FreshRSS

πŸ”’
❌ About FreshRSS
There are new available articles, click to refresh the page.
Before yesterdayThe Register - Security

Kioxia warns of potential cost of US chip policy over China

Nice NAND industry you have there, would be a shame if something happened to it

Attempts to reorganize supply chains to cut out China and foil its attempts to build a high-tech chip industry will be costly and may simply cause the Middle Kingdom to redouble its efforts, says memory maker Kioxia.…

  • November 1st 2022 at 10:30

German cops arrest student suspected of running infamous dark-web souk

Deutschland im Deep Web destroyed

A 22-year-old student German federal police believe to be the administrator of one of the largest German-speaking, dark-web forums has been arrested. …

  • November 1st 2022 at 05:28

Unofficial fix emerges for Windows bug abused to infect home PCs with ransomware

Broken code signature? LGTM, says Microsoft OS

A cybersecurity firm has issued another unofficial patch to squash a bug in Windows that Microsoft has yet to fix, with this hole being actively exploited to spread ransomware.…

  • November 1st 2022 at 03:48

India's Home Ministry cracks down on predatory lending apps following suicides

Local media say they're China backed, Ministry only mentions organized crime

India's Home Ministry has asked state governments to crack down on illegal lending apps it says have led to "multiple suicides by citizens owing to harassment, blackmail, and harsh recovery methods."…

  • November 1st 2022 at 03:15

Education tech giant gets an F for security after sensitive info on 40 million users stolen

Chegg it out: Four blunders in four years

Sloppy data security at education tech giant Chegg exposed students and workers' personal information not once but four times in various ways over four years, according to the FTC. …

  • October 31st 2022 at 22:54

The White House's global ransomware summit couldn't come at a better time

As cyber threats ramp up, businesses and organizations will be hoping for more than platitudes

The White House has begun its second annual International Counter Ransomware Summit in which Biden administration officials will convene with representatives of three dozen nations, the EU, and private business to discuss the growing threat posed by data-destroying cyber attacks.…

  • October 31st 2022 at 17:30

Ordinary web access request or command to malware?

Cranefly group unleashes nasty little technique using Microsoft Internet Information Services (IIS) logs

A threat group that targets corporate emails is delivering dropper malware through a novel technique that uses Microsoft Internet Information Services (IIS) logs to send commands disguised as web access requests.…

  • October 31st 2022 at 16:30

Apple patches actively exploited iPhone, iPad kernel vulns

Plus: Misconfigured server leaks Thomson Reuters data; VMware patches critical flaw in retired software; MalwareBytes apologies for a hoodie

In brief Apple has patched an iOS and iPad OS vulnerability that's already been exploited.…

  • October 31st 2022 at 07:32

Singapore hosts ICS/OT cybersecurity training extravaganza

Two great SANS events for APAC cyber security professionals to boost their ICS knowledge and skills

Sponsored Post Cybercriminals generally respect no limits or boundaries, but there is evidence to suggest that they are singling out industrial control systems (ICS) and operational technology (OT) systems such as supervisory control and data acquisition (SCADA) platforms in the Asia Pacific region which may represent easier targets for their attention.…

  • October 31st 2022 at 03:00

Indian government creates body with power to order social media content takedowns

PLUS: China’s digital currency surges; Infosys tax portals wobble again; Singapore crypto protections; and more

Asia In Brief India's government has given itself the power to compel social networks to take down content.…

  • October 30th 2022 at 23:32

This Windows worm evolved into slinging ransomware. Here's how to detect it

Raspberry Robin hits 1,000 orgs in just one month

Raspberry Robin, a worm that spreads through Windows systems via USB drives, has rapidly evolved: now backdoor access is being sold or offered to infected machines so that ransomware, among other code, can be installed by cybercriminals.…

  • October 28th 2022 at 22:11

Federal bans aren't stopping US states from buying forbidden Chinese kit

Report claims thousands of orgs are still happily writing checks

Only a "handful" of US states have stopped buying Chinese technologies deemed by the government to pose security threats, according to a report from a Washington policy research group.…

