Meanwhile, Okta squirms as further details of slow hack response emerge Extortion gang Lapsus$ may to be back at work, despite the arrest of seven alleged operatives.... [...]
Just look at Ericsson and ISIS, Ashley Yablon says If ZTE and other Chinese giants defy bans on selling American technology to Russia, it will be because they can't help but chase the revenue, says Ashley Yablon, the whistleblower whose evidence led to ZTE being fined for willfully ignoring …
Changes story again to say customers weren't in danger, admits it waited for incident report instead of asking tough questions Identity-management-as-a-service outfit Okta has acknowledged that it made an important mistake in its handling of the attack on a supplier by extortion gang Lapsus$.... [...]
First Russian addition to FCC's Very Naughty List apparently unconnected to illegal invasion of Ukraine The United Stations Federal Communications Commission (FCC) has labelled Kaspersky, China Mobile, and China Telecom as threats to national security.... [...]
Poisoned SCADA apps could have disrupted power supply – perhaps even at nuclear plants The United States Department of Justice has unsealed a pair of indictments that detail alleged Russian government hackers' efforts to use supply chain attacks and malware in an attempt to compromise and control critical infrastructure around …
Security software vendor saddened but says its channel is holding firm Australian technology distributor Dicker Data has decided to end its commercial relationship with Russian security software vendor Kaspersky.... [...]
Plus: Microsoft reveals gang pulled off limited source code heist after single account compromised Identity management as-a-service platform Okta says the Lapsus$ extortion gang may in fact have managed to see some of its customers' data, and Microsoft has admitted the crew got its grubby paws on some source …
Several hundred US orgs given classified briefings as critical infrastructure felt to be at risk United States President Joe Biden has revealed "evolving intelligence that the Russian Government is exploring options for potential cyber attacks" and that the risks posed to critical infrastructure are so significant that hundreds of …
Auditor finds space agency defends Classified info well, isn't paying attention to valuable Unclassified data An audit of NASA's infosec preparedness against insider threats has warned it faces "serious jeopardy to operations" due to lack of protection for Unclassified information.... [...]
Offers list of IP addresses that look like they're hosted at carriers and colos – hardly the stuff of super-spies China's Cyberspace Administration has claimed that "since late February" it has observed continuous attacks on the Chinese internet and local computers by actors who used the resources they co-opted to …
As Ukraine calls for big tech to end support for its products in Russia Russia's Investigative Committee, the nation's peak criminal and anti-corruption investigation body, has opened a probe into whether Meta is an extremist organization.... [...]
Meanwhile, Anonymous claims it's popped Putin's comms regulator Moscow has set up its own certificate authority to issue TLS certs to Russians affected by sanctions or otherwise punished for president Putin's invasion of Ukraine.... [...]
Disconnects small group of customers to protect 'integrity of the global internet' Lumen Technologies, the internet backbone provider formerly known as CenturyLink, has quit Russia.... [...]
More digitization, more R&D, and more provocation of tech-producing neighbours China is this week staging its annual "Two Sessions" meetings, which see its pair of top decision-making bodies meet to set the agenda for the coming year. As usual there is plenty of material that touches on tech …
AutoWarp security hole wasn't exploited – though researchers saw a way into a bank and a telco Microsoft has acknowledged the existence of a flaw in its Azure cloud computing service that allowed users full access to other users' accounts.... [...]
KPMG and PwC follow DXC and Accenture, leaving 14,500 staff – probably – without a gig Four top global consultancies, all with big IT practices, have quit Russia.... [...]
Beijing and Moscow are suddenly BFFs, and that's already seen one Chinese firm reverse a Russia ban As big tech companies from the West swiftly and happily comply with new rules that prohibit interactions with Russia, Chinese companies will soon feel pressure to do likewise – and counter-pressure to resist …
State of the Union features call for Congress to pass law that could see Intel spend $100B on chip factories United States president Joe Biden has used his first State of the Union speech to call for a ban on social networks serving ads targeted at children.... [...]
'Daxin' malware creates backdoors and may have been used since 2013 The United States' Cybersecurity and Infrastructure Security Agency (CISA), working with security vendor Symantec, has found an extremely sophisticated network attack tool that can invisibly create backdoors, has been plausibly linked to Chinese actors, and may have been …
'Daxin' malware creates backdoors and may have been used since 2013 The United States' Cybersecurity and Infrastructure Security Agency (CISA), working with security vendor Symantec, has found an extremely sophisticated network attack tool that can invisibly create backdoors, has been plausibly linked to Chinese actors, and may have been …
Incident struck supplier day after officials warned of massive spike in efforts to launch Emotet malware Toyota has closed all 14 plants it operates in Japan due to what it has described as a “system failure” at Kojima Industries Corporation – and local media report the cause of the failure …
And personal sorrow, as the horror of Russian invasion hits home As Russia's invasion of Ukraine continues, the technology industry is trying to use its services to make a difference – and to keep those services available as the war makes it harder to operate.... [...]
Still plans to make life hard for Beijing, but wants to reduce the chances of domestic division The United States' National Security Division will wind up its "China Initiative" – an effort to combat what then-attorney general Jeff Sessions described in 2018 as "systematic and calculated threats" posed by Beijing-backed …
Firewalls are supposed to update so they block new threats – miss this deadline and they might not Cisco has warned users of its Firepower firewalls – physical and virtual – that they may need to upgrade their kit within a four-day window or miss out on security intelligence updates.... [...]
Operation Cache Panda went after software used by majority of industry players China's state-sponsored snoops conducted a two-month campaign against Taiwanese financial services firms, according to CyCraft, a security consultancy from the island nation.... [...]