FreshRSS

πŸ”’
☐ β˜† βœ‡ The Register - Security

Modified version of Tor Browser spies on Chinese users

October 5th 2022 at 11:32

Patiently gathers data that can be used to identify the victims, says Kaspersky

Cybersecurity biz Kaspersky has spotted a modified version of the Tor Browser it says collects sensitive data on Chinese users.…

☐ β˜† βœ‡ The Register - Security

DoJ β€˜very disappointed’ with probation sentence for Capital One hacker Paige Thompson

October 5th 2022 at 05:31

β€˜This is not what justice looks like’ says official on sanction for leak of 100 million records

Convicted wire fraud perpetrator Paige Thompson (aka "erratic") has been sentenced to time served and five years of probation with location and computer monitoring, prompting U.S. Attorney Nick Brown to label the sanctions unsatisfactory.…

☐ β˜† βœ‡ The Register - Security

All your identity needs fulfilled

October 5th 2022 at 03:12

How to build an environment of trust and enhance customer experience

Video Digital transformation requires far-reaching and innovative business solutions, frequently tailormade.…

☐ β˜† βœ‡ The Register - Security

No Shangri-La for you: Top hotel chain confirms data leak

October 5th 2022 at 02:15

In Xanadu did Kubla Khan a stately pleasure-dome decree

Hotel chain Shangri-La Group has admitted to its systems being attacked, and personal data describing guests accessed by unknown parties, over a timeframe that includes the dates on which a high-level international defence conference was staged at one of its Singapore properties.…

☐ β˜† βœ‡ The Register - Security

Uncle Sam orders federal agencies to step up scans for govt IT security holes

October 4th 2022 at 22:26

Good time to be selling automation tools

The US government's Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies to scan for and report software vulnerabilities in their IT systems more frequently under a directive issued this week.…

☐ β˜† βœ‡ The Register - Security

Microsoft: Watch out for password spray attacks – especially you, Basic Auth

October 4th 2022 at 16:15

Exchange Online users should have authentication policies in place

Microsoft is warning Exchange Online users about a rise in password spray attacks, urging those that have yet to disable Basic Authentication to at least set up authentication policies to protect their users and data.…

☐ β˜† βœ‡ The Register - Security

Japanese sushi chain boss resigns amid accusation of improper data access

October 4th 2022 at 05:56

Data theft stinks, says victim. Alleged perp claims he's getting a raw deal

The president of casual Japanese chain restaurant Kappa Sushi resigned yesterday in the wake of a data-theft scandal that has rocked the world of sushi trains.…

☐ β˜† βœ‡ The Register - Security

Giveaways for every security professional

October 4th 2022 at 03:00

Don’t chuck money away before you’ve checked SANS free educational content

Sponsored Post Fighting cybercrime is an expensive business. If your cyber defences fail, then the cost can be measured in many ways. There's the price of repairing damaged infrastructure, retrieving lost data, and paying regulatory penalties. And the cost in reputational terms with customers simply has no metric.…

☐ β˜† βœ‡ The Register - Security

Atlassian, Microsoft bugs on CISA’s must-patch list after exploitation spree

October 4th 2022 at 00:31

Some days, security just feels like a total illusion. OK, most days...

A recently disclosed critical vulnerability in Atlassian's Bitbucket is actively being exploited, according to the US government.…

☐ β˜† βœ‡ The Register - Security

Online romance scamlord who netted $9.5m jailed for 25 years

October 3rd 2022 at 22:15

Hello, love, I need $32k to fix my oil rig

A man in the US has been jailed for 25 years after using dating websites, email scams, and other online swindles to steal more than $9.5 million from companies and individuals.…

☐ β˜† βœ‡ The Register - Security

From today, America and UK follow new rules on how they can demand your data from each other

October 3rd 2022 at 19:11

Cops and Feds get easier info sharing, Britain benefits most

The Data Access Agreement (DAA), by which the US and UK have agreed how one country can respond to lawful data demands from police and investigators in the other, took effect on Monday.…

☐ β˜† βœ‡ The Register - Security

It's 2058. A quantum computer is just another decade away. Still, you curse Cloudflare

October 3rd 2022 at 18:22

Assuming this Kyber TLS stuff works as expected

Cloudflare is the first major internet infrastructure provider to support post-quantum cryptography for all customers, which, in theory, should protect data if quantum computing ever manages to break today's encryption technologies.…

