Ingram Micro confirms ransomware behind multi-day outage Updated SafePay crew claims responsibility for intrusion at one of world's largest tech distributors Cyber-crime06 Jul 2025 | 18
Young Consulting finds even more folks affected in breach mess – now over 1 million The insurance SaaS slinger may trade under a different name, but past continues to haunt it Cyber-crime03 Jul 2025 | 1
Ransomware crew Hunters International shuts down, hands out keys to victims Don't let their kind words sway you – leaders are still up to no good Cyber-crime03 Jul 2025 | 5
23andMe's new owner says your DNA is safe this time Nonprofit TTAM assures everything is BAU. Whether that makes customers feel better is another matter Cyber-crime02 Jul 2025 | 18
US imposes sanctions on second Russian bulletproof hosting vehicle this year Aeza Group accused of assisting data bandits and BianLian ransomware crooks Cyber-crime02 Jul 2025 | 10
Australian airline Qantas reveals data theft impacting six million customers Frequent flyers’ info takes flight Security02 Jul 2025 | 17
International Criminal Court swats away 'sophisticated and targeted' cyberattack Body stays coy on details but alludes to similarities with 2023 espionage campaign Cyber-crime01 Jul 2025 | 4
US shuts down a string of North Korean IT worker scams Resulting in two indictments, one arrest, and 137 laptops seized Cyber-crime30 Jun 2025 | 1
British IT worker sentenced to seven months after trashing company network Don't leave the door open to disgruntled workers Cyber-crime30 Jun 2025 | 91
Scattered Spider crime spree takes flight as focus turns to aviation sector Time ticking for defenders as social engineering pros weave wider web Cyber-crime30 Jun 2025 | 2
Ex-NATO hacker: 'In the cyber world, there's no such thing as a ceasefire' interview Watch out for supply chain hacks especially Cyber-crime28 Jun 2025 | 61
Crims are posing as insurance companies to steal health records and payment info Taking advantage of the ridiculously complex US healthcare billing system Cyber-crime27 Jun 2025 | 7
Aloha, you’ve been pwned: Hawaiian Airlines discloses ‘cybersecurity event’ update 'No impact on safety,' FAA tells The Reg Cyber-crime27 Jun 2025 |
Data spill in aisle 5: Grocery giant Ahold Delhaize says 2.2M affected after cyberattack Finance, health, and national identification details compromised Cyber-crime27 Jun 2025 | 4
FBI used bitcoin wallet records to peg notorious IntelBroker as UK national Pro tip: Don't use your personal email account on BreachForums Cyber-crime26 Jun 2025 | 31
Glasgow City Council online services crippled following cyberattack Nothing confirmed but authority is operating under the assumption that data has been stolen Cyber-crime26 Jun 2025 | 14
Qilin ransomware attack on NHS supplier contributed to patient fatality Pathology outage caused by Synnovis breach linked to harm across dozens of healthcare facilities Cyber-crime26 Jun 2025 | 7
That WhatsApp from an Israeli infosec expert could be a Iranian phish Charming Kitten unsheathes its claws and tries to catch credentials Cyber-crime26 Jun 2025 | 2
Supply chain attacks surge with orgs 'flying blind' about dependencies Who is the third party that does the thing in our thing? Yep. Attacks explode over past year CSO25 Jun 2025 | 4
French cybercrime police arrest five suspected BreachForums admins Twentysomethings claimed to be linked to spate of high-profile cybercrimes Cyber-crime25 Jun 2025 |
Ingram Micro confirms ransomware behind multi-day outage Updated SafePay crew claims responsibility for intrusion at one of world's largest tech distributors
Atlassian migrated 4 million Postgres databases to shrink AWS bill Asia In Brief PLUS: Lexmark’s Chinese owners sell to Xerox; India, Australia, target underwater drones; JPMorgan drops custom TLDs; and more!
Yes, I wrote a very expensive bug. In my defense I was only seven years old at the time Who, Me? Years later, deep into a great tech career, your fellow reader remains inspired by the forgiveness received after the error
UK puts out tender for space robot to de-orbit satellites Updated Got to be a 'clean space superpower' – right, Brits?
