Microsoft grows automated assault disruption to cover BEC, ransomware campaignsThere’s no HumOR in cyberattacks At last year's Ignite show, Microsoft talked up a capability in its...
Day: March 5, 2023
European Commission bans TikTok from staff gadgets
European Commission bans TikTok from staff gadgetsCyber Europe cyber worried about cyber threats, doesn't cyber use the other C word (China) The European Commission on Thursday...
Google destroyed evidence for antitrust battle, Feds complain
Google destroyed evidence for antitrust battle, Feds complainrm -rf'ing staff chat logs can't go unpunished, says Uncle Sam The US Department of Justice (DoJ) asked the...
Bitcoin mining rig found stashed in school crawlspace
Bitcoin mining rig found stashed in school crawlspaceDon't blame the kids! Ex-city employee charged with $17k power theft Pics A Massachusetts man accused of using his...
Telus source code, staff info for sale on dark web forum
Telus source code, staff info for sale on dark web forum$50k buys you '1,000 unique repositories' that may or may not be legit Canadian communications giant...
‘Ethical hacker’ among ransomware suspects cuffed by Dutch cops
'Ethical hacker' among ransomware suspects cuffed by Dutch copsBeware the Dark Side Dutch police have arrested three men for their alleged involvement with a ransomware gang...
Microsoft: For better security, scan more Exchange server objects
Microsoft: For better security, scan more Exchange server objectsSoftware giant takes some files and processes off the exclusion list Microsoft is recommending that Exchange server users...
Russian charged with smuggling US counterintel tech to Motherland
Russian charged with smuggling US counterintel tech to MotherlandAlso, don't download that 'ChatGPT Windows client,' and this week's critical vulnerabilities to keep an eye on In...
China makes it even harder for data to leave its shores
China makes it even harder for data to leave its shoresMany foreign companies had already given up – now there's more red tape Starting in June,...
Dish multi-day outage rolls on as ransomware fears grow
Dish multi-day outage rolls on as ransomware fears growTechies 'hard at work' and all of that US telco Dish said it is investigating a multi-day network...
Feeling VEXed by software supply chain security? You’re not alone
Feeling VEXed by software supply chain security? You’re not aloneChainguard CEO explains how to secure code given crims know to poison it at the source SCSW ...
US Marshals Service leaks ‘law enforcement sensitive information’ in ransomware incident
US Marshals Service leaks ‘law enforcement sensitive information’ in ransomware incidentIt’s not just another data breach when the victim oversees witness protection programs The US Marshals...
Russian hacktivists DDoS hospitals, with pathetic results
Russian hacktivists DDoS hospitals, with pathetic resultsNot that we're urging them to try harder or anything A series of distributed-denial-of-service (DDoS) attacks shut down nine Danish...
News Corp outfoxed by IT intruders for years
News Corp outfoxed by IT intruders for yearsAll the news that's fit to pwn The miscreants who infiltrated News Corporation's corporate IT network spent two years...
Dish: Someone snatched our data, if you’re wondering why our IT systems went down
Dish: Someone snatched our data, if you're wondering why our IT systems went downOutage-hit telco still won't confirm ransomware infection, or if it's paying up Dish...
US cybersecurity chief: Software makers shouldn’t lawyer their way out of security responsibilities
US cybersecurity chief: Software makers shouldn't lawyer their way out of security responsibilitiesWho apart from Microsoft is happy with the ship now, oh just fix it...
US government sets a 30-day deadline for wiping TikTok from feds’ phones
US government sets a 30-day deadline for wiping TikTok from feds' phonesLast chance to film yourself doing a ByteDance, in the US and abroad The White...
Google: You get crypto, you get crypto, almost everyone gets email crypto!
Google: You get crypto, you get crypto, almost everyone gets email crypto!Personal Gmail users still out of luck Google continued its client-side encryption rollout, the feature...
PlugX RAT masquerades as legit Windows debugger to slip past security
PlugX RAT masquerades as legit Windows debugger to slip past securityDLL side-loading does the trick, again Cybercriminals are disguising the PlugX remote access trojan as a...
It’s official: BlackLotus malware can bypass Secure Boot on Windows machines
It's official: BlackLotus malware can bypass Secure Boot on Windows machinesThe myth 'is now a reality' BlackLotus, a UEFI bootkit that's sold on hacking forums for...
Forget ChatGPT, the most overhyped security tool is technology itself, Wiz warns
Forget ChatGPT, the most overhyped security tool is technology itself, Wiz warnsInfosec also needs to widen its talent pool or miss out Interview It's a tough...
Intruder alert: WH Smith hit by another cyber attack
Intruder alert: WH Smith hit by another cyber attackLess than a year after Funky Pigeon leaked data of greetings cards biz Less than a year after...
CI/CD: Necessary for modern software development, yet it carries a lot of risk
CI/CD: Necessary for modern software development, yet it carries a lot of riskWith great speed comes great insecurity SCSW CI/CD over the past decade has become...
Pushers of insecure software in Biden’s crosshairs
Pushers of insecure software in Biden's crosshairsJust-revealed US cybersecurity strategy 'has fangs' for catching crafty criminals and crummy coders Analysis Technology providers can expect more regulations,...
Smart security
Smart securityOutlawing cybersecurity hype Webinar Trying to keep on top of all the hype and complexity in cybersecurity can be more than an just an uphill...
German Digital Affairs Committee hearing heaps scorn on Chat Control
German Digital Affairs Committee hearing heaps scorn on Chat ControlProposal to break encryption to scan messages for abuse material challenged as illegal and unworkable Europe's proposed...
Warning on SolarWinds-like supply-chain attacks: ‘They’re just getting bigger’
Warning on SolarWinds-like supply-chain attacks: 'They're just getting bigger'Industry hasn't 'improved much at all' SCSW Back in 2020, Eric Scales led the incident response team investigating...
Frankenstein malware stitched together from code of others disguised as PyPI package
Frankenstein malware stitched together from code of others disguised as PyPI packageCrime-as-a-service vendors mix and match components as needed by client A malicious package discovered in...
FTC: BetterHelp pushed users to share mental health info then gave it to Facebook
FTC: BetterHelp pushed users to share mental health info then gave it to FacebookFeds propose $7.8M payment and ban on revealing 'sensitive' data to settle complaint...
Snap CISO: I rate software supply chain risk 9.9 out of 10
Snap CISO: I rate software supply chain risk 9.9 out of 10'Understanding your inventory is absolutely No. 1' he tells The Reg SCSW On a scale...