"Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 23 May 2025, 1358 UTC.

Content and Source:  "The Register-Security."

Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.theregister.co.uk%2Fsecurity%2Fheadlines.atom

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

The Register – Security

96K followers33 articles per week

#security#tech

96

Most popular

Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones

Russia to track migrants via app

•

by Connor Jones / 23h

4-year trial is second major initiative this year that clamps down on 'illegal immigrants' Foreigners in Moscow will now be subject to a new experimental law that affords the state enhanced tracking mechanisms via a smartphone app.…

Grandpa-conning crook jailed over sugar-coated drug scam

Pensioners tricked into drug smuggling

•

by Richard Currie / 4h

Callous fraudster tricked elderly gents into smuggling meth hidden in chocolate truffles A ruthless cyber conman who duped elderly pensioners – including an 80-year-old man – into smuggling deadly class A drugs was this week locked up.…

Trump announces $175B for Golden Dome defense shield over America

Golden Dome missile defense initiative

•

by Iain Thomson / 2d

In practice, it'll cost many times that and almost certainly won't work In a White House press conference on Tuesday President Trump announced his plans for a defensive network of missiles, radar, space surveillance, and attack satellites that he promised would protect America.…

Yesterday

Suspected creeps behind DanaBot malware that hit 300K+ computers revealed

10 TTPs

•

by Iain Thomson / 12h

•

DanaBot malware operators disrupted

And the associated fraud'n'spy botnet is about to be shut down The US Department of Justice has unsealed indictments against 16 people accused of spreading and using the DanaBot remote-control malware that infected more than 300,000 computers, plus operating a botnet of the same name, and appears set to shutter its operations.…

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

IoC > 1 IP

•

by Jessica Lyons / 13h

•

5 TTPs

If it ain't broke? A suspected Chinese government spy group is behind the rash of attacks that exploit two Ivanti bugs that can be chained together to achieve unauthenticated remote code execution (RCE), according to analysts at threat intelligence outfit EclecticIQ.…

US Navy sailor charged in horrific child sextortion case

by Iain Thomson / 13h

Blackmailed teen allegedly scared into carving his handle onto her arm The FBI has filed an affidavit detailing how it identified a US Navy man who was allegedly distributing child sex abuse material (CSAM) through Discord.…

How lean security teams can build resilient defenses

by Chris Singlemann, head of community at Prelude / 14h

Improving security on a budget with continuous monitoring Partner content Most security teams face a staggering challenge. They're tasked with protecting themselves against the same advanced threats as any large enterprise, but often have a fraction of the budget, tools, and personnel. It's not uncommon to hear these teams being told to "do more with less." But still, the stakes couldn't be highe

Feds finger Russian 'behind Qakbot malware' that hit 700K computers

14 TTPs

•

by Jessica Lyons / 15h

•

US indicts Qakbot botnet leader

Agents thought they shut this all down in 2023, but the duck quacked again Uncle Sam on Thursday unsealed criminal charges and a civil forfeiture case against a Russian national accused of leading the cybercrime ring behind Qakbot, the notorious malware that infected hundreds of thousands of computers worldwide and helped fuel ransomware attacks costing victims tens of millions of dollars.…

Chinese snoops tried to break into US city utilities, says Talos

8 TTPs

•

by Jessica Lyons / 19h

Intrusions began weeks before Trimble patched the Cityworks hole A suspected Chinese crew has been exploiting a now-patched remote code execution (RCE) flaw in Trimble Cityworks to break into US local government networks and target utility management systems, according to Cisco's Talos threat intelligence group.…

Irish privacy watchdog OKs Meta to train AI on EU folks' posts

Noyb challenges Meta's AI data use

•

by Brandon Vigliarolo / 21h

Case in Germany could derail Zuck's plans, noyb tells El Reg fight isn't over The Irish Data Protection Commission has cleared the way for Meta to begin slurping up the data of European citizens for training AI next week, ongoing legal challenges notwithstanding. …

Signal shuts the blinds on Microsoft Recall with the power of DRM

Signal blocks Windows Recall feature

•

by Richard Speed / 1d

Chat app blocks Windows' screenshot-happy feature from peeking at private convos Chat app biz Signal is unhappy with the current version of Microsoft Recall and has invoked some Digital Rights Management (DRM) functionality in Windows to stop the tool from snapshotting private conversations.…

May 21, 2025

Scottish council admits ransomware crooks stole school data

5 TTPs

•

by Connor Jones / 1d

•

Interlock ransomware attacks West Lothian Council

Parents and teachers have personal info, ID documents leaked online, but exam season mostly unaffected Scotland's West Lothian Council has confirmed that data was stolen from its education network after the Interlock ransomware group claimed responsibility for the intrusion earlier this month.…

