'Cybersecurity issue' at Food Lion parent blamed for US grocery mayhem Stores still open, but customers report delayed deliveries, invoicing issues, and more at Stop & Shop and others Cyber-crime12 Nov 2024 | 2
HTTP your way into Citrix's Virtual Apps and Desktops with fresh exploit code 'Once again, we've lost a little more faith in the internet,' researcher says CSO12 Nov 2024 | 3
Amazon confirms employee data exposed in leak linked to MOVEit vulnerability Over 5 million records from 25 organizations posted to black hat forum Cyber-crime12 Nov 2024 | 2
FBI issues warning as crooks ramp up emergency data request scams Just because it's .gov doesn't mean that email is trustworthy Cyber-crime11 Nov 2024 | 12
Dark web crypto laundering kingpin sentenced to 12.5 years in prison Prosecutors hand Russo-Swede a half-billion bill Cyber-crime11 Nov 2024 | 24
Alleged Snowflake attacker gets busted by Canadians – politely, we assume Infosec in brief Also: Crypto hacks will continue; CoD hacker gets thousands banned, and more Security11 Nov 2024 |
Scattered Spider, BlackCat claw their way back from criminal underground We all know by now that monsters never die, right? Cyber-crime08 Nov 2024 | 1
Winos4.0 abuses gaming apps to infect, control Windows machines 'Multiple' malware samples likely targeting education orgs Security08 Nov 2024 | 6
Don't open that 'copyright infringement' email attachment – it's an infostealer Curiosity gives crims access to wallets and passwords Research07 Nov 2024 | 21
Cisco scores a perfect CVSS 10 with critical flaw in its wireless system Ultra-Reliable Wireless Backhaul doesn't live up to its name Patches07 Nov 2024 | 16
Officials warn of Russia's tech-for-troops deal with North Korea amid Ukraine conflict 10,000 of Kim Jong Un's soldiers believed to be headed for front line Security07 Nov 2024 | 47
Cybercrooks are targeting Bengal cat lovers in Australia for some reason In case today’s news cycle wasn’t shocking enough, here’s a gem from Sophos Research06 Nov 2024 | 15
Operation Synergia II sees Interpol swoop on global cyber crims 22,000 IP addresses taken down, 59 servers seized, 41 arrests in 95 countries Cyber-crime06 Nov 2024 | 3
Cyberattackers stole Microlise staff data following DHL, Serco disruption Experts say incident has 'all the hallmarks of ransomware' Cyber-crime06 Nov 2024 | 5
China's Volt Typhoon reportedly breached Singtel in 'test-run' for US telecom attacks updated Alleged intrusion spotted in June Security06 Nov 2024 | 5
Scumbag puts 'stolen' Nokia source code, SSH and RSA keys, more up for sale Data pinched from pwned outside supplier, thief claims Cyber-crime06 Nov 2024 | 6
Schneider Electric ransomware crew demands $125k paid in baguettes Hellcat crew claimed to have gained access via the company's Atlassian Jira system Cyber-crime05 Nov 2024 | 46
A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years FBI recovers just $8M after scam crashes Heartland Tri-State Bank Cyber-crime05 Nov 2024 | 17
Criminals open DocuSign's Envelope API to make BEC special delivery Why? Because that's where the money is Research05 Nov 2024 | 4
Ongoing typosquatting campaign impersonates hundreds of popular npm packages Puppeteer or Pupeter? One of them will snoop around on your machine and steal your credentials Research05 Nov 2024 | 11
Washington courts grapple with statewide outage after 'unauthorized activity' Justice still being served, but many systems are down Security05 Nov 2024 | 1
Google claims Big Sleep 'first' AI to spot freshly committed security bug that fuzzing missed You snooze, you lose, er, win AI + ML05 Nov 2024 | 19
Columbus, Ohio, confirms 500K people affected by Rhysida ransomware attack Victims were placed in serious danger following highly sensitive data dump Cyber-crime04 Nov 2024 | 5
Why the long name? Okta discloses auth bypass bug affecting 52-character usernames Mondays are for checking months of logs, apparently, if MFA's not enabled Security04 Nov 2024 | 14
Public sector cyber break-ins: Our money, our lives, our right to know Opinion Is that a walrus in your server logs, or aren't you pleased to see me? Cyber-crime04 Nov 2024 | 24
Six IT contractors accused of swindling Uncle Sam out of millions Infosec in brief Also, ecommerce fraud ring disrupted, another Operation Power Off victory, Sino SOHO botnet spotted, and more Security03 Nov 2024 | 11
Financial institutions told to get their house in order before the next CrowdStrike strikes Calls for improvements will soon turn into demands when new rules come into force Security02 Nov 2024 | 34
UK councils bat away DDoS barrage from pro-Russia keyboard warriors Local authority websites downed in response to renewed support for Ukraine Cyber-crime01 Nov 2024 | 34
Hack Nintendo's alarm clock to show cat pics? Let's-a-go! How 'Gary' defeated Bowser broke into the interactive alarm clock Security01 Nov 2024 | 34
Gang gobbles 15K credentials from cloud and email providers' garbage Git configs Emeraldwhale looked sharp – until it made a common S3 bucket mistake Research31 Oct 2024 | 2
