"Cybercriminals are stealing Face ID scans to break into mobile banking accounts."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 February 2024, 1458 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.theregister.co.uk%2Fsecurity%2Fheadlines.atom ("The Register-Security").

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

The Register – Security

83K followers29 articles per week#security#tech

23

MOST POPULAR

US Air Force's new cyber, IT skill recruitment plan: Bring back warrant officer ranks

59by Brandon Vigliarolo / 20h

Officer pay, limited command duties and writing 'code for your country' Skilled IT professionals considering a career change have a new option, as the US Air Force is reintroducing warrant officer ranks exclusively "within the cyber and information technology professions." …

Cybercriminals are stealing Face ID scans to break into mobile banking accounts

2 TTPs

•

by Connor Jones / 57min

•

Gold Pickaxe malware steals faces

Deepfake-enabled attacks against Android and iOS users are netting criminals serious cash Cybercriminals are targeting iOS users with malware that steals Face ID scans to break into and pilfer money from bank accounts – thought to be a world first.…

Just one bad packet can bring down a vulnerable DNS server thanks to DNSSEC

OS Exhaustion Flood (Enterprise T1499.001)

•

68by Thomas Claburn / 1d

'You don't have to do more than that to disconnect an entire network' El Reg told as patches emerge A single packet can exhaust the processing capacity of a vulnerable DNS server, effectively disabling the machine, by exploiting a 20-plus-year-old design flaw in the DNSSEC specification.…

YESTERDAY

Miscreants turn to ad tech to measure malware metrics

3 TTPs

•

by Thomas Claburn / 6h

Now that's what you call dual-use tech Cyber baddies have turned to ad networks to measure malware deployment and to avoid detection, according to HP Wolf Security.…

European Court of Human Rights declares backdoored encryption is illegal

EU Court upholds encryption rights

•

by Thomas Claburn / 7h

Surprising third-act twist as Russian case means more freedom for all The European Court of Human Rights (ECHR) has ruled that laws requiring crippled encryption and extensive data retention violate the European Convention on Human Rights – a decision that may derail European data surveillance legislation known as Chat Control.…

North Korea running malware-laden gambling websites as-a-service

North Korea sells malware-infected gambling

•

by Laura Dobberstein / 10h

$5k a month for the site. $3k for tech support. Infection with malware and funding a despot? Priceless North Korea's latest money-making venture is the production and sale of gambling websites that come pre-infected with malware, according to South Korea's National Intelligence Service (NIS).…

OpenAI shuts down China, Russia, Iran, N Korea accounts caught doing naughty things

2 TTPs

•

by Katyanna Quach / 14h

•

Hackers use AI for cyberattacks

You don't need us to craft phishing emails or write malware, super-lab sniffs OpenAI has shut down five accounts it asserts were used by government agents to generate phishing emails and malicious software scripts as well as research ways to evade malware detection.…

China's Volt Typhoon spies broke into emergency network of 'large' US city

by Jessica Lyons / 17h

Jeez, not now, Xi. Can't you see we've got an election and Ukraine and Gaza and cost of living and layoffs and ... The Chinese government's Volt Typhoon spy team has apparently already compromised a large US city's emergency services network and has been spotted snooping around America's telecommunications' providers as well.…

Prudential Financial finds cybercrims lurking inside its IT systems

by Paul Kunert / 21h

Some company admin and customers data exposed, but bad guys were there for 'only' a day Prudential Financial, the second largest life insurance company in the US and eight largest worldwide, is dealing with a digital break-in that exposed some internal company and customer records to a criminal group.…

Romanian hospital ransomware crisis attributed to third-party breach

Romanian hospitals hit by ransomware

•

28by Connor Jones / 23h

Emergency impacting more than 100 facilities appears to be caused by incident at software provider The Romanian national cybersecurity agency (DNSC) has pinned the outbreak of ransomware cases across the country's hospitals to an incident at a service provider.…

Southern Water cyberattack expected to hit hundreds of thousands of customers

Southern Water data breach

•

20by Connor Jones / 1d

Brit utility also curiously disappears from Black Basta leak site Southern Water has admitted between five and ten percent of its customers had their details stolen from the British utilities giant during a January cyberattack.…

Bumblebee malware wakes from hibernation, forgets what year it is, attacks with macros

4 TTPs

•

21by Brandon Vigliarolo / 1d

•

Bumblebee malware returns

Trying to break in with malicious Word documents? How very 2015 of you The Bumblebee malware loader seemingly vanished from the internet last October, but it's back and - oddly - relying on a vintage vector to try and gain