Privacy service will keep working, just beyond the reach of India's government Virtual private network operator ExpressVPN will pull its servers from India, citing the impossibility of complying with the nation's incoming requirement to record users' identities and activities.... [...]

Eleven industry associations, representing every tech vendor that matters, warns of economic harm Eleven significant tech-aligned industry associations from around the world have reportedly written to India’s Computer Emergency Response Team (CERT-In) to call for revision of the nation’s new infosec reporting and data retention rules, which …

Sure, they’re small Pacific nations, but they’re in very strategic locations China has begun talking to ten nations in the South Pacific with an offer to help them improve their network infrastructure, cyber security, digital forensics and other capabilities – all with the help of Chinese tech vendors …

Another rush job for busy Indian IT shops Indian IT shops have been handed another extraordinarily short deadline within which to perform significant infosec work.... [...]

But also makes it plain that offshore entities must comply India has slightly softened its controversial new reporting requirements for information security incidents and made it plain they apply to multinational companies.... [...]

Critical authentication bypass revealed, older flaws under active attack Uncle Sam's Cybersecurity and Infrastructure Security Agency (CISA) has issued two warnings in a single day to VMware users, as it believes the virtualization giant's products can be exploited by miscreants to gain control of systems.... [...]

June debut of zero trust GDAP tool should make it harder for crims to attack through MSPs and resellers Microsoft has advised its reseller community it needs to pay attention to the debut of improve security tooling aimed at making it harder for attackers to worm their way into …

If his surgery was as bad as his opsec, this chap has caused a lot of trouble The US Attorney’s Office has charged a 55-year-old cardiologist with creating and selling ransomware and profiting from revenue-share agreements with criminals who deployed his product.... [...]

'Brushing' tops the list, as quantity of forbidden content continue to rise China’s Ministry of Public Security has revealed the five most prevalent types of fraud perpetrated online or by phone.... [...]

Adds infosec regulation coming to more industries but with a light touch, more collaboration Black Hat Asia Software made unsafe by dependencies should be fixed without users needing to interact with the source of the problem, according to US National Cyber Director Chris Inglis, who serves in the Executive …

‘Cooperative mutation’ spots problems that checking scripts alone will miss Black Hat Asia Security researchers have devised a tool that detects flaws in the way apps like Microsoft Word and Adobe Acrobat process JavaScript, and it's proven so effective they've found 134 bugs – 59 of them considered worthy of …

Launches almost 1,000 raids, plenty with upgraded malware Black Hat Asia The advanced persistent threat gang known as SideWinder has gone on an attack spree in the last two years, conducting almost 1,000 raids and deploying increasingly sophisticated attack methods.... [...]

Private orgs that flex with Russian bans may do more harm – to themselves – than good Black Hat Asia The war in Ukraine, and the Declaration for the Future of the Internet signed by 60 nations in late April, should be understood in the context of a global effort to …

30! million! users! already! moved! to! TXT! and/or! FIDO! Attacks! and! support! requests! both! down! Yahoo Japan has revealed that it plans to go passwordless, and that 30 million of its 50 million monthly active users have already stopped using passwords in favor of a combination of FIDO …

Filling in a form at 4am improves infosec or privacy how, exactly? Opposition is building to India's recently introduced rules on reporting computer security breaches, which have come under fire for being impractical, ineffective, and impinging on privacy.... [...]

Infosec outfit says group avoided detection by hiding payloads in undocumented Windows logs Infosec outfit Cybereason says it's discovered a multi-year – and very successful – Chinese effort to steal intellectual property.... [...]

Code locker has figured out it's a giant honeypot for miscreants planning supply chain attacks GitHub has announced that it will require two factor authentication for users who contribute code on its service.... [...]

‘Certain organizations’ to be named in ten days and denied access to Russian resources Russian president Vladimir Putin has authorized retaliatory sanctions against individuals and organizations that have taken action over the illegal invasion of Ukraine.... [...]

Meanwhile, UK and India finally explain Cyber Security Partnership agreed to in May 2021 India's government and the European Union have signed up to create a "Trade and Technology Council" – an entity the EU has previously only created to enhance its relationship with the United States.... [...]

Plans to take a bigger bite of the SME security market by swimming towards SASE Investment firm KKR has acquired Barracuda Networks from private equity firm Thoma Bravo.... [...]

Same biometric used for different people, no archives, lousy infosec among the issues India’s Comptroller and Auditor General has published a performance audit of the nation’s Unique Identification Authority and found big IT problems – some attributable to Indian services giant HCL and to HP, but others due …

Crooks used RAT to hijack superusers at India's Mahesh Bank, stole millions An Indian bank that did not have a valid firewall license, had not employed phishing protection, lacked an intrusion detection system and eschewed use of any intrusion prevention system has, shockingly, been compromised by criminals who made …

Managed to send material from his private email address, it is claimed The United States Department of Justice (DoJ) has accused an NSA employee of sharing top-secret national security information with an unnamed person who worked in the private sector.... [...]

Speech also alleges Russian troops in Ukraine have mutinied, shot down own plane The director of UK intelligence agency Government Communications Headquarters (GCHQ), Sir Jeremy Fleming, has warned that China is trying to introduce "undemocratic values as the default for vast swathes of future tech and the standards that …

Suggests it's prudent to plan for Putin weaponizing Russian products The UK's National Cyber Security Centre (NCSC) has advised users of Russian technology products to reassess the risks it presents.... [...]