News
The software UK techies need to protect themselves now Apple's ADP won’t
Apple customers, privacy advocates, and security sleuths have now had the weekend to stew over the news of the iGadget maker's decision to bend to the UK government and disable its Advanced Data Protection (ADP) feature.…
Rather than add a backdoor, Apple decides to kill iCloud E2EE for UK peeps
Infosec in brief Apple has responded to the UK government's demand for access to its customers’ data stored in iCloud by deciding to turn off its Advanced Data Protection (ADP) end-to-end encryption service for UK users.…
Experts race to extract intel from Black Basta internal chat leaks
Hundreds of thousands of internal messages from the Black Basta ransomware gang were leaked by a Telegram user, prompting security researchers to bust out their best Russian translations post haste.…
Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws
Security engineers have released a proof-of-concept exploit for four critical Ivanti Endpoint Manager bugs, giving those who haven't already installed patches released in January extra incentive to revisit their to-do lists.…
Thailand ready to welcome 7,000 trafficked scam call center victims back from Myanmar
Thailand is preparing to receive thousands of people rescued from scam call centers in Myanmar as the country launches a major crackdown on the pervasive criminal activity across its border.…
Linux royalty backs adoption of Rust for kernel code, says its rise is inevitable
Some Linux kernel maintainers remain unconvinced that adding Rust code to the open source project is a good idea, but its VIPs are coming out in support of the language's integration.…
Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes
Microsoft is so concerned about security in its Copilot products for folks that it’s lifted bug bounty payments for moderate-severity vulnerabilities from nothing to a maximum of $5,000, and expanded the range of vulnerabilities it will pay people to find and report.…
Oops, some of our customers' Power Pages sites were exploited, says Microsoft
Microsoft has fixed a security flaw in its Power Pages website-building SaaS, after criminals got there first – and urged users to check their sites for signs of exploitation.…
US minerals company says crooks broke into email and helped themselves to $500K
A NASDAQ-listed US minerals company says cybercriminals broke into its systems on Valentine's Day and paid themselves around $500,000 – money earmarked for a vendor.…
Critical flaws in Mongoose library expose MongoDB to data thieves, code execution
Security sleuths found two critical vulnerabilities in a third-party library that MongoDB relies on, which means bad guys can potentially steal data and run code.…
Two arrested after pensioner scammed out of six-figure crypto nest egg
Two men are in police custody after being arrested in connection with a July cryptocurrency fraud involving a man in his seventies.…
Ghost ransomware crew continues to haunt IT depts with scarily bad infosec
The operators of Ghost ransomware continue to claim victims and score payments, but keeping the crooks at bay is possible by patching known vulnerabilities and some basic infosec actions, according to a joint advisory issued Wednesday by the FBI and US Cybersecurity and Infrastructure Security Agency.…
Medusa ransomware gang demands $2M from UK private health services provider
Exclusive HCRG Care Group, a private health and social services provider, has seemingly fallen victim to the Medusa ransomware gang, which is threatening to leak what's claimed to be stolen internal records unless a substantial ransom is paid.…
US Army soldier linked to Snowflake extortion rampage admits breaking the law
A US Army soldier suspected of hacking AT&T and Verizon has admitted leaking online people's private call records.…
Trump’s DoD CISO pick previously faced security clearance suspension
Donald Trump's nominee for a critical DoD cybersecurity role sports a resume that outshines many of his past picks, despite previously suspended security clearance.…
Check out this free automated tool that hunts for exposed AWS secrets in public repos
A free automated tool that lets anyone scan public GitHub repositories for exposed AWS credentials has been released.…
Hundreds of Dutch medical records bought for pocket change at flea market
Typically shoppers can expect to find tie-dye t-shirts, broken lamps and old disco records at flea markets, now it seems storage drives filled with huge volumes of sensitive data can be added to that list.…
London celebrity talent agency reports itself to ICO following Rhysida attack claims
A London talent agency has reported itself to the UK's data protection watchdog after the Rhysida ransomware crew last week claimed it had attacked the business, which represents luminaries of stage and screen.…
Healthcare outfit that served military personnel settles allegations it faked infosec compliance for $11 million
An alleged security SNAFU that occurred during the Obama administration has finally been settled under the second Trump administration.…
Palo Alto firewalls under attack as miscreants chain flaws for root access
A flaw patched last week by Palo Alto Networks is now under active attack and, when chained with two older vulnerabilities, allows attackers to gain root access to affected systems.…
Pages
