MGM says FTC can't possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time
What a twist!
Cyber-crime16 Apr 2024 | 19
CSO
X fixes URL blunder that could enable convincing social media phishing campaigns
Poorly implemented rule allowed miscreants to deceive users with trusted URLs
CSO10 Apr 2024 | 27
Nearly 1M medical records feared stolen from City of Hope cancer centers
Is there no cure for this cyber-plague?
Cyber-crime03 Apr 2024 | 7
Malicious xz backdoor reveals fragility of open source
Analysis This time, we got lucky. It mostly affected bleeding-edge distros. But that's not a defense strategy
Devops01 Apr 2024 | 98
Malicious SSH backdoor sneaks into xz, Linux world's data compression library
STOP USAGE OF FEDORA RAWHIDE, says Red Hat while Debian Unstable and others also affected
CSO29 Mar 2024 | 123
These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb
One might say this is a wurst case scenario
Patches28 Mar 2024 | 44
'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw
Anyscale claims issue is 'long-standing design decision' – as users are raided by intruders
CSO27 Mar 2024 | 14
Row breaks out over true severity of two DNSSEC flaws
Updated Some of us would be happy being rated 7.5 out of 10, just sayin'
CSO26 Mar 2024 | 11
Don't be like these 900+ websites and expose millions of passwords via Firebase
Warning: Poorly configured Google Cloud databases spill billing info, plaintext credentials
CSO18 Mar 2024 | 11
Meta sues ex infra VP for allegedly stealing top-secret datacenter blueprints
Exec accused of using own work PC to swipe confidential AI and staffing docs for stealth cloud startup
PaaS + IaaS12 Mar 2024 | 4
Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes
Plus: CISA pulls plug on couple of systems feared compromised
Cyber-crime08 Mar 2024 | 2
Securing open source software: Whose job is it, anyway?
CISA announces more help, and calls on app makers to step up
CSO08 Mar 2024 | 21
Chinese chap charged with stealing Google’s AI datacenter secrets
Moonlighted for PRC companies after side-stepping Big G's security, allegedly
On-Prem07 Mar 2024 | 13
FBI: Critical infrastructure suffers spike in ransomware attacks
Jump in overall cybercrime reports, $60M-plus reportedly lost to extortionists alone, Feds reckon
CSO06 Mar 2024 | 4
IP address X-posure now a feature on Musk's social media thing
Just a little FYI
Personal Tech05 Mar 2024 | 33
Sandvine put on America's export no-fly list after Egypt used network tech for spying
Canadian network box maker floats in denial
CSO27 Feb 2024 | 11
Security is hard because it has to be right all the time? Yeah, like everything else
Systems Approach It takes only one bottleneck or single point of failure to ruin your week
CSO25 Feb 2024 | 28
Google open sources file-identifying Magika AI for malware hunters and others
Cool, but it's 2024 – needs more hype, hand wringing, and flashy staged demos to be proper ML
CSO17 Feb 2024 | 10
Quest Diagnostics pays $5M after mixing patient medical data with hazardous waste
Will cough up less than two days of annual profit in settlement – and California calls this a win
CSO16 Feb 2024 | 12
IT suppliers hacked off with Uncle Sam's demands in aftermath of cyberattacks
Plan says to hand over keys to networks – and report intrusions within eight hours of discovery
Public Sector08 Feb 2024 | 36
Half of polled infosec pros say their degree was less than useful for real-world work
The other half paid attention in class?
CSO07 Feb 2024 | 18
Chinese Coathanger malware hung out to dry by Dutch defense department
Attack happened in 2023 using a bespoke backdoor, confirming year-old suspicions
CSO06 Feb 2024 | 13
Blackbaud settles with FTC after that IT breach exposed millions of people's info
Cloud software slinger admits no guilt, promises better basic security hygiene
Cyber-crime02 Feb 2024 | 6
Cloudflare sheds more light on Thanksgiving security breach in which tokens, source code accessed by suspected spies
Atlassian systen compromised via October Okta intrusion
CSO02 Feb 2024 | 14
Rise of deepfake threats means biometric security measures won't be enough
Defenses need a rethink in face of increasing sophistication
CSO01 Feb 2024 | 18
SolarWinds slams SEC lawsuit against it as 'unprecedented' victim blaming
18,000 customers, including the Pentagon and Microsoft, may have other thoughts
CSO29 Jan 2024 | 16
Microsoft sheds some light on Russian email heist – and how to learn from Redmond's mistakes
Step one, actually turn on MFA
CSO27 Jan 2024 | 17
Wait, security courses aren't a requirement to graduate with a computer science degree?