Stalkerware firm gets scooped by SQL-slinging security snoop Infosec In Brief Also, Swiss ransomware posture looks like its cheese, the CVE Program wants YOU, more sus checks and more
Airbus okays use of ‘Taxibot’ to tow planes to the runway Airlines get the chance to cool their jets rather than burn fuel on the ground
VMware’s rivals ramp up their efforts to create alternative stacks Red Hat and Open Nebula deliver big updates, as Edera tools for Xen with Rust
AI scores a huge own goal if you play up and play the game Opinion A virtual environment makes a great de-hype advisor
Phishing platforms, infostealers blamed as identity attacks soar Get your creds in order or risk BEC, ransomware attacks, orgs warned
'Cyber security' behind decision to end defense satellite sharing of hurricane data Official notice confirms delay to cutoff until the end of July. Not to worry, AI modelling's in the wings
Beware of fake SonicWall VPN app that steals users' credentials A good reminder not to download apps from non-vendor sites Cyber-crime24 Jun 2025 | 1
Four REvil ransomware crooks walk free, escape gulag fate, after admitting guilt Russian judge lets off accused with time served – but others who refused to plead guilty face years in penal colony Cyber-crime24 Jun 2025 | 9
Iran cyberattacks against US biz more likely following air strikes Plus 'low-level' hacktivist attempts Cyber-crime23 Jun 2025 | 32
Second attack on McLaren Health Care in a year affects 743k people Criminals targeted the hospital and physician network’s Detroit cancer clinic this time Cyber-crime23 Jun 2025 | 1
Experts count staggering costs incurred by UK retail amid cyberattack hell Cyber Monitoring Centre issues first severity assessment since February launch Cyber-crime23 Jun 2025 | 27
Netflix, Apple, BofA websites hijacked with fake help-desk numbers Don’t trust mystery digits popping up in your search bar Cyber-crime20 Jun 2025 | 14
Looks like Aflac is the latest insurance giant snagged in Scattered Spider’s web If it looks like a duck and walks like a duck... Cyber-crime20 Jun 2025 | 5
Qilin ransomware top dogs treat their minions to on-call lawyers for fierier negotiations It's a marketing move to lure more affiliates, says infosec veteran Cyber-crime20 Jun 2025 | 4
Attack on Oxford City Council exposes 21 years of election worker data Services coming back online after legacy systems compromised Cyber-crime20 Jun 2025 | 24
Uncle Sam seeks time in tower dump data grab case after judge calls it 'unconstitutional' Feds told they can't demand a haystack to find a needle Cyber-crime19 Jun 2025 | 17
Glazed and confused: Hole lotta highly sensitive data nicked from Krispy Kreme Experts note 'major red flags' in donut giant's security as 161,676 staff and families informed of attack details Cyber-crime19 Jun 2025 | 48
UK gov asks university boffins to pinpoint cyber growth areas where it should splash cash Good to see government that values its academics (cough cough). Plus: New board criticized for lacking 'ops' people Public Sector19 Jun 2025 | 11
Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware Phishing, Python and RATs, oh my Cyber-crime19 Jun 2025 | 2
Minecraft cheaters never win ... but they may get malware Infostealers posing as popular cheat tools are cropping up on GitHub Cyber-crime18 Jun 2025 | 7
Scattered Spider has moved from retail to insurance Google threat analysts warn the team behind the Marks & Spencer break-in has moved on Cyber-crime16 Jun 2025 | 1
Remorseless extortionists claim to have stolen thousands of files from Freedman HealthCare UPDATED The group has previously threatened to SWAT cancer patients and leaked pre-op plastic surgery photos Cyber-crime16 Jun 2025 |
Armored cash transport trucks allegedly hauled money for $190 million crypto-laundering scheme Asia In Brief PLUS: APNIC completes re-org; India cuts costs for chipmakers; Infosys tax probe ends; and more Cyber-crime16 Jun 2025 | 3
Ransomware scum disrupted utility services with SimpleHelp attacks Good news: The vendor patched the flaw in January. Bad news: Not everyone got the memo Cyber-crime12 Jun 2025 | 1
'Major compromise' at NHS temping arm exposed gaping security holes Exclusive Incident responders suggested sweeping improvements following Active Directory database heist Cyber-crime12 Jun 2025 | 18
DeepSeek installer or just malware in disguise? Click around and find out 'BrowserVenom' is pure poison Cyber-crime11 Jun 2025 | 5
Hire me! To drop malware on your computer FIN6 moves from point-of-sale compromise to phishing recruiters Cyber-crime11 Jun 2025 | 3
Asia dismantles 20,000 malicious domains in infostealer crackdown Interpol coordinates operation, nabs 32 across Vietnam, Sri Lanka, and Nauru Cyber-crime11 Jun 2025 | 4
CISO who helped unmask Badbox warns: Version 3 is coming The botnet’s still alive and evolving Cyber-crime11 Jun 2025 |
