The Register-Security

December 03, 2024

"Security of the risk facing the UK is widely underestimated. The workplace has become a surveillance state."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 03 December 2024, 1445 UTC.

Content and Souce: Email subscription via https://feedly.com. https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.theregister.co.uk%2Fsecurity%2Fheadlines.atom

Please check link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

The Register – Security

91K followers27 articles per week#security #tech
36

Most popular

Severity of the risk facing the UK is widely underestimated, NCSC annual review warns
Exfiltration (Enterprise TA0010)
•
by Connor Jones / 2h
National cyber emergencies increased threefold this year The number of security threats in the UK that hit the country's National Cyber Security Centre's (NCSC) maximum severity threshold has tripled compared to the previous 12 months.…
The workplace has become a surveillance state
44by Thomas Claburn / 6d
Cracked Labs report explores the use of motion sensors and wireless networking kit to monitor offices Office buildings have become like web browsers – they're full of tracking technology, a trend documented in a report out this week by Cracked Labs.…
NHS major 'cyber incident' forces hospitals to use pen and paper
NHS faces major cyber incident
•
36by Connor Jones / 5d
Systems are isolated and pulled offline, while scheduled procedures are canceled The ongoing cybersecurity incident affecting a North West England NHS group has forced sites to fall back on pen-and-paper operations.…

Yesterday

Russia gives life sentence to Hydra dark web kingpin after seizing a ton of drugs
Hydra founder sentenced to life
•
by Iain Thomson / 7h
No exaggeration – literally a ton. Plus, 15 co-conspirators also put behind bars A Russian court has handed a life sentence to the head of the infamous online drugs souk Hydra, and 15 of his co-conspirators will also spend many years behind bars.…
Data on 760K workers from Xerox, Nokia, BofA, Morgan Stanley and more dumped online
by Jessica Lyons / 11h
Yet another result of the MOVEit mess Hundreds of thousands of employees from major corporations including Xerox, Nokia, Koch, Bank of America, Morgan Stanley and others appear to be the latest victims in a massive data breach linked to last year's attacks on file transfer tool MOVEit.…
AWS unveils cloud security IR service for a mere $7K a month
by Jessica Lyons / 13h
Tap into the infinite scalability... of pricing Re:Invent Amazon Web Services has a new incident response service that combines automation and people to protect customers' AWS accounts - at a hefty price.…
Discover the future of Linux security
by Annaliese Ingrams / 23h
Explore open source strategies to safeguard critical systems and data Webinar Linux security is a component that sits at the heart of today's IT landscape.…
Russia arrests one of its own – a cybercrime suspect on FBI's most wanted list
Russia arrests ransomware affiliate Wazawaka
•
by Connor Jones / 1d
The latest in an unusual change of fortune for group once protected by the Kremlin An alleged former affiliate of the LockBit and Babuk ransomware operations, who also just happens to be one of the most wanted cybercriminals in the US, is now reportedly in handcuffs.…

Dec 1, 2024

Telco security is a dumpster fire and everyone's getting burned
21by Rupert Goodwins / 1d
The politics of cybersecurity are too important to be left to the politicians Opinion Here's a front-page headline you won't see these days: CHINA'S SPIES ARE TAPPING OUR PHONES. Not that they're not – they are – but, like the environment, there's so much cybersecurity horror in the media that, yes, of course they are. And?…
Interpol nabs thousands, seizes millions in global cybercrime-busting op
7 TTPs
•
by Brandon Vigliarolo / 1d
Also, script kiddies still a threat, Tornado Cash is back, UK firms lose billions to avoidable attacks, and more Infosec in brief Interpol and its financial supporters in the South Korean government are back with another round of anti-cybercrime arrests via the fifth iteration of Operation HAECHI, this time nabbing more than 5,500 people suspected of scamming and seizing hundreds of millions in d

Nov 29, 2024

RansomHub claims to net data hat-trick against Bologna FC
Bologna FC suffers ransomware attack
•
by Connor Jones / 3d
Crooks say they have stolen sensitive files on managers and players Italian professional football club Bologna FC is allegedly a recent victim of the RansomHub cybercrime gang, according to the group's dark web postings.…
Zabbix urges upgrades after critical SQL injection bug disclosure
Privilege Escalation (Enterprise TA0004)
•
by Connor Jones / 3d
•
CVE-2024-42327 & 7 others
US agencies blasted 'unforgivable' SQLi flaws earlier this year Open-source enterprise network and application monitoring provider Zabbix is warning customers of a new critical vulnerability that could lead to full system compromise.…
Ransom gang claims attack on NHS Alder Hey Children's Hospital
Alder Hey NHS Trust ransomware attack
•
25by Connor Jones / 4d
Second alleged intrusion on English NHS org systems this week Yet another of the UK's National Health Service (NHS) systems appears to be under attack, with a ransomware gang threatening to leak stolen data it says is from one of England's top children's hospitals.…

Nov 28, 2024

Fighting cybercrime with actionable knowledge
by Guy Matthews / 4d
A reason to celebrate SANS and its 35 years of cyber security training Sponsored Post Cybercrime never sleeps. As threats continue to evolve and attack surfaces become broader and harder to defend, it has never been more important for the good guys to keep their skills sharp and their knowledge up to date.…

