RansomHub hits 210 victims in just 6 months The ransomware gang recruits high-profile affiliates from LockBit and ALPHV Cyber-crime30 Aug 2024 |
Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers Updated Infosec hounds say they spotted vulnerability during routine travel in the US Research30 Aug 2024 | 28
Brain Cipher claims attack on Olympic venue, promises 300 GB data leak French police reckon financial system targeted during Summer Games Cyber-crime29 Aug 2024 | 4
US sues Georgia Tech over alleged cybersecurity failings as a Pentagon contractor Rap sheet spells out major no-nos after disgruntled staff blow whistle Security23 Aug 2024 | 22
Benign bug in iOS and iPadOS crashes gizmos with just four characters More of an Easter egg than a vuln, but a fun one to mess around with Personal Tech22 Aug 2024 | 28
Ransomware batters critical industries, but takedowns hint at relief Whether attack slowdown continues downward trend is the million dollar question that security researchers can't answer Cyber-crime22 Aug 2024 | 1
110K domains targeted in 'sophisticated' AWS cloud extortion campaign Updated If you needed yet another reminder of what happens when security basics go awry Research21 Aug 2024 | 4
Russia tells citizens to switch off home surveillance because the Ukrainians are coming Forget about your love life too, no dating apps until the war is over Security21 Aug 2024 | 169
Plane tracker app FlightAware admits user data exposed for years Updated Privacy blunder alert omits number of key details Security20 Aug 2024 | 42
'Right to switch off' initiative aims to boost economy by beating burnout Your country needs you… to quit it with all those sick days Offbeat20 Aug 2024 | 129
Multiple flaws in Microsoft macOS apps unpatched despite potential risks Windows giant tells Cisco Talos it isn't fixing them Research19 Aug 2024 | 21
National Public Data tells officials 'only' 1.3M people affected by intrusion Investigators previously said the number was much, much higher Cyber-crime19 Aug 2024 | 6
B2B ISP Fastnet staggers back to feet after VMware incident Company continues to investigate root cause VMware Explore19 Aug 2024 | 8
Unicoin hints at potential data meddling after G-Suite compromise Attacker locked out all staff for four days Cyber-crime16 Aug 2024 | 9
Google raps Iran's APT42 for raining down spear-phishing attacks US politicians and Israeli officials among the top targets for the IRGC’s cyber unit Research15 Aug 2024 | 1
Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail He’ll also have to pay back $1.2 million from fraudulent transactions he facilitated Cyber-crime15 Aug 2024 | 5
Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster Three state attorneys general probed the company and found plenty to chastise Cyber-crime14 Aug 2024 | 3
Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth Biz admits turning human women into faceless, sexualized furniture was a 'tone deaf' marketing ploy Security14 Aug 2024 | 202
US accuses man of being 'elite' ransomware pioneer they've hunted for years Authorities allege 'J.P. Morgan' practiced ‘extreme operational and online security’ Cyber-crime13 Aug 2024 | 7
Feds bust minor league Radar/Dispossessor ransomware gang The takedown may be small but any ransomware gang sent to the shops is good news in our book Cyber-crime13 Aug 2024 | 5
Orion SA says scammers conned company out of $60 million Incident sounds like a BEC fraud targeting an unwitting staffer Cyber-crime13 Aug 2024 | 7
Attacker steals personal data of 200K+ people with links to Arizona tech school Nearly 50 different data points were accessed by cybercrim Cyber-crime12 Aug 2024 | 7
Mega money, unfathomable violence pervade thriving underground doxxing scene Black Hat It also attracts exactly the type of unempathetic people you would think it does Cyber-crime12 Aug 2024 | 8
CrowdStrike president cheered after accepting 'Epic Fail' Pwnie award DEF CON Michael Sentonas hopes trophy will remind staff that failure is unacceptable Offbeat12 Aug 2024 | 53
Pro-Iran groups lay groundwork for 'chaos and violence' as US election meddling attempts intensify Political officials, advisors targeted in cyber attacks as fake news sites deliver lefty zingers Security09 Aug 2024 | 23
Using 1Password on Mac? Patch up if you don’t want your Vaults raided Hundreds of thousands of users potentially vulnerable Patches08 Aug 2024 | 23
Entrust faces years of groveling to regain browsers' trust, say rival chiefs Sectigo bosses claim it's only a matter of time before Microsoft and Apple drop Big E from their root stores too Security08 Aug 2024 | 4
Small CSS tweaks can help nasty emails slip through Outlook's anti-phishing net A simple HTML change and the warning is gone! Research07 Aug 2024 | 13
Police take just 2 days to recover $40M stolen in business email scam Timor-Leste is a known cybercrime hotspot Cyber-crime07 Aug 2024 | 9
UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack Nearly 83,000 people had their data stolen amid chaos that struck NHS healthcare Cyber-crime07 Aug 2024 | 11