Texas warns 300,000 crash reports siphoned via compromised user account Lone Star State drivers with accident records need to be careful about fraud Cyber-crime10 Jun 2025 | 5
M&S online ordering system operational 46 days after cyber shutdown A milestone in cyberattack recovery – but deliveries will take a while and normal service not yet back Cyber-crime10 Jun 2025 | 18
Let them eat junk food: Major organic supplier to Whole Foods, Walmart, hit by cyberattack United Natural Foods shut down some of its systems on June 5 after spotting network intruders Cyber-crime09 Jun 2025 | 5
Your ransomware nightmare just came true – now what? Feature Don't negotiate unless you must, and if so, drag it out as long as you can CSO06 Jun 2025 | 40
Uncle Sam puts $10M bounty on RedLine dev and Russia-backed cronies Any info on Maxim Rudometov and his associates? There's $$$ in it for you Cyber-crime05 Jun 2025 | 3
AT&T not sure if new customer data dump is déjà vu Re-selling info from an earlier breach? Probably. But which one? Cyber-crime05 Jun 2025 | 1
BidenCash busted as Feds nuke stolen credit card bazaar Dark web crime platform raked in $17M+ over three years of operation Cyber-crime05 Jun 2025 | 3
More than a hundred backdoored malware repos traced to single GitHub user Someone went to great lengths to prey on the next generation of cybercrooks Cyber-crime05 Jun 2025 | 12
HMRC: Crooks broke into 100k accounts, stole £43M from British taxpayer in late 2024 It’s definitely not a cyberattack though! Really! Public Sector05 Jun 2025 | 29
Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes Recompiled binaries and phone threats used to boost the pressure Cyber-crime04 Jun 2025 | 1
Ransomware scum leak patient data after disrupting chemo treatments at Kettering Literally adding insult to injury Cyber-crime04 Jun 2025 | 11
Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns Victims include hospitality, retail and education sectors Cyber-crime04 Jun 2025 | 24
Crims stole 40,000 people's data from our network, admits publisher Lee Enterprises Did somebody say ransomware? Not the newspaper group, not even to deny it Cyber-crime04 Jun 2025 | 2
‘Deliberate attack’ deletes shopping app’s AWS and GitHub resources CEO of India's KiranaPro, which brings convenience stores online, vows to name the perp Cyber-crime04 Jun 2025 | 22
You say Cozy Bear, I say Midnight Blizzard, Voodoo Bear, APT29 … Opinion Microsoft, CrowdStrike, and pals promise clarity on cybercrew naming, deliver alias salad instead Cyber-crime03 Jun 2025 | 14
Crooks fleece The North Face accounts with recycled logins Outdoorsy brand blames credential stuffing Cyber-crime03 Jun 2025 | 7
Bling slinger Cartier tells customers to be wary of phishing attacks after intrusion Nothing terribly valuable taken in data heist, though privacy a little tarnished Cyber-crime03 Jun 2025 | 6
US community bank says thieves drained customer data through third party hole Disclosure at MainStreet Bancshares comes as American finance orgs beg for looser reporting requirements Cyber-crime02 Jun 2025 | 13
Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump exclusive 'It's a high-stakes intelligence war,' analyst explains Cyber-crime31 May 2025 | 30
ConnectWise customers get mysterious warning about 'sophisticated' nation-state hack Pen tester on ScreenConnect bug: This one ‘terrifies’ me Cyber-crime30 May 2025 | 5
US medical org pays $50M+ to settle case after crims raided data and threatened to swat cancer patients Cash splashed on damages, infrastructure improvements, and fraud monitoring Cyber-crime30 May 2025 | 2
Crims defeat human intelligence with fake AI installers they poison with ransomware Take care when downloading AI freebies, researcher tells The Register Cyber-crime30 May 2025 | 7
Feds gut host behind pig butchering scams that bilked $200M from Americans Philippines company allegedly run by Chinese national has form running scams Security30 May 2025 | 14
Why is China deep in US networks? 'They're preparing for war,' HR McMaster tells lawmakers House Homeland Security Committee takes a field trip to Silicon Valley Cyber-crime29 May 2025 | 43
Victoria's Secret website laid bare for three days after 'security incident' Knickers outlet knackered Security29 May 2025 | 40
Attack on LexisNexis Risk Solutions exposes data on 300k + Data analytics and risk management biz says software dev platform breached, not itself Cyber-crime28 May 2025 | 2
Don't click on that Facebook ad for a text-to-AI-video tool Millions may fall for it - and end up with malware instead Cyber-crime27 May 2025 | 7
New Russian cyber-spy crew Laundry Bear joins the email-stealing pack Dutch intel services, Microsoft go big-game hunting Cyber-crime27 May 2025 | 11