  • October 28th 2022 at 17:32

The top cloud cyber security threats unpacked

Our webinar offers practical advice on how to ward off cloud-borne bugs of the digital variety

Webinar The cloud is constantly in flux, and with its continual growth comes an equally rapid acceleration of threats and vulnerabilities direct towards it. You could say the cloud environment resembles the wild west where even hired guns carefully guarding your wagon train are not always enough to prevent an ambush by a gang of determined outlaws.…

  • October 28th 2022 at 13:12

Biden now wants to toughen up chemical sector's cybersecurity

Control panels facing the internet? Data stolen? You gotta keep an ion this stuff

The White House is adding the chemical sector to a program launched last year to improve cybersecurity capabilities within America's critical infrastructure industries.…

  • October 27th 2022 at 22:36

The point solution IAM evolution under reform

A consolidation of IAM tools, suppliers and managed services providers is changing the default approach

Sponsored Feature The inexorable pace of technological innovation in response to the unrelenting growth of cyber attacks has led to fragmentation within cyber security provision. Things generally follow a common pattern, starting with a new security requirement being identified, whether a response to a novel threat, or a compliance or regulation challenge. This leads buyers to specialized tools, usually from smaller vendors that do one thing well. But inevitably over time, buyers end up using a mishmash of systems and tools, each with its own job and management processes.…

  • October 27th 2022 at 13:01

Purpleurchin cryptocurrency miners spotted scouring free GitHub, Heroku accounts

This is why we can't have nice things

A stealthy cryptocurrency mining operation has been spotted using thousands of free accounts on GitHub, Heroku and other DevOps outfits to craft digital tokens. GitHub, for one, forbids the mining of coins using its cloud resources.…

  • October 27th 2022 at 07:27

Japan to citizens: Get a digital ID or health insurance gets harder

Risk of death is certainly one way to get the populace on board

Japan's plan to phase out public health insurance cards in favor of linking the services to a digital ID card could compel those who oppose the digitization to sign up.…

  • October 27th 2022 at 03:57

Pro-China crew ramps up disinfo ahead of US midterms. Not that anyone's falling for it

Hey, Xi, ζ»šεΌ€

The prolific pro-Beijing Dragonbridge crew has apparently stepped up its activity ahead of the US 2022 midterms by trying to discourage Americans from voting as well as pinning the Nord Stream pipeline explosion on Uncle Sam.…

  • October 27th 2022 at 00:31

Feds accuse Ukrainian of renting out PC-raiding Raccoon malware to fiends

Separately, charges slapped on alleged operator of dark market, The Real Deal

Mark Sokolovsky, 26, a Ukrainian national, is being held in the Netherlands while he awaits extradition to America on cybercrime charges, the US Justice Department said on Tuesday.…

  • October 26th 2022 at 23:06

Cisco AnyConnect Windows client under active attack

Make sure you're patched – and update VMware Cloud Foundation, too, by the way

Cisco says miscreants are exploiting two vulnerabilities in its AnyConnect Secure Mobility Client for Windows, which is supposed to ensure safe VPN access for remote workers.…

  • October 26th 2022 at 20:31

Microsoft realizes it hasn't updated list of banned dodgy Windows 10 drivers in years

Hope no one was relying on that to block threats, er, yeah?

Microsoft appears to have woken up and realized it may have left certain Windows Server and Windows 10 systems exposed to exploitable drivers for years.…

  • October 26th 2022 at 18:45

New Year, new cyber security career

Say hello to SANS 2023 training events and the new job that will inevitably follow

Sponsored Post The turn of the year is always a good time to take stock and think about where you are heading. Many hard working cybersecurity professionals will be keeping as close an eye on the calendar as they are on cyber criminals.…

  • October 26th 2022 at 09:00

Ransomware down this year – but there's a catch

2021 was such a banner year for extortionists, 2022 is gonna look rosy in comparison

The number of ransomware attacks worldwide dropped 31 percent year-over-year during the first nine of months 2022, at least as far as SonicWall has observed. But don't get too excited.…

  • October 26th 2022 at 05:28

If someone tries ransacking your Windows network, it's a bit easier now to grok in Microsoft 365 Defender

Blinking, beeping, and flashing lights, blinking and beeping and flashing...

