In Brief

Google gamed into advertising a malicious version of Authenticator

Infosec in brief Plus: CISA's AI hire; and claimed Canuck SIM swappers busted

Security05 Aug 2024 | 13

Secure Boot useless on hundreds of PCs from major vendors after key leak

Infosec in brief Plus: More stalkerware exposure; a $16M TracFone fine; Ransomware victims don't use MFA, and more

Security29 Jul 2024 | 36

Cellebrite got into Trump shooter's Samsung device in just 40 minutes

Infosec in brief Also: Second-string Russian hackers sanctioned; Senators demand answers from Snowflake, and more

Security22 Jul 2024 | 63

I spy another mSpy breach: Millions more stalkerware buyers exposed

Infosec in brief Also: Velops routers love plaintext; everything is a dark pattern; Internet Explorer rises from the grave, and more

Security15 Jul 2024 | 8

Microsoft tells yet more customers their emails have been stolen

Infosec in brief Plus: US auto dealers still offline; Conti coders sanction; Rabbit R1 hardcoded API keys; and more

Security01 Jul 2024 | 24

Snowflake breach snowballs as more victims, perps, come forward

Infosec in brief Also: The leaked Apple internal tools that weren't; TV pirate pirates convicted; and some critical vulns, too

Security24 Jun 2024 | 9

That didn't take long: Replacement for SORBS spam blacklist arises ... sort of

Infosec in brief Also: Online adoption cyberstalker nabbed; Tesla trade secrets thief pleads guilty; and a critical ASUS Wi-Fi vuln

Security17 Jun 2024 | 2

Snowflake tells customers to enable MFA as investigations continue

infosec in brief Also, industry begs Uncle Sam for infosec reg harmony, dueling container-compromise campaigns, and crit vulns

Security10 Jun 2024 | 2

Check Point warns customers to patch VPN vulnerability under active exploitation

Infosec in brief Also, free pianos are the latest internet scam bait, Cooler Master gets pwned, and some critical vulnerabilities

Security03 Jun 2024 | 2

Bayer and 12 other major drug companies caught up in Cencora data loss

Infosec in brief Plus: US water systems fail at cyber security

Security27 May 2024 | 5

Nissan infosec in the spotlight again after breach affecting more than 50K US employees

Infosec in brief PLUS: Connected automakers put on notice; Cisco Talos develops macOS fuzzing technique; Last week's critical vulns

Security20 May 2024 | 2

Encrypted mail service Proton hands suspect's personal info to local cops

Infosec in brief Plus: Google patches another Chrome security hole, and more

Security13 May 2024 | 52

Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

Infosec in brief Also: Microsoft promises to git gud on cybersecurity; unqualified attackers are targeting your water systems, and more

Security06 May 2024 | 18

Discord dismantles Spy.pet site that snooped on millions of users

Updated - Infosec in brief ALSO: Infostealer spotted hiding in CDN cache, antivirus update hijacked to deliver virus, and some critical vulns

Security29 Apr 2024 | 3

MITRE admits 'nation state' attackers touched its NERVE R&D operation

Infosec In Brief PLUS: Akira ransomware resurgent; Telehealth outfit fined for data-sharing; This week's nastiest vulns

Security22 Apr 2024 | 3

US House approves FISA renewal – warrantless surveillance and all

Infosec in brief PLUS: Chinese chipmaker Nexperia attacked; A Microsoft-signed backdoor; CISA starts scanning your malware; and more

Security15 Apr 2024 | 12

Head of Israeli cyber spy unit exposed ... by his own privacy mistake

Infosec in brief Plus: Another local government hobbled by ransomware; Huge rise in infostealing malware; and critical vulns

Security08 Apr 2024 | 19

Nearly 3M people hit in Harvard Pilgrim healthcare data theft

Infosec in brief Also, TheMoon botnet back for EoL SOHO routers, Sellafield to be prosecuted for 'infosec failures', plus critical vulns

Security01 Apr 2024 | 3

Microsoft confirms memory leak in March Windows Server security update

Infosec in brief ALSO: Viasat hack wiper malware is back, users are the number one cause of data loss, and critical vulns