Comment And software makers seem to be OK with this, apparently
CSO26 Jan 2024 | 64
What Microsoft's latest email breach says about this IT security heavyweight
Comment Senator Wyden tells The Reg this latest infosec lapse is 'inexcusable'
CSO24 Jan 2024 | 45
JPMorgan exec claims bank repels '45 billion' cyberattack attempts per day
Updated Assets boss also reckons she has more engineers than Amazon
CSO18 Jan 2024 | 20
FBI: Beware of thieves building Androxgh0st botnets using stolen creds
Infecting networks via years-old CVEs that should have been patched by now
CSO17 Jan 2024 |
Number of orgs compromised via Ivanti VPN zero-days grows as Mandiant weighs in
Snoops had no fewer than five custom bits of malware to hand to backdoor networks
CSO13 Jan 2024 | 4
Ransomware payment ban: Wrong idea at the wrong time
Opinion Won't stop the chaos, may lead to attacks with more dire consequences
CSO06 Jan 2024 | 130
After injecting cancer hospital with ransomware, crims threaten to swat patients
Remember the good old days when ransomware crooks vowed not to infect medical centers?
CSO05 Jan 2024 | 70
Sandworm's Kyivstar attack should serve as a reminder of the Kremlin crew's 'global reach'
'Almost everything' wiped in the telecom attack, says Ukraine's top cyber spy
CSO05 Jan 2024 | 13
Three Chinese balloons float near Taiwanese airbase
Also: Remember that balloon over the US last February? It might have used a US internet provider
CSO04 Jan 2024 | 15
A tale of 2 casino ransomware attacks: One paid out, one did not
Feature What can be learned from MGM's and Caesars' infosec moves
CSO28 Dec 2023 | 64
Microsoft's bug bounty turns 10. Are these kinds of rewards making code more secure?
Interview Katie Moussouris, who pioneered Redmond's program, says folks are focusing on the wrong thing
CSO22 Nov 2023 | 9
SonicWall swallows Solutions Granted amid cybersecurity demand surge
CEO Bob VanKirk makes near-20-year partnership official, teases big things coming to EMEA
CSO17 Nov 2023 | 1
How much to clean up a ransomware infection? For Rackspace, about $11M
And that's not counting the incoming lawsuits. Thank goodness for insurance, eh?
CSO16 Nov 2023 | 7
Clorox CISO flushes self after multimillion-dollar cyberattack
Plus: Ransomware crooks file SEC complaint against victim
CSO16 Nov 2023 | 23
NCSC says cyber-readiness of UK’s critical infrastructure isn’t up to scratch
And the world's getting more and more dangerous
CSO14 Nov 2023 | 16
HTTP/2 'Rapid Reset' zero-day exploited in biggest DDoS deluge seen yet
Botnet storm drowned last record with 398 million requests per second
CSO10 Oct 2023 | 13
Red Cross lays down hacktivism law as Ukraine war rages on
Rules apply to cyber vigilantes and their home nations, but experts cast doubt over potential benefits
CSO04 Oct 2023 | 4
Chinese snoops stole 60K State Department emails in that Microsoft email heist
No classified systems involved apparently, but internal diplomatic notes, travel details, staff SSNs, etc
CSO28 Sep 2023 | 4
Good news for Key Group ransomware victims: Free decryptor out now
That's what we call a static shock
CSO31 Aug 2023 | 5
Barracuda gateway attacks: How Chinese snoops keep a grip on victims' networks
Backdoors detailed, plus CISA releases more IOCs for IT depts to check
CSO30 Aug 2023 |
University cuts itself off from internet after mystery security snafu
Updated Halls of learning are stuck offline, but go Wolverines!
CSO29 Aug 2023 | 21
Malware loader lowdown: The big 3 responsible for 80% of attacks so far this year
Top of the list to trip sensors
CSO28 Aug 2023 | 6
Russia's Cozy Bear is back and hitting Microsoft Teams to phish top targets
Plus: Tenable CEO blasts Redmond's bug disclosure habits
CSO03 Aug 2023 | 8
What would sustainable security even look like?
Opinion Clue: Nothing like what’s on offer today
CSO31 Jul 2023 | 40
Florida man accused of hoarding America's secrets faces fresh charges
Mar-a-Lago IT director told 'the boss wanted the server deleted'
CSO29 Jul 2023 | 147
Millions of people's data stolen because web devs forget to check access perms
IDORs of the storm
CSO29 Jul 2023 | 40
Crooks pwned your servers? You've got four days to tell us, SEC tells public companies
Cripes, they actually sound serious
CSO26 Jul 2023 | 29
AMD Zenbleed chip bug leaks secrets fast and easy
Zen 2 flaw more simple than Spectre, exploit code already out there – get patching when you can
CSO24 Jul 2023 | 64
Stolen Microsoft key may have opened up a lot more than US govt email inboxes
How does the Azure giant come back from this?
CSO21 Jul 2023 | 56
VirusTotal: We're sorry someone fat-fingered and exposed 5,600 users
File under PEBCAK
CSO21 Jul 2023 | 19
Chinese balloon that US shot down was 'crammed' with American hardware
Blasted from the sky in February, device never transmitted photos, videos, or radar data it collected, officials say
CSO29 Jun 2023 | 75
Ex-FBI employee jailed for taking classified material home
Infosec in brief Also: a PII harvest at Dole's server farm, military members mailed mystery smartwatches, and this week's critical vulns
CSO26 Jun 2023 | 55
JP Morgan accidentally deletes evidence in multi-million record retention screwup
Fined $4m for Who-Me-esque mess, for which it blames unnamed archiving vendor's retention settings
CSO26 Jun 2023 | 56
Biting the hand that feeds IT