☐ β˜† βœ‡ The Register - Security

National Cybersecurity Awareness program 18 years on: Don't click that

October 3rd 2022 at 17:30

Technology is addressing many of the cyberthreats, but the human element will always be a factor

If you've ever found yourself in an interminable meeting listening to the CISO ramble on about the important role you play in protecting yourself and the company from cyberthreats, you could probably point an accusatory finger in large part at the National Cybersecurity Awareness Month (NCSAM) program.…

☐ β˜† βœ‡ The Register - Security

FBI: We tracked who was printing secret documents to unmask ex-NSA suspect

October 3rd 2022 at 17:00

Infosec systems designer alleged to have chatted with undercover agent

A 30-year-old ex-NSA employee was accused by the FBI of trying to sell classified US information to a foreign government – after the Feds said they linked him to the printing of secret documents.…

☐ β˜† βœ‡ The Register - Security

Cyber-proofing data in the cloud

October 3rd 2022 at 13:24

How to reduce the risk and impact of ransomware attacks on AWS data and applications

Webinar Ransomware has a longer history than you might imagine. The very first recognized attack was at the World Health Organization in 1989 when the AIDS Trojan was distributed to 20,000 attendees via floppy disc.…

☐ β˜† βœ‡ The Register - Security

Founder of cybersecurity firm Acronis is afraid of his own vacuum cleaner

October 3rd 2022 at 10:46

It is the exponential changes in the course of human history that worry Serg Bell

Acronis founder Serg Bell is afraid of his own vacuum cleaner, he told The Register in Singapore last week.…

☐ β˜† βœ‡ The Register - Security

Between ransomware and month-long engagements, IR teams need a hug – and a nap

October 3rd 2022 at 10:00

Here's what 1,100 incident responders say about their jobs, just in time for NSCAM

Remember the good old days of cyber-incident response, when the job involved digital forensics and lots of stolen credit cards, as opposed to power-grid-breaking malware and multi-million-dollar ransom demands?…

☐ β˜† βœ‡ The Register - Security

Moody's turns up the heat on 'riskiest' sectors for cyberattacks

October 3rd 2022 at 06:33

$22 trillion of global rated debt has 'high' or 'very high' cyber-risk exposure

About $22 trillion of global debt rated by Moody's Investors Service has "high," or "very high" cyber-risk exposure, with electric, gas and water utilities, as well as hospitals, among the sectors facing the highest risk of cyberattacks.…

☐ β˜† βœ‡ The Register - Security

Steganography alert: Backdoor spyware stashed in Microsoft logo

October 2nd 2022 at 12:56

Now that's sticker shock

Internet snoops have been caught concealing spyware in an old Windows logo in an attack on governments in the Middle East.…

☐ β˜† βœ‡ The Register - Security

BlackCat malware lashes out at US defense IT contractor

October 2nd 2022 at 08:47

Also, Amazon's Ring footage TV shows draws criticism, US v Soviet spying docs found, and more

In Brief The BlackCat ransomware gang, also known as ALPHV, has allegedly broken into IT firm NJVC, a provider of services to civilian US government agencies and the Department of Defense.…

☐ β˜† βœ‡ The Register - Security

Gone in a day: Ethical hackers say it would take mere hours to empty your network

October 1st 2022 at 09:57

300 red teamers walk into a bar…

Once they've broken into an IT environment, most intruders need less than five hours to collect and steal sensitive data, according to a SANS Institute survey of more than 300 ethical hackers. …

☐ β˜† βœ‡ The Register - Security

Microsoft warns of North Korean crew posing as LinkedIn recruiters

September 30th 2022 at 05:53

State-sponsored ZINC allegedly passes on malware-laden open source apps

Microsoft has claimed a North Korean crew poses as LinkedIn recruiters to distribute poisoned versions of open source software packages.…

☐ β˜† βœ‡ The Register - Security

Stop us if you've heard this one before: Exchange Server zero-days actively exploited

September 30th 2022 at 03:03

Remember this next time Microsoft talks about how seriously it takes security

Updated Infosec experts have warned zero-day flaws in Microsoft’s Exchange server are being actively exploited.…

☐ β˜† βœ‡ The Register - Security

Ex-eBay execs jailed for cyberstalking web critics

September 30th 2022 at 00:58

Still to come: Civil RICO lawsuit against e-souk and former top brass

Two now-former eBay executives who pleaded guilty to cyberstalking charges this year have been sent down and fined tens of thousands of dollars.…