Adidas confirms criminals stole data from customer service provider Hackers take personal data bytes from the brand with three stripes Cyber-crime27 May 2025 | 2
Ransomware attack on MATLAB dev MathWorks – licensing center still locked down Commercial customers, STEM students all feeling the pain after mega outage of engineering data-analysis tool Cyber-crime27 May 2025 | 23
Cybercrime is 'orders of magnitude' larger than state-backed ops, says ex-White House advisor INTERVIEW Michael Daniel also thinks Uncle Sam should increase help to orgs hit by ransomware Cyber-crime24 May 2025 | 26
Ransomware scum leaked Nova Scotia Power customers' info Bank accounts, personal details all hoovered up in the attack Cyber-crime23 May 2025 | 9
Suspected creeps behind DanaBot malware that hit 300K+ computers revealed And the associated fraud'n'spy botnet is about to be shut down Cyber-crime23 May 2025 | 1
Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit If it ain't broke? Datacenter Networking Nexus23 May 2025 | 1
US Navy sailor charged in horrific child sextortion case Blackmailed teen allegedly scared into carving his handle onto her arm Cyber-crime23 May 2025 | 21
Feds finger Russian 'behind Qakbot malware' that hit 700K computers Agents thought they shut this all down in 2023, but the duck quacked again Cyber-crime22 May 2025 | 2
Chinese snoops tried to break into US city utilities, says Talos Intrusions began weeks before Trimble patched the Cityworks hole Cyber-crime22 May 2025 | 6
Scottish council admits ransomware crooks stole school data Parents and teachers have personal info, ID documents leaked online, but exam season mostly unaffected Cyber-crime22 May 2025 | 36
US teen to plead guilty to extortion attack against PowerSchool The 19-year-old and a partner first tried to extort an unnamed telco, but failed Cyber-crime21 May 2025 | 1
FBI, Microsoft, international cops bust Lumma infostealer service Credit card theft losses in 2023 alone totaled $36.5M Cyber-crime21 May 2025 |
Coinbase confirms insiders handed over data of 70K users Bribed support staff identified, fired Cyber-crime21 May 2025 | 17
M&S warns of £300M dent in profits from cyberattack Downtime stings retailer, with technical recovery costs coming at a later date Cyber-crime21 May 2025 | 44
Scattered Spider snared financial orgs before targeting shops in Britain, America interview Crew ain't done hopping sectors, Unit 42 threat hunter warns Cyber-crime21 May 2025 | 4
'Ongoing' Ivanti hijack bug exploitation reaches clouds Nothing like insecure code in security suites CSO21 May 2025 | 4
Ransomware attack on food distributor spells more pain for UK supermarkets Peter Green Chilled supplies all the major UK chains Cyber-crime20 May 2025 | 64
SEC SIM-swapper who Googled 'signs that the FBI is after you' put behind bars Proving yet again that crims are bad at search hygiene Cyber-crime19 May 2025 | 29
Millions at risk after attackers steal UK legal aid data dating back 15 years Cybercriminals lifted info including addresses, ID numbers, and financial records from agency systems Cyber-crime19 May 2025 | 49
IT chiefs of UK's massive health service urge vendors to make public security pledge Enormous org has been hit by ransomware again and again, on multiple fronts, over the past year Cyber-crime19 May 2025 | 27
Broadcom employee data stolen by ransomware crooks following hit on payroll provider Updated Tech giant was in process of dropping payroll biz as it learned of breach Cyber-crime16 May 2025 | 1
From hype to harm: 78% of CISOs see AI attacks already AI attacks are keeping most practitioners up at night, says Darktrace, and with good reason Sponsored feature
DoorDash scam used fake drivers, phantom deliveries to bilk $2.59M Entire process took less than five minutes, prosecutors say Cyber-crime15 May 2025 | 18
Cyber fiends battering UK retailers now turn to US stores Interview DragonForce-riding ransomware ring also has 'shiny object syndrome' so will likely move on to another sector soon Cyber-crime15 May 2025 | 6
Coinbase extorted for $20M. Support staff bribed. Customers scammed. One hell of a SNAFU Expert tells us: 'It is the most unique breach disclosure I've ever seen' Cyber-crime15 May 2025 | 14
Here's what we know about the DragonForce ransomware that hit Marks & Spencer Would you believe it, this RaaS cartel says Russia is off limits Cyber-crime15 May 2025 | 23
Metal maker meltdown: Nucor stops production after cyber-intrusion Ransomware or critical infra hit? Top US manufacturer maintains steely silence Cyber-crime14 May 2025 | 13
Marks & Spencer admits cybercrooks made off with customer info Market cap down by more than £1B since April 22 Cyber-crime13 May 2025 | 76
Attackers pwn charter airline helping Trump's deportation campaign Intruders claim they stole GlobalX's flight records and manifests Cyber-crime12 May 2025 | 49