UK councils bat away DDoS barrage from pro-Russia keyboard warriors
Local authority websites downed in response to renewed support for Ukraine
Cyber-crime01 Nov 2024 | 34
Special Features
Gang gobbles 15K credentials from cloud and email providers' garbage Git configs
Emeraldwhale looked sharp – until it made a common S3 bucket mistake
Research31 Oct 2024 | 2
LottieFiles supply chain attack exposes users to malicious crypto wallet drainer
A scary few Halloween hours for team behind hugely popular web plugin
Cyber-crime31 Oct 2024 | 11
Chinese attackers accessed Canadian government networks – for five years
India makes it onto list of likely threats for the first time
Cybersecurity Month31 Oct 2024 | 15
Russian spies use remote desktop protocol files in unusual mass phishing drive
The prolific Midnight Blizzard crew cast a much wider net in search of scrummy intel
Cyber-crime30 Oct 2024 | 18
Cast a hex on ChatGPT to trick the AI into writing exploit code
'It was like watching a robot going rogue' says researcher
Cybersecurity Month29 Oct 2024 | 28
Belgian cops cuff 2 suspected cybercrooks in Redline, Meta infostealer sting
US also charges an alleged Redline dev, no mention of an arrest
Cyber-crime29 Oct 2024 | 1
Admins better Spring into action over latest critical open source vuln
Patch up: The Spring framework dominates the Java ecosystem
Security29 Oct 2024 | 1
Five Eyes nations tell tech startups to take infosec seriously. Again
Only took 'em a year to dish up some scary travel advice, and a Secure Innovation … Placemat?
Cybersecurity Month29 Oct 2024 | 14
Brazen crims selling stolen credit cards on Meta's Threads
Exclusive The platform 'continues to take action' against illegal posts, we're told
Cyber-crime28 Oct 2024 | 20
Delta officially launches lawyers at $500M CrowdStrike problem
Legal action comes months after alleging negligence by Falcon vendor
Cybersecurity Month28 Oct 2024 | 23
Dutch cops pwn the Redline and Meta infostealers, leak 'VIP' aliases
Legal proceedings underway with more details to follow
Cybersecurity Month28 Oct 2024 | 5
AWS Cloud Development Kit flaw exposed accounts to full takeover
Remember Bucket Monopoly? Yeah, it gets worse
Cybersecurity Month24 Oct 2024 | 13
Ransomware's ripple effect felt across ERs as patient care suffers
389 US healthcare orgs infected this year alone
Cybersecurity Month24 Oct 2024 | 1
Here's a NIS2 compliance checklist since no one cares about deadlines anymore
Only two EU members have completed the transposition into domestic law
Cybersecurity Month24 Oct 2024 | 11
Perfctl malware strikes again as crypto-crooks target Docker Remote API servers
Attacks on unprotected servers reach 'critical level'
Cybersecurity Month24 Oct 2024 | 1
FortiManager critical vulnerability under active attack
Updated Security shop and CISA urge rapid action
Cybersecurity Month23 Oct 2024 | 7
Millions of Android and iOS users at risk from hardcoded creds in popular apps
Azure Blob Storage, AWS, and Twilio keys all up for grabs
Cybersecurity Month23 Oct 2024 | 17
Akira ransomware is encrypting victims again following pure extortion fling
Crooks revert to old ways for greater efficiency
Cybersecurity Month22 Oct 2024 | 2
Pixel perfect Ghostpulse malware loader hides inside PNG image files
Miscreants combine it with an equally tricky piece of social engineering
Cybersecurity Month22 Oct 2024 | 34
Popular
Open source router firmware project OpenWrt ships its own entirely repairable hardware
'Forever unbrickable' Wi-Fi 6 box from Banana Pi comes packaged or in kit form
Broadcom loses another big VMware customer: UK fintech cloud Beeks Group, and most of its 20,000 VMs
A massively increased bill was one motive, but customers went cold on Virtzilla, and OpenNebula proved more efficient
Who had Pat Gelsinger retires from Intel on their bingo card?
