Slams Biden's Executive Order on improving infosec, calls for multilateral trust framework Huawei has decided to school America on cyber-security, and its lesson is to co-operate with China so its vendors – including Huawei – can be trusted around the world.... [...]
Reason for probe unknown, but CEO claims it will vindicate company's claims Israel's Ministry of Defense says the nation's government has visited spyware-for-governments developer NSO Group to investigate allegations its wares have been widely – and perhaps willingly – misused.... [...]
Memorandum details plans to turn that around with rapid development of security baselines, not mandates The Biden administration has issued a National Security Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems to address what it describes as a "woefully insufficient" security posture.... [...]
Announces that it's paid out for 11,000 bugs in under eleven years Google has revealed that its bug bounty program – which it styles a "Vulnerability Reward Program" – has paid out for 11,055 bugs found in its services since 2010.... [...]
Suggests incident 'of great consequence' in the real world could be a tipping point United States President Joe Biden has shared his view that a "real shooting war" could be sparked by a severe cyber attack.... [...]
Promises everything will be back to normal sometime in early August Chinese web giant Tencent has suspended new signups to its WeChat messaging service.... [...]
Has since been recovered, and Scaleway now ships disks with GPS trackers It sounds like a "dog ate my homework" excuse for the cloud age, but Euro-cloud Scaleway says one of its solid-state disks was stolen from a truck, turned up in the hands of a YouTuber, and has …
Users sent two further updates – one fixing an issue that prevented installation of antivirus software Software-for-services providers business Kaseya has obtained a "universal decryptor key" for the REvil ransomware and is delivering it to clients.... [...]
Denies everything, as governments open probes into the company and its wares The NSO Group, a purveyor of spyware it hopes governments and law enforcement bodies will use to fight terrorism, has announced it will not answer any further questions about allegations raised by Amnesty International and Forbidden Stories …
Meanwhile, Tokyo games ticket holder data leaks, and those affected can't even use their seats Three US senators have written to their nation's Olympic Committee with a request that it "forbid American athletes from receiving or using Digital Yuan during the Beijing Olympics" – a reference to the Winter Games …
Heads of State, academics, diplomats, journalists, and others targeted, iPhones vulnerable Amnesty International and French journalism advocacy organisation Forbidden Stories say they've acquired a leaked list of individuals targeted by users of Israeli spyware-for-law-enforcement operator NSO Group, and that Heads of State, academics, diplomats, human rights advocates, and media …
Bad actor likes to work through insecure consumer routers and has form attacking tech companies and military targets Microsoft has attributed a new attack on SolarWinds to a group operating in China.... [...]
What’s another 20 minutes of sudden unplanned downtime between friends? Kaseya has fully restored its SaaS product, then quickly inflicted a little more unplanned downtime on users.... [...]
Patch for on-prem is out, too, but company asks users to pause work to review late documentation changes Beleaguered IT management firm Kaseya says sixty per cent of its SaaS services have been successfully restored.... [...]
Promises “exponentially more secure” product and cash assistance for customers Beleaguered IT management software vendor Kaseya has delayed the restoration of its SaaS services until Sunday, July 11th.... [...]
Gang is using custom RATs malware to target government employees, and has an interest in Pakistan, too Cisco’s Talos security unit says it has detected an increased rate of attacks on targets on the Indian subcontinent and named an advanced persistent threat actor named SideCopy as the source …
Republican National Committee said to be a victim, with Cozy Bear in the frame for the attack Updated Technology distributor SYNNEX has admitted that its systems and Microsoft accounts it tends have been attacked, after the National Committee of the US Republican Party (RNC) named it as the source …
No fixes yet for Windows 10 version 1607, Windows Server 2016, or Windows Server 2012 Microsoft has issued out-of-band patches for the PrintNightmare print spooler bug that allows lets remote Windows users execute code as system on your domain controller.... [...]
CEO comes out swinging, says 'people make the story and make the impact of this larger than what it is' Kaseya’s attempt to recover its SaaS services has failed, and its CEO has attempted to play down the significance of the incident that has seen its VSA services …
Hikes numbers of known compromised customers and warns countermeasures will be needed before resuming usage Kaseya has said it’s been unable to find signs its code was maliciously modified, and offered its users a ray of hope with news that it is testing a patch for its on-prem …
REvil ransomware rampages through managed services providers and perhaps 1,000 clients IT management software provider Kaseya has deferred an announcement about restoration of its SaaS services, after falling victim to a supply chain attack that has seen its products become a delivery mechanism for the REvil ransomware.... [...]
UK, Australia, Russia ranked in second tier. North Korea and Iran are a step down but feisty The United States is comfortably the world’s most powerful nation when measured on “cyber capabilities that make the greatest difference to national power,” according to British think tank The International Institute …
File was supposed to be private. It was not. And it was out in the open for months The Asia Pacific Network Information Centre (APNIC), the internet registry for the region, has admitted it left at least a portion of its Whois SQL database, which contains sensitive information, facing …
Putin to Biden: чушь! You already attack us way more than we attack you! US President Joe Biden and his Russian Federation counterpart Vladimir Putin have traded barbs over cyber-attacks at a summit meeting staged yesterday in Switzerland.... [...]
Shopping service Taobao scraped by affiliate marketer; developer and boss jailed Alibaba’s Chinese shopping operation Taobao has suffered a data breach of over a billion data points including usernames and mobile phone numbers. The info was lifted from the site by a crawler developed by an affiliate marketer …