Nov 27, 2024

The only thing worse than being fired is scammers fooling you into thinking you're fired
6 TTPs
•
20by Jessica Lyons / 5d
Scumbags play on victims' worst fears in phishing campaign referencing UK Employment Tribunal A current phishing campaign scares recipients into believing they've been sacked, when in reality they've been hacked – and infected with infostealers and other malware that means a payday for the crooks behind the scam.…
Salt Typhoon's surge extends far beyond US telcos
7 TTPs
•
by Jessica Lyons / 5d
•
CVE-2022-3236
Plus, a brand-new backdoor, GhostSpider, is linked to the cyber spy crew's operations The reach of the China-linked Salt Typhoon gang extends beyond telecommunications giants in the United States, and its arsenal includes several backdoors – including a brand-new malware dubbed GhostSpider – according to Trend Micro researchers.…
T-Mobile US takes a victory lap after stopping cyberattacks: 'Other providers may be seeing different outcomes'
T-Mobile US thwarts cyberattacks successfully
•
by Jessica Lyons / 5d
Funny what putting more effort and resources into IT security can do Attackers - possibly China's Salt Typhoon cyber-espionage crew - compromised an unnamed wireline provider's network and used this access to try to break into T-Mobile US systems multiple times over the past few weeks, according to its Chief Security Officer Jeff Simon. …
Bolster resilience against 2025 cyber threats
MITRE ATT&CK Evaluations enhance cybersecurity
•
by Michael Newell, Cynet / 5d
Watch this webinar to learn why cybersecurity leaders can trust the MITRE ATT&CK Evaluations Partner Content In today's dynamic threat landscape, security leaders are under constant pressure to make informed choices about which solutions and strategies they employ to protect their organizations.…
Data broker leaves 600K+ sensitive files exposed online
Data leak exposes 600000 files
•
by Jessica Lyons / 5d
Researcher spotted open database before criminals … we hope Exclusive More than 600,000 sensitive files containing thousands of people's criminal histories, background checks, vehicle and property records were exposed to the internet in a non-password protected database belonging to data brokerage SL Data Services, according to a security researcher.…
First-ever UEFI bootkit for Linux in the works, experts say
3 TTPs
•
by Connor Jones / 5d
•
Bootkitty first UEFI bootkit for Linux
Bootkitty doesn’t bite… yet Security researchers say they've stumbled upon the first-ever UEFI bootkit targeting Linux, illustrating a key moment in the evolution of such tools.…
Automating endpoint management
by Annaliese Ingrams / 5d
Addressing the challenges of patching and vulnerability remediation Webinar Managing endpoints efficiently has perhaps never been more important or more complex. …

Nov 26, 2024

CrowdStrike still doesn't know how much its Falcon flame-out will cost
by Simon Sharwood / 6d
Thinks customers may have forgiven it after revenue hits a record CrowdStrike can't yet confidently predict the financial impact of the failed update to its Falcon software that crashed millions of computers around the world last July, but is confident its third quarter results show customers can't find a better security product.…
Telco engineer who spied on US employer for Beijing gets four years in the clink
by Laura Dobberstein / 6d
Provides insight to how China gets inside US systems, perhaps at Verizon and Infosys A 59 year-old Florida telco engineer was sentenced to 48 months in prison after he served as a spy for China and provided Beijing with details like his employer’s cybersecurity, according to the US Department of Justice.…
Man accused of hilariously bad opsec as alleged cybercrime spree detailed
Man indicted for hacking health club
•
by Connor Jones / 6d
Complaint claims he trespassed, gave himself discounts, and sorted CCTV access… A Kansas City man who stands accused of having a disregard for basic opsec made his first court appearance on Friday over a series of alleged cybercrimes.…
US senators propose law to require bare minimum security standards
Senators propose healthcare cybersecurity
•
23by Jessica Lyons / 6d
In case anyone forgot about Change Healthcare American hospitals and healthcare organizations would be required to adopt multi-factor authentication (MFA) and other minimum cybersecurity standards under new legislation proposed by a bipartisan group of US senators. …
Fortify your data
by Robin Birtstone / 6d
How cyber resilient storage hardware can defeat ransomware Sponsored Feature Ransomware is everywhere. The FBI and CISA just issued yet another advisory about it.…
Bing Wallpaper app, now in Windows Store, accused of cookie shenanigans
Bing Wallpaper app now available
•
20by Brandon Vigliarolo / 7d
Microsoft free tool snooping on users? Surely not! If you've been tempted to download the Bing Wallpaper app to spice up your Windows 11 desktop backgrounds, you may want to think twice.…
Another 'major cyber incident' at a UK hospital, outpatients asked to stay away
Major incident at Merseyside hospital
•
25by Connor Jones / 7d
Third time this year an NHS unit's IT systems have come under attack A UK hospital is declaring a "major incident," cancelling all outpatient appointments due to "cybersecurity reasons."…
QNAP and Veritas dump 30-plus vulns over the weekend
6 TTPs
•
by Connor Jones / 7d
Just what you want to find when you start a new week Updated Taiwanese NAS maker QNAP addressed 24 vulnerabilities across various products over the weekend.…

Comments