The Register-Security

July 09, 2025

"Massive browser hijacking campaign infests 2.3M Chrome, Edge users."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 09 July 2025, 1434 UTC.

Content and Source: Email subscription via https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.theregister.co.uk%2Fsecurity%2Fheadlines.atom

Please check subscription link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Malicious browser extensions threaten privacy

•

23by Jessica Lyons / 19h

These extensions weren't malware-laced from the start, researcher says A Chrome and Edge extension with more than 100,000 downloads that displays Google's verified badge does what it purports to do: It delivers a color picker to users. Unfortunately, it also hijacks every browser session, tracks activities across websites, and backdoors victims' web browsers, according to Koi Security researchers

Privacy campaigners pour cold water on London cops' 1,000 facial recognition arrests

by Connor Jones / 5h

Activists argue the resources spent on tech aren't leading to worthwhile numbers Privacy activists are unimpressed with London's Metropolitan Police and its use of live facial recognition (LFR) to catch criminals, saying it is not effective use of taxpayer money and an overreach by government.…

Qantas begins telling some customers that mystery attackers have their home address

4 TTPs

•

by Connor Jones / 3h

Plus: Confirms less serious data points like meal preferences also leaked Qantas says that when cybercrooks attacked a "third party platform" used by the airline's contact center systems, they accessed the personal information and frequent flyer numbers of the "majority" of the circa 5.7 million people affected.…

Yesterday

Ingram Micro restarts orders – for some – following ransomware attack

2 TTPs

•

by Connor Jones / 5h

Customers say things are still far from perfect as lengthy support queues hamper business dealings Ingram Micro says it is gradually reactivating customer's ordering capabilities across the world, region by region, now its ransomware attack is thought to be "contained".…

Iranian ransomware crew reemerges, promises big bucks for attacks on US or Israel

by Jessica Lyons / 7h

Tells would-be affiliates they don't need to worry because cyberattacks don't violate a cease fire An Iranian ransomware-as-a-service operation with ties to a government-backed cyber crew has reemerged after a nearly five-year hiatus, and is offering would-be cybercriminals cash to infect organizations in the US and Israel.…

Microsoft enjoys first Patch Tuesday of 2025 with no active exploits

6 TTPs

•

by Iain Thomson / 15h

•

PatchTuesday

Sure, 130 fixes were sent out, but bask in the security goodness For the first time this year, Microsoft has released a Patch Tuesday bundle with no exploited security problems, although one has been made public already, and there are ten critical flaws to fix.…

The cloud-native imperative for effective cyber resilience

by Stephen Manley, CTO, Druva / 23h

Modern threats demand modern defenses. Cloud-native is the new baseline Partner content Every organization is investing in cyberresilience tools, training, and processes. Unfortunately, only some of them will be able to successfully respond and recover from an attack. Regardless of how hard they work, many IT and security teams are constrained by legacy technology architectures that were built fo

SUSE launching region-locked support for the sovereignty-conscious

SUSE launches European sovereignty support

•

by Richard Speed / 1d

Move targets European orgs wary of cross-border data exposure Linux veteran SUSE has unveiled a new support package aimed at customers concerned about data sovereignty.…

Suspected Chinese cybersnoop grounded in Italy after US tipoff

Chinese hacker arrested Italy US

•

by Connor Jones / 1d

Zewei Xu's family reportedly bemused at arrest as extradition tabled A man who US authorities allege is a member of Chinese state-sponsored cyberespionage outfit Silk Typhoon was arrested in Milan last week following a tipoff from the US embassy.…

Jul 7, 2025

Is your password ecosystem ready for the regulators?

by Robin Birtstone / 1d

The clipboard warriors are coming. Time to check on your password management Sponsored feature It's 2025, and credential theft is a thing of the past.…

Hawaii Cybersecurity Journal