Sonic Automotive says ransomware-linked CDK software outage cost it $30M Misery loves company – all of its competitors were also negatively impacted Cyber-crime06 Aug 2024 | 2
Bad apps bypass Windows security alerts for six years using newly unveiled trick Windows SmartScreen and Smart App Control both have weaknesses of which to be wary Research06 Aug 2024 | 16
CrowdStrike unhappy about Delta's 'litigation threat,' claims airline refused 'free on-site help' Vendor plans to aggressively defend its case before listing catalog of shortcomings at the airline Security05 Aug 2024 | 67
Keir Starmer says facial recognition tech is the answer to far-right riots The technology remains highly controversial despite widespread rollout Public Sector05 Aug 2024 | 292
UK plans to revamp national cyber defense tools are already in motion Work aims to build on the success of NCSC's 2016 initiative – and private sector will play a part Cyber-crime02 Aug 2024 | 8
FBI, CISA remind US voters that DDoS attacks can't touch election systems PSA comes amid multiple IT services crises in recent days Cyber-crime01 Aug 2024 | 16
Firefox's Mozilla follows Google in losing trust in Entrust's TLS certificates Compliance failures and unsatisfactory responses mount from the long-time certificate authority CSO01 Aug 2024 | 15
Chrome adopts app-bound encryption to stymie cookie-stealing malware Windows users now get macOS-grade secret security CSO31 Jul 2024 | 4
Five months after takedown, LockBit is a shadow of its former self Feature An unprecedented period for an unparalleled force in cybercrime Malware Month31 Jul 2024 | 19
UK Electoral Commission slapped for basic cybersecurity fails It took 13 months to notice 40 million voters' data was compromised CSO31 Jul 2024 | 25
Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability Get those patches applied – all the big dogs are abusing it VMware Explore30 Jul 2024 | 18
Revamped UK cybersecurity bill couldn't come soon enough, but details are patchy Analysis Long overdue updates include expanded mandatory security incident reporting Malware Month30 Jul 2024 | 28
Intruders at HealthEquity rifled through storage, stole 4.3M people's data No mention of malware or ransomware – somewhat of a rarity these days Cyber-crime29 Jul 2024 | 5
Progress discloses second critical flaw in Telerik Report Server in as many months These are the kinds of bugs APTs thrive on, just ask the Feds Patches26 Jul 2024 | 1
Uncle Sam accuses telco IT pro of decade-long spying campaign for China Beijing has a long history of recruiting US residents to carry out various espionage activities Cyber-crime25 Jul 2024 | 9
You should probably fix this 5-year-old critical Docker vuln fairly sharpish For some unknown reason, initial patch was omitted from later versions Patches25 Jul 2024 |
Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines Concerns abound over why it has taken so long to recover compared to competitors Security24 Jul 2024 | 10
Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis Latest trend follows various malware campaigns that began just hours after IT calamity Cyber-crime23 Jul 2024 | 4
Global cops power down world's 'most prolific' DDoS dealership One arrest was made weeks ago but no word on the suspect's identity yet Cyber-crime22 Jul 2024 | 1
Cybercrooks crafting solo careers in wake of ransomware takedowns More baddies go it alone as trust in big gangs withers, claims Europol Cyber-crime22 Jul 2024 | 2
Two Russians sanctioned over cyberattacks on US critical infrastructure Supposed hacktivist efforts previously linked to the Kremlin's GRU Cyber-crime22 Jul 2024 | 5
Second NHS IT system confirmed to be affected by CrowdStrike issues Cancer treatments are in jeopardy across multiple healthcare facilities Software19 Jul 2024 | 34
CrowdStrike shares sink as global IT outage savages systems worldwide Updated Emergency services, medical practices, airlines, banks, and more all crippled Software19 Jul 2024 | 285
Russia’s FIN7 is peddling its EDR-nerfing malware to ransomware gangs Major vendors' products scuppered by novel techniques Research18 Jul 2024 | 5
Maximum-severity Cisco vulnerability allows attackers to change admin passwords You’re going to want to patch this one Patches18 Jul 2024 | 17
Ransomware continues to pile on costs for critical infrastructure victims Millions more spent without any improvement in recovery times Malware Month17 Jul 2024 | 5
London council accuses watchdog of 'exaggerating' danger of 2020 raid on residents' data You escaped a big fat fine! Take the win and run, won’t you? Malware Month17 Jul 2024 | 26
Cyber-crime super-crew Scattered Spider falls in love with RansomHub and Qilin Extortionists left hanging after rivals crawled into the woodwork Malware Month16 Jul 2024 |
Rite Aid admits 2.2 million people’s data stolen by criminals RansomHub allegedly strikes again as its star continues to rise in the cybercrime scene Malware Month16 Jul 2024 | 6
Infoseccers claim Squarespace migration linked to DNS hijackings at Web3 firms Company keeps quiet amid high-profile compromises Security15 Jul 2024 | 3