spotted being exploited in the wild.... [...]
Plus: Cops seize 3D printers 'used to print guns', and more bits and bytes In brief In what's looking like a nasty supply-chain attack, IT systems management biz Kaseya was compromised by miscreants, which then used its VSA product to infect its own customers and then their customers with …
Plus: Cops seize 3D printers 'used to print guns', and more bits and bytes In brief In what's looking like a nasty supply-chain attack, IT management biz Kaseya's on-prem VSA product was abused to infect its customers and/or their customers with ransomware.... [...]
Plus: Amazon gobbles Wickr, automakers cough to privacy blunders, and more In Brief The spies who backdoored SolarWinds' Orion software infiltrated Microsoft's support desk systems last month and obtained information to use in cyber-attacks on some of the Windows giant's customers, it was reported.... [...]
Plus: Amazon gobbles Wickr, automakers cough to privacy blunders, and more In brief The SolarWinds backdoor gang last month infiltrated Microsoft's support desk via a phishing attack to obtain information to use in cyber-attacks on some of the Windows giant's own customers, it was reported.... [...]
UK-born wild man of infosec faced trial in America for tax evasion John McAfee was found dead in his cell in a Barcelona prison on Wednesday, according to the Catalan justice department.... [...]
British-American infosec renegade faced trial in America for tax evasion British-American software tycoon John McAfee was found dead in his cell in a Barcelona prison on Wednesday.... [...]
Plus: Impact of ransomware payments, CVS database not secured In brief Chris Inglis was last week appointed America’s national cyber director, responsible for coordinating the government’s computer security strategy and defending its networks. The former deputy director at the NSA, who spent nearly three decades at the …
Just in case you travel back in time to 1998 The GEA/1 encryption algorithm used by GPRS phones in the 1990s was seemingly designed to be weaker than it appears to allow eavesdropping, according to European researchers.... [...]
Plus: Alleged Trickbot developer cuffed by US agents In brief The outgoing head of Israeli foreign intelligence service Mossad has suggested that Stuxnet wasn't the only spanner in the works his agency put into Iran's nuclear programme.... [...]
Adobe, Intel, SAP, Android emit vulnerability fixes, too Patch Tuesday Microsoft's traditional Patch Tuesday saw the software giant release fixes for 50 flaws, and a reminder to apply updates as soon as possible because six of them are being exploited in the wild by miscreants.... [...]
From hidden master keys to pineapples stuffed with Bolivian marching powder — this story has it all The FBI has revealed how it managed to hoodwink the criminal underworld with its secretly backdoored AN0M encrypted chat app, leading to hundreds of arrests, the seizure of 32 tons of drugs, 250 …
All thanks to FBI that somehow had wallet's private key The US Department of Justice on Monday said it has recovered 63.7 Bitcoins, right now worth $2.1m and falling, of the 75 or so BTC the Colonial Pipeline operators paid the ransomware miscreants who infected the fuel …
Plus: FBI boss says ransomware is terrorism 2.0, and more In brief Plans by the German government to allow the police to deploy malware on any target's devices, and force the tech world to help them, has run into some opposition, funnily enough.... [...]
Gonna need a little Mo security over here US House Rep Mo Brooks (R-AL) seemingly revealed his Gmail password and a PIN in a Sunday rage tweet about a lawsuit regarding the January 6 insurrection attempt.... [...]
Plus: More Rowhammer research, Feds warn of Fortinet attacks, etc In brief The creator of the Have I Been Pwned (HIBP) website, which alerts you if it turns out your credentials have been swiped and leaked from an account database, has open sourced the project's internals.... [...]
24 out of 26 tools vulnerable – with bonus JavaScript attack for Adobe A pair of techniques to surreptitiously alter the content of certified PDFs have been detailed by researchers in Germany.... [...]
Bug can also be abused to record audio and video, access files – and iOS, iPadOS updated, too Apple has patched a hole in macOS that has been exploited by malware to secretly take screenshots on victims' Macs.... [...]
Plus: Stalkerware even more scummy and ExifTool needs patching In brief CNA Finaincial, the US insurance conglomerate, has apparently paid $40m to ransomware operators to gets its files back.... [...]
Plus: Biden's order on security, US govt acquiring data on citizens, and more In brief Unlucky owners of Eufycam security cameras were horrified earlier today when they opened their app for the equipment and saw video streams from strangers' homes instead of their own.... [...]
Plus: Student cripples EU bio lab and IRS goes after cryptocurrency In brief The United States' Department of Defense has opened up all of its publicly facing systems and apps to investigation under a bug bounty program.... [...]
Five vulnerabilities lay undetected for almost a dozen years in Windows driver code Dell desktops, laptops, and tablets built since 2009 and running Windows can be exploited to grant rogue users and malware system-administrator-level access to the computers. We're told this amounts of hundreds of millions of machines that …
Plus: Micro-op CPU caches abused to leak data, and more In Brief Apple on Monday patched security flaws in its software said to have been exploited in the wild by miscreants to hijack gear.... [...]