News
23andMe's genes not strong enough to avoid Chapter 11
Beleaguered DNA testing biz 23andMe - hit by a massive cyber attack in 2023 - is filing for bankruptcy protection in the US following years of financial uncertainty.…
Is Washington losing its grip on crypto, or is it a calculated pivot to digital dominance?
Analysis Is the US retreating from its hardline stance on crypto? On Friday, the US Treasury Department lifted sanctions imposed on notorious crypto mixer Tornado Cash, once accused of washing billions in illicit crypto for criminals and nation-states alike.…
Microsoft tastes the unexpected consequences of tariffs on time
Opinion Never attribute to malice that which is adequately explained by stupidity. This works well in sane times, less so when "but it's both" is the default. Apply it to Microsoft's decision to make bug reports include not only a working example but a video of the same, and the meter oscillates wildly. What were they thinking? What did they expect?…
Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warns
Infosec In Brief Organized crime networks are now reliant on digital tech for most of their activities according to Europol, the European agency that fights international crime on the continent and beyond.…
China bans compulsory facial recognition and its use in private spaces like hotel rooms
Asia In Brief China’s Cyberspace Administration and Ministry of Public Security have outlawed the use of facial recognition without consent.…
Oracle Cloud says it's not true someone broke into its login servers and stole data
Oracle has straight up denied claims by a miscreant that its public cloud offering has been compromised and information stolen.…
Ex-NSA boss: Good news. Election security focus helped dissuade increase in Russian meddling with US
Interview Russia appears to be having second thoughts on how aggressively, or at least how visibly, it attempts to influence American elections, according to a former head of the NSA.…
AdTech CEO whose products detected fraud jailed for financial fraud
The former CEO of Kubient, an advertising tech company that developed a cloudy product capable of detecting fraudulent ads, has been jailed for fraud.…
Paragon spyware deployed against journalists and activists, Citizen Lab claims
Infosec newsbytes Israeli spyware maker Paragon Solutions pitches its tools as helping governments and law enforcement agencies to catch criminals and terrorists, but a fresh Citizen Lab report claims its software has been used to target journalists, activists, and other civilians.…
Capital One cracker could be sent back to prison after judges rule she got off too lightly
Paige Thompson, the perpetrator of the Capital One data theft, may be sent back behind bars – after an appeals court ruled her sentence of time served plus five years of probation was too lenient.…
Dept of Defense engineer took home top-secret docs, booked a fishing trip to Mexico – then the FBI showed up
A US Department of Defense electrical engineer has turned his world upside down after printing 155 pages from 20 documents, all of which were marked top secret and classified, from his DoD workspace, brought them home with him – and was collared on his way to Mexico.…
Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist
In patching the latest critical remote code execution (RCE) bug in Backup and Replication, software shop Veeam is attracting criticism from researchers for the way it handles uncontrolled deserialization vulnerabilities.…
Too many software supply chain defense bibles? Boffins distill advice
Organizations concerned about software supply chain attacks should focus on role-based access control, system monitoring, and boundary protection, according to a new preprint paper on the topic.…
The post-quantum cryptography apocalypse will be televised in 10 years, says UK's NCSC
The UK's National Cyber Security Centre (NCSC) today started the post-quantum cryptography (PQC) countdown clock by claiming organizations have ten years to migrate to a safer future.…
Attackers swipe data of 500k+ people from Pennsylvania teachers union
The Pennsylvania State Education Association (PSEA) says a July 2024 "security incident" exposed sensitive personal data on more than half a million individuals, including financial and health info.…
Names, bank info, and more spills from top sperm bank
One of the world's largest sperm banks, California Cryobank, is in a sticky situation.…
IBM scores perfect 10 ... vulnerability in mission-critical OS AIX
IBM "strongly recommends" customers running its Advanced Interactive eXecutive (AIX) operating system apply patches after disclosing two critical vulnerabilities, one of which has a perfect 10 severity score.…
Ex-US Cyber Command chief: Europe and 5 Eyes can't fully replicate US intel
If the United States stopped sharing cyber-threat intel with Ukraine, its European allies and the rest of the Five Eyes nations wouldn't be able to provide all the info Uncle Sam collects, according to former chief of US Cyber Command and the NSA General Paul Nakasone.…
Show top LLMs buggy code and they'll finish off the mistakes rather than fix them
Researchers have found that large language models (LLMs) tend to parrot buggy code when tasked with completing flawed snippets.…
CISA fires, now rehires and immediately benches security crew on full pay
The upheaval at the US government's Cybersecurity and Infrastructure Security Agency, aka CISA, took another twist on Tuesday, as it moved to reinstate staffers it had fired over the past few weeks - specifically those still in their probationary period - though they've been benched on paid leave for now.…
Pages