☐ β˜† βœ‡ The Register - Security

How CIA betrayed informants with shoddy front websites built for covert comms

September 29th 2022 at 23:03

Top tip, don't give your secret login box the HTML form type 'password'

For almost a decade, the US Central Intelligence Agency communicated with informants abroad using a network of websites with hidden communications capabilities.…

☐ β˜† βœ‡ The Register - Security

Pentagon is far too tight with its security bug bounties

September 29th 2022 at 21:27

But overpriced, useless fighter jets? That's something we can get behind

Discovering and reporting critical security flaws that could allow foreign spies to steal sensitive US government data or launch cyberattacks via the Department of Defense's IT systems doesn't carry a high reward.…

☐ β˜† βœ‡ The Register - Security

Covert malware targets VMware shops for hypervisor-level espionage

September 29th 2022 at 13:00

Mandiant tracks back operators, finds ties to China

Emerging covert malware can target VMware environments to allow criminals to gain persistent administrative access to hypervisors, transfer files, and execute arbitrary commands on virtual machines, according to VMware and Mandiant, which discovered such a software nasty in the wild earlier this year.…

☐ β˜† βœ‡ The Register - Security

Microsoft to kill off old access rules in Exchange Online

September 28th 2022 at 23:34

Awoooogah – this is your one-year warning to switch over, enterprises

Microsoft next month will start phasing out Client Access Rules (CARs) in Exchange Online – and will do away with this means for controlling access altogether within a year.…

☐ β˜† βœ‡ The Register - Security

Matrix chat encryption sunk by five now-patched holes

September 28th 2022 at 21:22

You take the green pill, you'll spend six hours in a 'don't roll your own crypto' debate

Four security researchers have identified five cryptographic vulnerabilities in code libraries that can be exploited to undermine Matrix encrypted chat clients. This includes impersonating users and sending messages as them.…

☐ β˜† βœ‡ The Register - Security

The web's cruising at 13 million new and nefarious domain names a month

September 28th 2022 at 20:20

Or so Akamai is dying to tell us

Akamai reckons that, in the first half of 2022 alone, it flagged nearly 79 million newly observed domains (NODs) as malicious.…

☐ β˜† βœ‡ The Register - Security

Want to sneak a RAT into Windows? Buy Quantum Builder on the dark web

September 28th 2022 at 17:00

Beware what could be hiding in those LNK shortcuts

A tool sold on the dark web that allows cybercriminals to build malicious shortcuts for delivering malware is being used in a campaign pushing a longtime .NET keylogger and remote access trojan (RAT) named Agent Tesla.…

☐ β˜† βœ‡ The Register - Security

Hacked Fast Company sends 'obscene and racist' alerts via Apple News

September 28th 2022 at 16:30

Someone going by 'Thrax' claims responsibility for 'incredibly easy' breach

Apple News shut down Fast Company's news channel after "an incredibly offensive alert" was sent to subscribers following a hack of the business publication on Tuesday evening.…

☐ β˜† βœ‡ The Register - Security

Reducing the risk of human error in cyber security

September 28th 2022 at 13:56

Tips on how to turn a potential weakness into a towering strength

Webinar We all make mistakes. Some happy accidents enhance the way we live. Matches were invented when scientist John Walker was cleaning his laboratory with a wooden stick coated in chemicals and it caught fire. But if you are trying to secure your data, unforced errors are the last thing you need to torch it.…

☐ β˜† βœ‡ The Register - Security

Ever suspected bankers could just use WhatsApp comms? $1.8b says you're right

September 28th 2022 at 13:00

Thought shadow IT at your office was bad? Try enforcing workplace device policies on hedge fund traders

Updated Ever given a colleague a quick Signal call so you can sidestep a monitored workplace app? Well, we'd hope you're not in a highly regulated industry like staff at eleven of the world's most powerful financial firms, who yesterday were fined nearly $2 billion for off-channel comms.…

☐ β˜† βœ‡ The Register - Security

Here's how crooks will use deepfakes to scam your biz

September 28th 2022 at 07:24

Need some tools of deception? GitHub's got 'em

All of the materials and tools needed to make deepfake videos – from source code to publicly available images and account authentication bypass services – are readily available and up for sale on the public internet and underground forums. …