80486 processor lead architect leaves x86 giant after largest quarterly loss in its history
Telco security is a dumpster fire and everyone's getting burned
Opinion The politics of cybersecurity are too important to be left to the politicians
Submarine cable resilience board announced on same day maybe-cut-by-China Baltic cable repaired
ITU thinks time is now for more talk about how to keep data moving beneath the waves
NetAdmin learns that wooden chocks, unlike swipe cards, open doors when networks can't
Who, Me? Burglary skills are surprisingly important when building networks
Windows 11 market share falls despite Microsoft ad blitz
Only 10 months left until Windows 10 end of support and people still seem to prefer it
Oracle's Java price hikes push CIOs to brew new licensing strategies
Users could save 50% with open source alternatives, says expert
Interpol nabs thousands, seizes millions in global cybercrime-busting op
Infosec in brief Also, script kiddies still a threat, Tornado Cash is back, UK firms lose billions to avoidable attacks, and more
Apple's backwards design mistake and the reversed capacitor
It's true – the Mac LC III really did have it installed the wrong way round
STORIES
macOS HM Surf vuln might already be under exploit by major malware family
Like keeping your camera and microphone private? Patch up
Cybersecurity Month21 Oct 2024 | 16
Jetpack fixes 8-year-old flaw affecting millions of WordPress sites
In Brief - Updated Also, new EU cyber reporting rules are live, exploiters hit the gas pedal, free PDNS for UK schools, and more
Security18 Oct 2024 | 5
Spectre flaws continue to haunt Intel and AMD as researchers find fresh attack method
The indirect branch predictor barrier is less of a barrier than hoped
Cybersecurity Month18 Oct 2024 | 28
Alleged Bitcoin crook faces 5 years after SEC's X account pwned
SIM swappers strike again, warping cryptocurrency prices
Cybersecurity Month18 Oct 2024 | 14
ESET denies it was compromised as Israeli orgs targeted with 'ESET-branded' wipers
Says 'limited' incident isolated to 'partner company'
Cybersecurity Month18 Oct 2024 | 3
Biz hired, and fired, a fake North Korean IT worker – then the ransom demands began
'My webcam isn't working today' is the new 'The dog ate my network'
Cybersecurity Month18 Oct 2024 | 41
Someone's tried sneaking semiconductor secrets out of South Korea's patent office
Government hardens up infosec to stop this - as you would when Samsung and SK hynix are massive parts of your economy
Cybersecurity Month18 Oct 2024 | 5
Healthcare Services Group discloses 'cybersecurity incident' in SEC filing
Laundry and dining provider still investigating cause and scope
Cybersecurity Month18 Oct 2024 | 5
Brazilian police claim they've cuffed serial cybercrook behind FBI and Airbus attacks
Early stage opsec failures lead to landmark arrest of suspected serial data thief
Cybersecurity Month17 Oct 2024 | 3
WeChat devs introduced security flaws when they modded TLS, say researchers
No attacks possible, but enough issues to cause concern
Cybersecurity Month17 Oct 2024 | 15
Anonymous Sudan isn't any more: Two alleged operators named, charged
Gang said to have developed its evilware on GitHub – then DDoSed GitHub
Cybersecurity Month17 Oct 2024 | 5
US contractor pays $300K to settle accusation it didn't properly look after Medicare users' data
Resolves allegations it improperly stored screenshots containing PII that were later snaffled
Cybersecurity Month16 Oct 2024 | 7
Internet Archive wobbles back online, with limited functionality
DDoS detectives deduce Mirai used to do the deed, using home entertainment boxes in Korea, China, and Brazil
Cybersecurity Month16 Oct 2024 | 14
Google's memory safety plan includes rehab for unsafe languages
Large C and C++ codebases will be around for the 'foreseeable future'
Cybersecurity Month16 Oct 2024 | 30
Pentagon stumped by mystery drone swarm flying over Langley Air Force Base
Not that there's anything important there – just F-22s and stuff
Cybersecurity Month15 Oct 2024 | 85
Microsoft says tougher punishments needed for state-sponsored cybercriminals
Although it also reaffirmed commitment to secure-by-design initiatives
Cloud Infrastructure Month15 Oct 2024 | 17
China again claims Volt Typhoon cyber-attack crew was invented by the US to discredit it
Enough with the racist-sounding 'dragons' and 'pandas', Beijing complains – then points the finger at koalas
Cybersecurity Month15 Oct 2024 | 17
US healthcare org admits up to 400,000 people's personal info was snatched
It waited till just before Columbus Day weekend to make mandated filing, but don't worry, we saw it
Cybersecurity Month14 Oct 2024 | 3
Would banning ransomware insurance stop the scourge?