LottieFiles supply chain attack exposes users to malicious crypto wallet drainer A scary few Halloween hours for team behind hugely popular web plugin Cyber-crime31 Oct 2024 | 11
Tower PC case allegedly used as 'creative cavity' by drug importer Motherboard missing, leaving space for a million hits of meth Cyber-crime31 Oct 2024 | 58
Chinese attackers accessed Canadian government networks – for five years India makes it onto list of likely threats for the first time Cybersecurity Month31 Oct 2024 | 15
Windows Themes zero-day bug exposes users to NTLM credential theft Plus a free micropatch until Redmond fixes the flaw Security30 Oct 2024 | 6
Fired Disney staffer accused of hacking menu to add profanity, wingdings, removes allergen info If you're gonna come at the mouse, you need to be better at hiding your tracks Security30 Oct 2024 | 58
Russian spies use remote desktop protocol files in unusual mass phishing drive The prolific Midnight Blizzard crew cast a much wider net in search of scrummy intel Cyber-crime30 Oct 2024 | 18
Beijing claims it's found 'underwater lighthouses' that its foes use for espionage Release the Kraken! Security30 Oct 2024 | 70
Uncle Sam outs a Russian accused of developing Redline infostealing malware Or: why using the same iCloud account for malware development and gaming is a bad idea Cyber-crime29 Oct 2024 | 4
Cast a hex on ChatGPT to trick the AI into writing exploit code 'It was like watching a robot going rogue' says researcher Cybersecurity Month29 Oct 2024 | 28
Belgian cops cuff 2 suspected cybercrooks in Redline, Meta infostealer sting US also charges an alleged Redline dev, no mention of an arrest Cyber-crime29 Oct 2024 | 1
The story behind the Health Infrastructure Security and Accountability Act Health care breaches lead to legislation Partner Content
Admins better Spring into action over latest critical open source vuln Patch up: The Spring framework dominates the Java ecosystem Security29 Oct 2024 | 1
Merde! Macron's bodyguards reveal his location by sharing Strava data It's not just the French president, Biden and Putin also reportedly trackable Security29 Oct 2024 | 24
Five Eyes nations tell tech startups to take infosec seriously. Again Only took 'em a year to dish up some scary travel advice, and a Secure Innovation … Placemat? Cybersecurity Month29 Oct 2024 | 14
Wanted. Top infosec pros willing to defend Britain on shabby salaries GCHQ job ads seek top talent with bottom-end pay packets Security29 Oct 2024 | 121
JPMorgan Chase sues scammers following viral 'infinite money glitch' ATMs paid customers thousands ... and now the bank wants its money back Security28 Oct 2024 | 47
Feds investigate China's Salt Typhoon amid campaign phone hacks 'They're taunting us,' investigator says and it looks like it's working Security28 Oct 2024 | 7
Brazen crims selling stolen credit cards on Meta's Threads Exclusive The platform 'continues to take action' against illegal posts, we're told Cyber-crime28 Oct 2024 | 20
Delta officially launches lawyers at $500M CrowdStrike problem Legal action comes months after alleging negligence by Falcon vendor Cybersecurity Month28 Oct 2024 | 23
Dutch cops pwn the Redline and Meta infostealers, leak 'VIP' aliases Legal proceedings underway with more details to follow Cybersecurity Month28 Oct 2024 | 5
WordPress forces user conf organizers to share social media credentials, arousing suspicions One told to take down posts that said nice things about WP Engine Software28 Oct 2024 | 40
Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns Infosec in brief Also, Change Healthcare sets a record, cybercrime cop suspect indicted, a new Mallox decryptor, and more Security27 Oct 2024 | 34
Worker surveillance must comply with credit reporting rules US Consumer Financial Protection Bureau demands transparency, accountability from sellers of employee metrics Security26 Oct 2024 | 18
Just how private is Apple's Private Cloud Compute? You can test it to find out Also updates bug bounty program with $1M payout Security25 Oct 2024 | 15
Putin's pro-Trump trolls accuse Harris of poaching rhinos Plus: Iran's IRGC probes election-related websites in swing states Security25 Oct 2024 | 85
AWS Cloud Development Kit flaw exposed accounts to full takeover Remember Bucket Monopoly? Yeah, it gets worse Cybersecurity Month24 Oct 2024 | 13
Emergency patch: Cisco fixes bug under exploit in brute-force attacks Who doesn't love abusing buggy appliances, really? Software24 Oct 2024 | 3
Bitwarden's FOSS halo slips as new SDK requirement locks down freedoms Arguments continue but change suggests it's not Free Software anymore Applications24 Oct 2024 | 16
Ransomware's ripple effect felt across ERs as patient care suffers 389 US healthcare orgs infected this year alone Cybersecurity Month24 Oct 2024 | 1
Voice-enabled AI agents can automate everything, even your phone scams All for the low, low price of a mere dollar Security24 Oct 2024 | 28