☐ β˜† βœ‡ The Register - Security

Australia asks FBI to help find attacker who stole data from millions of users

September 28th 2022 at 03:35

Apparent perp claims to have deleted swiped info as carrier Optus struggles to get its story straight

+Comment Australian authorities have asked the United States Federal Bureau of Investigation (FBI) to assist with investigations into the data breach at local telco Optus.…

☐ β˜† βœ‡ The Register - Security

A question of identity

September 28th 2022 at 03:09

How Incode creates trust by keeping data private and secure

Video There's no getting away from it, identity is key - the prima materia for creating security and trust in your multi-cloud universe.…

☐ β˜† βœ‡ The Register - Security

Sophos fixes critical firewall hole exploited by miscreants

September 28th 2022 at 00:35

Code-injection bug in your network security... mmm, yum yum

A critical code-injection vulnerability in Sophos Firewall has been fixed β€”Β but not before miscreants found and exploited the bug.…

☐ β˜† βœ‡ The Register - Security

Samsung sued for gobbling up too much personal info that miscreants then stole

September 27th 2022 at 18:15

If you're gonna force everyone to register an account, at least protect that data, lawsuit argues

A lawsuit has accused Samsung of failing to address a cyber-intrusion in early 2022, leading to the theft of US customers' personally identifiable information (PII) in a second attack months later in July.…

☐ β˜† βœ‡ The Register - Security

Meta busts first Chinese campaign prodding US midterms

September 27th 2022 at 15:00

Russian cybercriminals were also caught targeting Europe with anti-Ukraine messages

Meta says it has disrupted a misinformation network targeting US political discourse ahead of the 2022 midterm elections – and one that sought to influence public opinion in Europe about the conflict in Ukraine.…

☐ β˜† βœ‡ The Register - Security

Microsoft says it's boosted phishing protection in Windows 11 22H2

September 27th 2022 at 14:00

Security tool warns admins, users when a password is used on an untrusted site or stored locally

In the latest version of Windows 11, namely 22H2, Microsoft has introduced a feature in its Defender SmartScreen tool designed to, hopefully, keep passwords safer.…

☐ β˜† βœ‡ The Register - Security

What's Microsoft been up to? A quick tour of Windows 11 22H2's security features

September 27th 2022 at 11:32

And some requirements to be aware of

In brief As it rolled out a laundry list of features in the latest version of Windows 11, namely version 22H2, this month, Microsoft has also detailed some of the added security mechanisms.…

☐ β˜† βœ‡ The Register - Security

China's infosec researchers obeyed Beijing and stopped reporting vulns ... or did they?

September 27th 2022 at 06:58

Report finds increase in anonymous vuln reports

The number of vulnerability reports provided by Chinese information security researchers has fallen sharply, according to research by think tank The Atlantic Council, which also found a strangely commensurate increase in bug reports from unknown sources.…

☐ β˜† βœ‡ The Register - Security

Ukraine fears 'massive' Russian cyberattacks on power, infrastructure

September 27th 2022 at 00:03

Will those be before or after the nuke strikes Putin keeps banging on about?

Russia plans to conduct "massive cyberattacks" on Ukraine and its allies' critical infrastructure and energy sector, according to Kyiv.…

☐ β˜† βœ‡ The Register - Security

SQL Server admins warned about Fargo ransomware

September 26th 2022 at 16:00

From a city in North Dakota with a crime problem to file-scrambling nasty

Organizations are being warned about a wave of attacks targeting Microsoft SQL Server with ransomware known as Fargo, which encrypts files and threatens victims that their data may be published online if they do not pay up.…

☐ β˜† βœ‡ The Register - Security

India seeks verified IDs to register email accounts

September 26th 2022 at 01:20

PLUS: Warnings on Chinese payment schemes; AWS brushes up its Cantonese; Hong Kong ponders digital dollar; and more!

Asia In Brief India's government last week released a draft telco law that defines all over-the-top services as telecoms providers and therefore makes them subject to the same regulations imposed on carriers.…

☐ β˜† βœ‡ The Register - Security

How do you run rings around ransomware?

