"EU tells Meta it can't paywall privacy."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 18 April 2024, 1324 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.theregister.co.uk%2Fsecurity%2Fheadlines.atom/The Register-Security.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

The Register – Security

85K followers30 articles per week#security#tech

23

MOST POPULAR

EU tells Meta it can't paywall privacy

EU regulators reject Meta's tracking fee

•

by Lindsay Clark / 1h

Platforms should not confront users with 'binary choice' over personal data use The EU's Data Protection Board (EDPB) has told large online platforms they should not offer users a binary choice between paying for a service and consenting to their personal data being used to provide targeted advertising.…

Prolific phishing-made-easy emporium LabHost knocked offline in cyber-cop op

LabHost phishing platform dismantled

•

by Connor Jones / 2h

Police mimic Spotify Wrapped videos to let crims know they're being hunted Feature Cops have brought down a dark-web souk that provided cyber criminals with convincing copies of trusted brands' websites for use in phishing campaigns.…

OpenAI's GPT-4 can exploit real vulnerabilities by reading security advisories

Exploitation for Client Execution (Enterprise T1203)

•

61by Thomas Claburn / 1d

While some other LLMs appear to flat-out suck AI agents, which combine large language models with automation software, can successfully exploit real world security vulnerabilities by reading security advisories, academics have claimed.…

YESTERDAY

Cisco creates architecture to improve security and sell you new switches

Cisco introduces Hypershield security architecture

•

by Simon Sharwood / 6h

Hypershield detects bad behavior and automagically reconfigures networks to snuff out threats Cisco has developed a product called Hypershield that it thinks represents a new way to do network security.…

Singapore infosec boss warns China/West tech split will be bad for interoperability

by Laura Dobberstein / 7h

When you decide not to trust a big chunk of the supply chain, tech (and trade) get harder One of the biggest challenges Singapore faces is the potential for a split between tech stacks developed and used by China and the West, according to the island nation's Cyber Security Administration (CSA) chief executive David Koh.…

Taiwanese film studio snaps up Chinese surveillance camera specialist Dahua

by Laura Dobberstein / 9h

Stymied by sanctions, it had to go … but where? Chinese surveillance camera manufacturer Zhejiang Dahua Technology, which has found itself on the USA’s entity list of banned orgs, has fully sold off its stateside subsidiary for $15 million to Taiwan's Central Motion Picture Corporation, according to the firm's annual report released on Monday.…

Hugely expanded Section 702 surveillance powers set for US Senate vote

Senate Republicans angry over Trump

•

by Jessica Lyons / 13h

Opponents warn almost anyone could be asked to share info with Uncle Sam On Thursday the US Senate is expected to reauthorize the contentious warrantless surveillance powers conferred by Section 702 of the Foreign Intelligence Surveillance Act (FISA), and may even strengthen them with language that, according to US Senator Ron Wyden (D-OR), "will force a huge range of companies and individuals to

Kremlin's Sandworm blamed for cyberattacks on US, European water utilities

Russian military hackers sabotage utilities

•

by Jessica Lyons / 17h

Water tank overflowed during one system malfunction, says Mandiant The Russian military's notorious Sandworm crew was likely behind cyberattacks on US and European water plants that, in at least one case, caused a tank to overflow.…

Exploit code for Palo Alto Networks zero-day now public

by Connor Jones / 23h

Race on to patch as researchers warn of mass exploitation of directory traversal bug Various infosec researchers have released proof-of-concept (PoC) exploits for the maximum-severity vulnerability in Palo Alto Networks' PAN-OS used in GlobalProtect gateways.…

APR 16, 2024

Japanese government rejects Yahoo! infosec improvement plan

by Simon Sharwood / 1d

Just doesn't believe it will sort out the mess that saw data leak from LINE messaging app Japan's government has considered the proposed security improvements developed by Yahoo ! , found them wanting, and ordered the onetime web giant to take new measures.…

Fire in the Cisco! Networking giant's Duo MFA message logs stolen in phish attack

Cisco Duo warns data breach

•

by Jessica Lyons / 1d

Also warns of brute force attacks targeting its own VPNs, Check Point, Fortinet, SonicWall and more Cisco is fighting fires on a couple cybersecurity fronts this week involving its Duo multi-factor authentication (MFA) service and its remote-access VPN services.…

MGM says FTC can't possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time

FTC investigates MGM cyberattack response

•

29by Jessica Lyons / 1d

What a twist! MGM Resorts wants the FTC to halt a probe into last year's ransomware infection at the mega casino chain – because the watchdog's boss Lina Khan was a guest at one of its hotels during the cyberattack.…

Alleged cryptojacker accused of stealing $3.5M from cloud to mine under $1M in crypto

Cryptojacker accused of stealing $3.5M

•

by Connor Jones / 1d

No prizes for guessing the victims A Nebraska man will appear in court today to face charges related to allegations that he defrauded cloud service providers of more than $3.5 million in a long-running cryptojacking scheme.…

SIM swap crooks solicit T-Mobile US, Verizon staff via text to do their dirty work

by Brandon Vigliarolo / 1d

No breach responsible for employee contact info getting out, says T-Mo T-Mobile US employees say they are being sent text messages that offer them cash to perform illegal SIM swaps for supposed criminals.…

Open sourcerers say suspected xz-style attacks continue to target maintainers

Open source groups warn ongoing takeover attempts

•

by Connor Jones / 1d

Social engineering patterns spotted across range of popular projects Open source groups are warning the community about a wave of ongoing attacks targeting project maintainers similar to those that led to the recent attempted backdooring of a core Linux library.…

Change Healthcare’s ransomware attack costs edge toward $1B so far

UnitedHealth faces $872M cyberattack losses

•

by Connor Jones / 2d

First glimpse at attack financials reveals huge pain UnitedHealth, parent company of ransomware-besieged Change Healthcare, says the total costs of tending to the February cyberattack for the first calendar quarter of 2024 currently stands at $872 million.…

Google location tracking deal could be derailed by politics

by Thomas Claburn / 2d

$62 million settlement plan challenged over payments to progressive nonprofits Google's plan to pay $62 million to settle allegations that it tracked people even when their Location History setting was switched off may have to