US teen to plead guilty to extortion attack against PowerSchool

5 TTPs

•

by Iain Thomson / 1d

•

Student pleads guilty to cyber extortion

The 19-year-old and a partner first tried to extort an unnamed telco, but failed A 19-year-old student has agreed to plead guilty to hacking into the systems of two companies as part of an extortion scheme, and The Register has learned that one of the targets was PowerSchool.…

Russia's Fancy Bear swipes a paw at logistics, transport orgs' email servers

5 TTPs

•

by Jessica Lyons / 1d

Their connection? Aiding Ukraine, duh Russian cyberspies have targeted "dozens" of Western and NATO-country logistics providers, tech companies, and government orgs providing transport and foreign assistance to Ukraine, according to a joint government announcement issued Wednesday.…

FBI, Microsoft, international cops bust Lumma infostealer service

8 TTPs

•

by Jessica Lyons / 1d

•

Lumma Stealer infrastructure dismantled globally

Credit card theft losses in 2023 alone totaled $36.5M International cops working with Microsoft have shut down infrastructure and seized web domains used to run a distribution service for info-stealing malware Lumma. Criminals paid $250 to $1,000 a month to get access to the infostealer.…

Coinbase confirms insiders handed over data of 70K users

2 TTPs

•

by Connor Jones / 1d

•

Coinbase offers reward after breach

Bribed support staff identified, fired Coinbase says the data of nearly 70,000 customers was handed over by overseas support staff who were bribed by criminals to give up the goods.…

Judge allows Delta's lawsuit against CrowdStrike to proceed with millions in damages on the line

Delta sues CrowdStrike over outage

•

by Connor Jones / 1d

CS remains hopeful damages will be limited to seven figures CrowdStrike is "confident" that the worst-case scenario of its pending lawsuit with Delta will result in it paying the airline a sum in the "single-digit millions."…

Google carves out cloudy safe spaces for nations nervous about America's reach

Google enhances EU cloud sovereignty

•

by Dan Robinson / 1d

From air-gapped bunkers to partner-run platforms, sovereignty is suddenly in vogue Google has updated its sovereign cloud services, including an air-gapped solution for customers with strict data security and residency requirements, as customers grow uneasy over US digital dominance.…

May 20, 2025

M&S warns of £300M dent in profits from cyberattack

Collection (Enterprise TA0009)

•

by Connor Jones / 2d

•

M&S faces 300M pounds cyberattack loss

Downtime stings retailer, with technical recovery costs coming at a later date Marks & Spencer says the disruption related to its ongoing cyberattack is likely to knock around £300 million ($402 million) off its operating profits for the next financial year (2025/26).…

UK 'extremely dependent' on US for space security

by Lindsay Clark / 2d

After 60 years+ cooperation on space and military ops, worrying 'rhetoric' from Team Trump has Brits examining options The current rhetoric coming from the US is "alarming" for the UK, which depends on a continuation of their long-standing co-operation around space and military tech for the future, the UK's second parliamentary chamber heard this week.…

Scattered Spider snared financial orgs before targeting shops in Britain, America

Collection (Enterprise TA0009)

•

by Jessica Lyons / 2d

Crew ain't done hopping sectors, Unit 42 threat hunter warns interview Scattered Spider snared financial services organizations in its web before its recent spate of retail attacks in the UK and US, according to Palo Alto Networks' Unit 42.…

'Ongoing' Ivanti hijack bug exploitation reaches clouds

IoC > 1 IP

•

by Jessica Lyons / 2d

•

3 TTPs

Nothing like insecure code in security suites The "ongoing exploitation" of two Ivanti bugs has now extended beyond on-premises environments and hit customers' cloud instances, according to security shop Wiz.…

Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms

2 TTPs

•

by Connor Jones / 2d

•

CVE-2025-47934

Update before that proof-of-concept comes to bite Security researchers are sounding the alarm over a fresh flaw in the JavaScript implementation of OpenPGP (OpenPGP.js) that allows both signed and encrypted messages to be spoofed.…

Ransomware attack on food distributor spells more pain for UK supermarkets

4 TTPs

•

by Connor Jones / 3d

•

Supermarket supplier hit by ransomware

Peter Green Chilled supplies all the major UK chains It's more bad news for UK supermarkets with chilled and frozen food distribution business Peter Green Chilled confirming a ransomware attack with customers.…