Microsoft is bringing Azure Active Directory Identity Protection alerts to Microsoft 365 Defender to seemingly help IT folks thwart criminals infiltrating corporate networks via compromised users.…

  • October 26th 2022 at 04:27

Health insurer Medibank's data breach diagnosis keeps getting worse

All four million customers at risk of having records of medical treatments exposed

Australian health insurer Medibank's data breach was today revealed to be even worse than first thought, with a regulatory filing stating that info describing all four million customers has been accessed.…

  • October 26th 2022 at 03:45

FTC slaps down Drizly CEO after 2.4m user records stolen from 'careless' booze app biz

At least this'll give some ammo to CISOs dying for stronger IT defenses

Analysis Drizly CEO James Cory Rellas is in the firing line after his company exposed about 2.5 million customers' personal information in a computer security blunder. …

  • October 26th 2022 at 00:07

PayPal ditches passwords, at least on Apple devices

No more reusing, recycling passwords

PayPal has added passkeys for passwordless login to accounts across Apple devices.…

  • October 25th 2022 at 19:30

The safety of numbers

The future of effective crowdsourced cybersecurity according to Bugcrowd

Webinar It was the English philosopher Sir Francis Bacon who first wrote 'knowledge is power,' a phrase which is probably equally applicable in fighting cybercrime today as it was in 1597 when he first committed it to paper. Because failing to keep up with the latest intel on malware and hacking methods can leave your organization open to a lot of potential risks.…

  • October 25th 2022 at 12:32

Gone phishing: UK data watchdog fines construction biz Β£4.4m for poor infosec hygiene

Staff member bit on lure, ultimately exposed up to 113,000 colleagues' personal information

Britain's data watchdog has slapped construction business Interserve Group with a potential Β£4.4 million ($4.98M) fine after a successful phishing attack by criminals exposed the personal data of up to 113,000 employees.…

  • October 25th 2022 at 08:30

Uncle Sam says Chinese agents tried to interfere with Huawei criminal case in US

Beijing also sought to recruit academics and officials in America, and more claimed

American prosecutors on Monday accused 13 people of committing espionage-linked crimes in the US on behalf of the Chinese government.…

  • October 24th 2022 at 23:40

Payment terminal malware steals $3.3m worth of credit card numbers – so far

With shops leaving VNC and RDP open, quelle surprise

Cybercriminals have used two strains of point-of-sale (POS) malware to steal the details of more than 167,000 credit cards from payment terminals. If sold on underground forums, the haul could net the thieves upwards of $3.3 million.…

  • October 24th 2022 at 22:11

DHL named most-spoofed brand in phishing

With Microsoft and LinkedIn close on shipping giant's heels

DHL is the most spoofed brand when it comes to phishing emails, according to Check Point.…

  • October 24th 2022 at 18:42

Alert: This ransomware preys on healthcare orgs via weak-ass VPN servers

FBI, CISA warn of Daixin gang after OakBend Medical Center hit

Federal agencies are warning of a threat group called Daixin Team that is using ransomware and data extortion tactics to target US healthcare organizations.…

  • October 24th 2022 at 17:00

Google says slap some GUAC on your software supply chain

Also: Iranian election hackers are back, the TSA gets regulatory on train cybersecurity, and more

In brief Google has released a new open source software tool to help businesses better understand the risks to their software supply chains by aggregating security metadata into a queryable, standardized database.…

  • October 24th 2022 at 12:30

A year of SANS security summits

A mixture of free online events and in-person conferences that put you at the heart of the cyber security industry

Sponsored Post Where do the world's cyber security professionals get an opportunity to mingle and swap tips with their global peers while engaging in interactive, hands-on learning exercises that will help them stop cyber criminals in their tracks?…

  • October 24th 2022 at 09:11

Linux: Here, there and everywhere

How Red Hat turns an open source entity into overt enterprise security

Webinar Linux has come a long way from the early days of 1991 when the Linux kernel grew out of a student project.…

