News

No class: Black Suit ransomware gang boasts of 200GB haul from one raid

Cybercriminals closed some schools in America and Britain this week, preventing kindergarteners in Washington state from attending their first-ever school day and shutting down all internet-based systems for Biggin Hill-area students in England for the next three weeks.…

You hate to see it

The Meow ransomware group has grabbed the second most active gang spot in an unexpected surge in activity following a major brand overhaul.…

Allegedly swiped more than 5.2M files and threatens to publish the lot

Ransomware gang Hunters International reportedly claims to have stolen more than 5.2 million files belonging to the London branch of the Industrial and Commercial Bank of China (ICBC), a Chinese state-owned bank and financial service corporation, and set a deadline of September 13 to release all the data.…

A really big oh sh*t moment, for sure

For C-suite execs and security leaders, discovering your organization has been breached, your critical systems locked up and your data stolen, then receiving a ransom demand, is probably the worst day of your professional life.…

What happens at Black Hat…

While trying to escape the Las Vegas heat during Black Hat last month, watchTowr Labs researchers decided to poke around for weaknesses in the WHOIS protocol. They claim to have found a way to undermine certificate authorities, which the world trusts to keep the internet safe by verifying the identity of websites.…

ISC2 argues security training needs to steer toward what hiring managers want

The shortfall between the number of working security professionals and the number of security job openings has reached 4.8 million – a new high, according to cyber security non-profit ISC2.…

Minister reckons dedicated cops necessary to protect digital transactions

India has announced a plan to train a specialized wing of 5000 "Cyber Commandos" in the next five years, as part of its efforts to address cyber crime.…

CISA wants you to leap on Citrix and Ivanti issues. Adobe, Intel, SAP also bid for patching priorities

Patch Tuesday  Another Patch Tuesday has dawned, as usual with the unpleasant news that there are pressing security weaknesses and blunders to address.…

Elderly people report the greatest losses

The FBI just dropped its annual report examining the costs of crypto-related cybercrime, painting a predictably grim picture as total losses in the US exceeded $5.6 billion in 2023 – a 45 percent year-on-year increase.…

Beijing aimed research at immediate needs – like blocking leaks – while the US sought abstract knowledge

China has an undeniable lead in quantum networking technology – a state of affairs that should give the US pause, despite its lead in quantum computing.…

It promised vanishing messages, but now 'it's privacy theater'

Video  A popular privacy feature in WhatsApp is "completely broken and can be trivially bypassed," according to developers at cryptowallet startup Zengo.…

US alarmed by heightened Kremlin naval activity worldwide

Russia's naval activity near undersea cables is reportedly drawing the scrutiny of US officials, further sparking concerns that the Kremlin may be plotting to "sabotage" underwater infrastructure via a secretive, dedicated military unit called the General Staff Main Directorate for Deep Sea Research (GUGI).…

'Insider wrongdoing' to blame for the breach

Avis Rent A Car System has alerted 299,006 customers across multiple US states that their personal information was stolen in an August data breach.…

Criminals with plenty of time on their hands may now have credit card details

Around 1.7 million people will receive a letter from Florida-based Slim CD, if they haven't already, after the company detected an intrusion dating back nearly a year.…

Watch this webinar for tips on enhancing resilience with advanced protection strategies

Webinar  As cyberattacks like ransomware and malware grow more sophisticated, organizations need to ensure their enterprise storage systems are robust and resilient.…

The latest of many attempts to stifle perceived threats to Putin's regime

A pro-democracy NGO in Russia says it looks like the Kremlin-linked COLDRIVER group was behind last month's hack-and-leak job that saw files and inboxes dumped online.…

Understanding new NIS2, DORA, and Tiber-EU legislation is essential to improving IT security, explains SANS

Webinar  As cybersecurity regulations tighten, organisations face new challenges that require more than just compliance checklists.…

Plus: Trump family X accounts hijacked to promote crypto scam; Fog ransomware spreads; Hijacked PyPI packages; and more

Infosec in brief  After activating its chameleon field and going to ground following press attention earlier this year, the dangerous Predator commercial spyware kit is back – with upgrades.…

White House floats round two of regulations

It sounds like the start of a bad joke: Digital trespassers from China, Russia, and Iran break into US water systems.…

Not so much when trying to convert coding veterans

Google recently rewrote the firmware for protected virtual machines in its Android Virtualization Framework using the Rust programming language and wants you to do the same, assuming you deal with firmware.…