Security25 Mar 2024 | 11

ChatGPT side-channel attack has easy fix: Token obfuscation

Infosec in brief Also: Roblox-themed infostealer on the prowl, telco insider pleads guilty to swapping SIMs, and some crit vulns

Security18 Mar 2024 | 2

Microsoft waited 6 months to patch actively exploited admin-to-kernel vulnerability

Infosec in brief PLUS: NSA shares cloud security tips; Infosec training for Jordanian women; Critical vulnerabilities

Security11 Mar 2024 | 10

LockBit's contested claim of fresh ransom payment suggests it's been well hobbled

Infosec in brief ALSO: CISA warns Ivanti vuln mitigations might not work, SAML hijack doesn't need ADFS, and crit vulns

Security04 Mar 2024 | 1

Fox News 'hacker' turns out to be journalist whose lawyers say was doing his job

Infosec in brief Also, another fake iOS app slips into the store, un-cybersafe EV chargers leave UK shelves, and critical vulns

Security26 Feb 2024 | 31

Feds post $15 million bounty for info on ALPHV/Blackcat ransomware crew

infosec in brief ALSO: EncroChat crims still getting busted; ransomware takes down CO public defenders office; and crit vulns

Security19 Feb 2024 |

Mon Dieu! Nearly half the French population have data nabbed in massive breach

Infosec In Brief PLUS: Juniper's support portal leaks customer info; Canada moves to ban Flipper Zero; Critical vulns

Security12 Feb 2024 | 19

SBF likely off the hook for misplaced FTX funds after cops bust SIM swap ring

Infosec In Brief PLUS: more glibc vulns discovered; DraftKings hacker sentenced; and a hefty dose of critical vulnerabilities

Security05 Feb 2024 | 4

Tesla hacks make big bank at Pwn2Own's first automotive-focused event

Infosec in brief ALSO: SEC admits to X account negligence; New macOS malware family appears; and some critical vulns

Security29 Jan 2024 | 9

BreachForums admin 'Pompourin' sentenced to 20 years of supervised release

Infosec in brief Also: Another UEFI flaw found; Kaspersky discovers iOS log files actually work; and a few critical vulnerabilities

Security22 Jan 2024 | 16

FTC secures first databroker settlement banning sale of sensitive location data

Infosec in brief Also, iOS spyware abused Apple's own ECC, breach victim says it can't figure out what hackers took, and some critical vulns

Security15 Jan 2024 | 3

Facebook, Instagram now mine web links you visit to fuel targeted ads

Infosec in brief Also: Twitter hijackings, BEC arrest, and critical vulnerabilities

Patches08 Jan 2024 | 20

Iranian cyberspies target US defense orgs with a brand new backdoor

Infosec in brief Also: International cops crackdown on credit card stealers and patch these critical vulns

Cyber-crime23 Dec 2023 | 9

MongoDB warns breach of internal systems exposed customer contact info

Infosec in brief PLUS: Cancer patients get ransom notes for Christmas, Delta Dental is the latest MOVEit victim, and critical vulns

Security18 Dec 2023 | 2

EU lawmakers finalize cyber security rules that panicked open source devs

Infosec in brief PLUS: Montana TikTok ban ruled unconstitutional; Dollar Tree employee data stolen; critical vulnerabilities

Security04 Dec 2023 | 17

Leader of pro-Russia DDoS crew Killnet 'unmasked' by Russian state media

Infosec in Brief Also: NXP China attack, Australia can't deliver on ransom payment ban (yet), and Justin Sun's very bad month

Security27 Nov 2023 | 11

Your password hygiene remains atrocious, says NordPass

Infosec in brief ALSO: FCC cracks down on SIM-swap scams, old ZeroLogon targeted by new ransomware, and critical vulnerabilities

Security20 Nov 2023 | 57

Royal Mail cybersecurity still a bit of a mess, infosec bods claim

Infosec in brief Also: Most Mainers are MOVEit victims, NY radiology firm fined for not updating kit, and some critical vulnerabilities

Security13 Nov 2023 | 8

Okta October breach affected 134 orgs, biz admits

Infosec in brief Plus: CVSS 4.0 is here, this week's critical vulns, and 'incident' hit loan broker promises no late fees. Generous

Security06 Nov 2023 | 6

SEC boss warns it's 'nearly unavoidable' that AI will cause financial crash

AI In Brief Plus Meta gets physical, moves bots in the house...