  • October 24th 2022 at 08:40

Could you not? BlackByte ransomware slinger twists the knife with data stealer

Your IT storage may go from terabytes to Exbytes

At least one affiliate of the high-profile ransomware-as-a-service (RaaS) group BlackByte is using a custom tool to exfiltrate files from a victim's network, a key step in the fast-growing business of double-extortion.…

  • October 24th 2022 at 07:40

Hacktivists say they stole 100,000 emails from Iran's nuclear energy agency

Tehran laughs it off as foreign psyop or media stunt. Just don't remind them about Stuxnet, OK?

Iran's Atomic Energy Organization has laughed off claims that the email systems of a subsidiary were compromised, revealing important operational data about a nuclear power plant.…

  • October 24th 2022 at 02:30

As Russia wages disinfo war, Ukraine's cyber chief calls for global anti-fake news fight

'Completely new approaches should be developed to prevent the influence of this propaganda'

As a hybrid offline and online war wages on in Ukraine, Viktor Zhora, who leads the country's cybersecurity agency, has had a front-row seat of it all.…

  • October 22nd 2022 at 22:53

Good news, URSNIF no longer a banking trojan. Bad news, it's now a backdoor

And one designed to slip ransomware and data-stealing code onto infected machines

URSNIF, the malware also known as Gozi that attempts to steal online banking credentials from victims' Windows PCs, is evolving to support extortionware.…

  • October 21st 2022 at 10:28

Oops, web trackers may have leaked 3 million patients' info

Scream with us: Aaaaaa-AAH

A hospital network in Wisconsin and Illinois fears visitor tracking code on its websites may have transmitted personal information on as many as 3 million patients to Meta, Google, and other third parties.…

  • October 20th 2022 at 23:42

Cloud migration and the cyber skills shortage

Protecting applications off prem demands a fresh wave of security talent

Sponsored Post Shifting workloads and applications to the cloud is on every forward-thinking CIO's wish list. It is also their worst nightmare. If they get it right, they've helped to transform and modernize their organization's operations and everyone's happy. If they get it wrong, it's a different story, made much worse if a seriously expensive data breach is involved.…

  • October 20th 2022 at 17:51

BlueBleed: Microsoft customer data leak claimed to be 'one of the largest' in years

SOCRadar says sensitive info from 150,000 orgs was exposed, Redmond disputes findings

Microsoft has confirmed one of its own misconfigured cloud systems led to customer information being exposed to the internet, though it disputes the extent of the leak.…

  • October 20th 2022 at 15:00

President Biden still wants his cybersecurity labels on those smart devices

May follow Finland and Germany in adopting Singapore's standard

The Biden administration is pushing ahead with its drive to add cyber security labeling to consumer Internet of Things (IoT) devices, and may join other nations in adopting the scheme pioneered by Singapore.…

  • October 20th 2022 at 09:30

Confidentiality in the cloud: the delicate bargain of trust

How hardware-assisted data security can boost the integrity of sensitive data sets stored in cloud environments

Sponsored Feature The concept behind Confidential Computing isn't new – organisations have been using hardware-assisted technology to encrypt and decrypt data for a while now. But fresh impetus from the Confidential Computing Consortium , new technology, and greater reliance on off prem public clouds to host and process sensitive information is prompting a more widespread re-evaluation of its benefits.…

  • October 20th 2022 at 06:32

Health insurer's infosec incident diagnosis goes from 'take a chill pill' to emergency ward

Australia's Medibank says it's been shown stolen data that includes details of treatments administered to customers

Updated Australian health insurer Medibank has revealed it's been contacted by a group that claims to have its customers' data and is threatening to distribute it.…

  • October 20th 2022 at 01:34

CISA warns of security holes in industrial Advantech, Hitachi kit

When we concede that everything has bugs, we wish it wasn't quite everything

This week, the US government's Cybersecurity and Infrastructure Security Agency (CISA) expanded its ever-growing list of vulnerability in industrial control systems (ICS) and critical infrastructure technology.…

