Plus two failings this week at Apache and Twitch and nostalgia for Flash fans In brief Hipster beer maker Brewdog has been caught out by a basic, but potentially very expensive, security problem, and the team that discovered it says the Scottish tipple-merchant's response was hardly encouraging.... [...]

Plus Russia arrests security boss, two Chrome flaws exploited In Brief A hospital that continued to admit patients during a ransomware attack has been sued over claims that a baby died after doctors and nurses failed to spot there was a problem due to networks being shut down.... [...]

Plus: Other infosec news from this month In brief Emails, chat logs, membership records, donor lists and other files siphoned from a far-right anti-government self-styled militia were leaked online on Monday, it appears.... [...]

ActiveX and MSHTML, the gift that keeps on giving... to intruders In an advisory issued on Tuesday, Microsoft said some of its users were targeted by poisoned Office documents that exploit an unpatched flaw to hijack their Windows machines.... [...]

Plus: T-Mobile US apologizes, security holes found in medical pumps, and more In brief The massive attack on Microsoft Exchange servers in March may have been China harvesting information to train AI systems, according to US government officials and computer-security experts who talked to NPR.... [...]

'I'm quitting the show' says mystery thief Poly Network says virtually all of the crypto-currency funds, valued at $610m, stolen from it by a thief have been returned.... [...]

Plus: Cloudflare tackles huge DDoS attack, Apple and CSAM, and more In brief Razer is said to be working on an updated installer after it was discovered you can gain admin privileges on Windows by plugging in one of the gaming gear maker's mice or keyboards.... [...]

Plus: Cloudflare tackles huge DDoS attack, Apple and CSAM, and more In brief Razer is working on an updated installer after it was discovered you can gain admin privileges on Windows by plugging in one of the gaming gear maker's mice or keyboards.... [...]

Plus: Signal expands auto-deleting messages, SIM-swap thief pleads guilty, and more In brief T-Mobile US is investigating claims that highly sensitive personal data of 100 million customers has been stolen and peddled via the dark web.... [...]

And a very scary story of a job that went from white hat to murky shades of gray in the United Arab Emirates In Brief After a year off due to a certain virus, the Black Hat and DEF CON security conferences returned to Las Vegas last week, just …

Plus: Microsoft responds to another NTLM relay attack technique, and more In brief DEF CON's "Spot the Fed" game is going to be a little easier than usual this year: the head of the US government's Homeland Security is giving a keynote.... [...]

Plus: Telegram security probed, CISA boss confirmed, and more In Brief Cloud-based IT provider Cloudstar has been hit by ransomware, taking down its systems. It said it is currently negotiating with the crooks that infected its computers.... [...]

100+ dissidents, politicians, journos targeted by Israeli espionage toolkit Analysis Software patches from Microsoft this week closed two vulnerabilities exploited by spyware said to have been sold to governments by Israeli developer Candiru.... [...]

We sum up Middle Kingdom's massive crackdown on bug reports Chinese makers of network software and hardware must alert Beijing within two days of learning of a security vulnerability in their products under rules coming into force in China this year.... [...]

Four flaws already being abused in the wild to compromise victims Microsoft released an XL-sized bundle of security fixes for its products for this month's Patch Tuesday, and other vendors are close behind in issuing updates.... [...]

Has the US just had enough, or is it just a strategic retreat? The clear and dark web sites run by the REvil ransomware gang have gone offline, leaving netizens wondering if the extortionists have closed down – or been closed down.... [...]

Plus: Beware bogus crypto-mining phone apps, and more In brief Late last week, President Biden said he brought up the epidemic of ransomware hitting American businesses in a phone call with his Russian counterpart, and hinted America may start hitting back.... [...]

'Single threat actor' already abusing RCE flaw, Microsoft reports SolarWinds has issued an emergency patch after a critical security hole in its Serv-U Managed File Transfer and Serv-U Secure FTP was spotted being exploited in the wild.... [...]

Plus: Cops seize 3D printers 'used to print guns', and more bits and bytes In brief In what's looking like a nasty supply-chain attack, IT systems management biz Kaseya was compromised by miscreants, which then used its VSA product to infect its own customers and then their customers with …

Plus: Cops seize 3D printers 'used to print guns', and more bits and bytes In brief In what's looking like a nasty supply-chain attack, IT management biz Kaseya's on-prem VSA product was abused to infect its customers and/or their customers with ransomware.... [...]

Plus: Amazon gobbles Wickr, automakers cough to privacy blunders, and more In Brief The spies who backdoored SolarWinds' Orion software infiltrated Microsoft's support desk systems last month and obtained information to use in cyber-attacks on some of the Windows giant's customers, it was reported.... [...]

Plus: Amazon gobbles Wickr, automakers cough to privacy blunders, and more In brief The SolarWinds backdoor gang last month infiltrated Microsoft's support desk via a phishing attack to obtain information to use in cyber-attacks on some of the Windows giant's own customers, it was reported.... [...]

UK-born wild man of infosec faced trial in America for tax evasion John McAfee was found dead in his cell in a Barcelona prison on Wednesday, according to the Catalan justice department.... [...]

British-American infosec renegade faced trial in America for tax evasion British-American software tycoon John McAfee was found dead in his cell in a Barcelona prison on Wednesday.... [...]

Plus: Impact of ransomware payments, CVS database not secured In brief Chris Inglis was last week appointed America’s national cyber director, responsible for coordinating the government’s computer security strategy and defending its networks. The former deputy director at the NSA, who spent nearly three decades at the …