AI + ML23 Oct 2023 | 28

Regulator, insurers and customers all coming for Progress after MOVEit breach

Infosec in brief Also, CISA cataloging new ransomware data points, 17k WP sites hijacked by malware in Sept., and more critical vulns

Security16 Oct 2023 | 3

UK data watchdog warns Snap over My AI chatbot privacy issues

AI in brief Plus: 4channers are making troll memes with Bing AI, and more

AI + ML09 Oct 2023 | 6

Chinese smart TV boxes infected with malware in PEACHPIT ad fraud campaign

Infosec in brief PLUS: Sony admits to MoveITbreach; Blackbaud fined again, Qakbot's sorta back from the dead; and more

Security09 Oct 2023 | 7

OpenAI warns folks over GPT-4 Vision's limits and flaws

AI In Brief Plus: Mistral emits uncensored model, Meta expands Llama 2's context window, Alexa drills into your voice

AI + ML02 Oct 2023 | 5

Now MOVEit maker Progress patches holes in WS_FTP

Infosec in brief Plus: Johnson Controls hit by IT 'incident', Exim and Chrome security updates, and more

Patches01 Oct 2023 | 9

T-Mobile US exposes some customer data – but don't call it a breach

Infosec in brief PLUS: Trojan hidden in PoC; cyber insurance surge; pig butchering's new cuts; and the week's critical vulns

Security25 Sep 2023 | 9

California passes bill to set up one-stop data deletion shop

Infosec in brief Also, LockBit gets a new second stringer, AirTag owners find yet another illicit use, and this week's critical vulns

Security18 Sep 2023 | 13

Google warns infoseccers: Beware of North Korean spies sliding into your DMs

Infosec in brief ALSO: Verizon turns self in for reduced fine, malvertising comes to macOS, and this week's critical vulnerabilities

Security11 Sep 2023 | 2

Apple opens annual applications for free hackable iPhones

Infosec in brief ALSO: Brazilian stalkerware database ripped by the short hairs, a fast fashion breach, and this week's critical vulns

Security04 Sep 2023 | 1

Whiffy malware stinks after tracking location via Wi-FI

Infosec in Brief ALSO: Euro chip maker breached, crims plan to undermine cyber insurance, and this week's critical vulnerabilities

Security28 Aug 2023 | 12

Microsoft DNS boo-boo breaks Hotmail for users around the globe

Infosec in brief ALSO: NYC says kthxbye to TikTok, slain Microsoft exec's wife indicted, and some ASAP patch warnings

Security21 Aug 2023 | 11

US government to investigate China's Microsoft email breach

Infosec in brief PLUS: Phishing campaign targets the C-suite; Cybercrime arrests in EU and Africa; and more

Security14 Aug 2023 | 1

Five Eyes nations detail dirty dozen most exploited vulnerabilities

Infosec in brief PLUS: FBI admits buying NSO spyware; "IT" company busted for drugs 'n guns biz; this week's critical vulns

Security07 Aug 2023 | 6

US senator victim-blames Microsoft for Chinese hack

Infosec in brief ALSO: China says US hacked it right back, BreachForums users have been pwned, and this week's critical vulns

Security31 Jul 2023 | 10

Google Cloud shores up log permissions for builder bot

Infosec in brief ALSO: Amazon's child-sized COPPA fine, smart tech security labels coming to the US, and this week's critical vulns

Security24 Jul 2023 | 2

Boris Johnson pleads ignorance, which just might work

Infosec in brief Also: More high-profile MOVEit victims; CVSS 4.0 coming soon; and a long list of critical vulnerabilities

Security17 Jul 2023 | 79

Sarah Silverman, novelists sue OpenAI for scraping their books to train ChatGPT

AI in brief Plus: Adobe is limiting how staff can use external generative AI tools, and the Pentagon is testing different large language models

AI + ML10 Jul 2023 | 82

Liberté, Égalité, Spyware: France okays cops snooping on phones

Infosec in brief ALSO: Shell fails to learn from past leaks; hundreds of solar plants found open to Mirai; and this week's crit vulns

Security10 Jul 2023 | 45