  • October 20th 2022 at 00:35

Cost of a health insurance security breach? NY watchdogs say it's $4.5m

Hundreds of thousands of people's sensitive info poorly protected

New York regulators continue turning the screws on organizations with slapdash computer security.…

  • October 19th 2022 at 23:54

Verizon prepaid accounts hijacked by SIM swap crooks

Nightmare for those with one-time security codes texted to their phones

Verizon has notified some prepaid customers that their accounts were compromised and their phone numbers potentially hijacked by crooks via SIM swaps.…

  • October 19th 2022 at 22:04

Millennials, Gen Z actually suck at workplace security

OK, boomer – how do I turn off cookies?

It's just as you suspected: your Gen Z and millennial coworkers just aren't taking cybersecurity at work seriously enough. …

  • October 19th 2022 at 16:45

So, the US, China, and Russia walk into an infosec conference

Suffice to say things got a little awkward

Cyber-diplomats from around the world say they want the internet to be safe, secure, and free of interference. Of course, they believe it's the fault of other nations that the internet is not safe, secure or free of interference.…

  • October 19th 2022 at 14:30

Tear in Microsoft Azure Service Fabric can give attackers full admin privileges

Orca Security disclosed the bug, and older versions remain vulnerable

A proof-of-concept exploit has been published detailing a spoofing vulnerability in Microsoft Azure Service Fabric. The flaw allows attackers to gain full administrator permissions and then perform any manner of malicious activity.…

  • October 19th 2022 at 13:05

The infinite beauty of the hive mind

Looking at the future of crowdsourced security

Webinar The individual memory of a bee is the repository for one facet of the collective memory of the beehive - the hive mind. Working together each bee feeds into the collective consciousness of the hive to optimize the production of the very best honey.…

  • October 19th 2022 at 13:02

Germany stands down cyber boss over Russian ties

Involvement with lobby group that welcomed Putin's pals presses buttons

Germany's government has stood down the president of its Federal Office for Information Security, Arne SchΓΆnbohm, over his links to Russia.…

  • October 19th 2022 at 07:30

FBI: Looking for Biden's student loan forgiveness? Watch out for these scams

You really think someone would do that? Just go on the internet and steal identities?

In what can only be described as inevitable, the FBI is warning those eligible for student loan debt relief to keep an eye out for scammers trying to take advantage of President's Biden program.…

  • October 19th 2022 at 01:20

Build some flexibility into your cyber learning

Training should bend around the many moving parts in your daily schedule, not the other way around.

Sponsored Post We're all looking for a way to get the best cyber security training on the market, so we can push ahead in our careers. But we want to do it at our own pace, and in a location that suits us.…

  • October 18th 2022 at 21:00

'Fully undetectable' Windows backdoor gets detected

SafeBreach supposedly spots somewhat stealthy subversive software

SafeBreach Labs says it has detected a novel fully undetectable (FUD) PowerShell backdoor, which calls into question the accuracy of threat naming.…

  • October 18th 2022 at 20:14

NSA urges enterprises to watch China, Taiwan tensions

Have you thought about your supply chains, partnerships, and how far they reach?

Tensions between the US, China, and Taiwan have far-reaching impacts beyond semiconductor saber-rattling and trade restrictions. There is an enterprise security angle that CISOs should be on guard to tackle, according to US intelligence.…

  • October 18th 2022 at 19:30

Putting on the Red Hat

Keeping on top of Linux enterprise security requirements

Webinar If there was a tablet of stone inscribed with ten commandments for the fundamental requirements of an operating environment, the first would almost certainly be 'thou shalt have security and stability.'…

  • October 18th 2022 at 13:20

Upstart Ransom Cartel linked to REvil veterans

Lesser of two REvils? There’s a relationship, say infosec bods, but not enough to say one evolved into the other

It has been almost a year since the ransomware gang Ransom Cartel was first detected and the crew over that time has racked up a steady drumbeat of victims in such countries as the United States and France and from a broad array of industry sectors.…

  • October 18th 2022 at 11:44
❌