September 26th 2022 at 13:29

Build data resilience in the cloud first

Webinar It's critical to protect data from infection or exposure to ransomware. The risks are all too clear and the consequences of inattention, weak foundations, and lack of strategic preparation can be catastrophic.…

☐ β˜† βœ‡ The Register - Security

An expert guide to securing APIs

September 26th 2022 at 09:50

How Web Application and API Protection (WAAP) can help you sleep at night

Webinar The application programming interface (API) has been around pretty much as long as computing itself, but it's perhaps only since the early years of the millennium that its use exploded with a mass shift to web applications.…

☐ β˜† βœ‡ The Register - Security

Noberus ransomware gets info-stealing upgrades, targets Veeam backup software

September 25th 2022 at 08:50

'One of the most dangerous and active malware developers operating at the moment'

Crooks spreading the Noberus ransomware are adding weapons to their malware to steal data and credentials from compromised networks.…

☐ β˜† βœ‡ The Register - Security

Open up, it's the IRS. We're here about the crypto tax you dodged

September 23rd 2022 at 19:25

'At least ten' people didn't declare coin income. Wow, what a bust

The IRS has been granted a court order to collect records from a bank the agency said will help it identify US taxpayers who failed to report taxable income from crypto trades. …

☐ β˜† βœ‡ The Register - Security

Significant customer data exposed in attack on Australian telco

September 23rd 2022 at 17:29

Subscribers have questions – like 'When were you going to tell us?'

Updated Australian telecommunications company Optus has fallen victim to a significant cyberattack and data breach.…

☐ β˜† βœ‡ The Register - Security

Iran blocks Whatsapp, Instagram as citizens protest death of Mahsa Amini

September 23rd 2022 at 15:24

Also: New 'magnet of threats' attackers and FBI has details on Iran's online incursion into Albania

Iran is experiencing a near-total internet service disruption in the west and intermittent interruptions nationwide, with access to Instagram, Whatsapp and some mobile networks being blocked, says Netblocks.…

☐ β˜† βœ‡ The Register - Security

Keeping secrets safe off prem

September 23rd 2022 at 09:08

Harness the power of hardware with Confidential Computing in the cloud

Webinar Keeping data confidential in a cloud environment requires the highest possible privacy levels. It's only then that your most sensitive workloads can survive the burgeoning risks to data security that every organisation faces.…

☐ β˜† βœ‡ The Register - Security

Privacy watchdog steps up fight against Europol's hoarding of personal data

September 23rd 2022 at 06:27

If you could stop storing records on people unconnected to any crimes, that would be great

An EU watchdog says rules that allow Europol cops to retain personal data on individuals with no links to criminal activity go against Europe's own data privacy protections, not to mention undermining the regulator's powers and role.…

☐ β˜† βœ‡ The Register - Security

Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws

September 22nd 2022 at 20:15

While issuing an emergency patch for Endpoint Configuration Manager

Data-stealing spyware disguised as a banking rewards app is targeting Android users, Microsoft's security team has warned.…

☐ β˜† βœ‡ The Register - Security

Cambodian authorities crack down on cyber slavery amid international pressure

September 22nd 2022 at 15:15

Lured by fake jobs, victims are isolated abroad and forced to carry out crypto and romance scams, and more

Authorities in Sihanoukville, Cambodia announced on Sunday that a raid last week uncovered evidence of forced labor cybercrime syndicates that participated in human trafficking and torture.…

☐ β˜† βœ‡ The Register - Security

Fake sites fool Zoom users into downloading deadly code

September 22nd 2022 at 13:45

Ah, the human touch

Beware the Zoom site you don't recognize, as a criminal gang is creating multiple fake versions aimed at luring users to download malware that can steal banking data, IP addresses, and other information.…

☐ β˜† βœ‡ The Register - Security

Alert: 15-year-old Python tarfile flaw lurks in 'over 350,000' code projects

September 22nd 2022 at 01:16

Oh cool, a 5,500-day security hole

At least 350,000 open source projects are believed to be potentially vulnerable to exploitation via a Python module flaw that has remained unfixed for 15 years.…

☐ β˜† βœ‡ The Register - Security

San Francisco cops can use private cameras to live-monitor 'significant events'

September 21st 2022 at 23:52

All eyes on you, and you, and you

San Francisco police are now set to use non-city-owned video cameras for real-time surveillance under a rule approved by the Board of Supervisors.…

☐ β˜† βœ‡ The Register - Security

Malwarebytes blocks Google, YouTube as malware

September 21st 2022 at 15:56

Sounds like fair comment

Updated Google and its Youtube domains are being flagged as malicious by Malwarebytes as of Wednesday morning, blocking users from accessing a whole range of websites.…

❌