White House official makes case for ending extortion reimbursements
Cybersecurity Month14 Oct 2024 | 87
Trump campaign arms up with 'unhackable' phones after Iranian intrusion
Florida man gets his hands on 'the best ever'
Cybersecurity Month14 Oct 2024 | 144
Thousands of Fortinet instances vulnerable to actively exploited flaw
No excuses for not patching this nine-month-old issue
Cybersecurity Month14 Oct 2024 | 8
Crypto-apocalypse soon? Chinese researchers find a potential quantum attack on classical encryption
With an off-the-shelf D-Wave machine, but only against very short keys
Cybersecurity Month14 Oct 2024 | 23
Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between
Reading, writing, and cyber mayhem, amirite?
Cybersecurity Month13 Oct 2024 | 32
INC ransomware rebrands to Lynx – same code, new name, still up to no good
Researchers point to evidence that scumbags visited the strategy boutique
Cybersecurity Month11 Oct 2024 | 10
Ukraine cyber cops collar man who allegedly hooked citizens up to Russian internet
'Self-taught hacker' facing a possible 15 years in the slammer
Cybersecurity Month11 Oct 2024 | 10
FBI created a cryptocurrency so it could watch it being abused
It worked – alleged pump and dump schemers arrested in UK, US and Portugal this week
Cybersecurity Month11 Oct 2024 | 54
Fore-get about privacy, golf tech biz leaves 32M data records on the fairway
Researcher spots 110 TB of sensitive info sitting in unprotected database
Cybersecurity Month10 Oct 2024 | 36
CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame
Usual three-week window to address significant risks to federal agencies applies
Cybersecurity Month10 Oct 2024 |
Mozilla patches critical Firefox vuln that attackers are already exploiting
Firefixed: It's maintenance time for low-complexity, high-impact security flaw
Cybersecurity Month10 Oct 2024 | 26
Dutch cops reveal takedown of 'world's largest dark web market'
Two arrested after allegedly trying to make off with their ill-gotten gains
Cybersecurity Month10 Oct 2024 | 16
OpenAI says Chinese gang tried to phish its staff
Claims its models aren't making threat actors more sophisticated - but is helping debug their code
Cybersecurity Month10 Oct 2024 | 4
Internet Archive user info stolen in cyberattack, succumbs to DDoS
31M folks' usernames, email addresses, salted-encrypted passwords now out there
Cybersecurity Month10 Oct 2024 | 22
Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware
USB sticks help, but it's unclear how tools that suck malware from them are delivered
Cybersecurity Month09 Oct 2024 | 24
Smart TVs are spying on everyone
Regulators know this is a nightmare and have done little to stop it. Privacy advocacy group wants that to change
Cybersecurity Month09 Oct 2024 | 127
Marriott settles for a piddly $52M after series of breaches affecting millions
Intruders stayed for free on the network between 2014 and 2020
Cyber-crime09 Oct 2024 | 9
Microsoft cleans up hot mess of Patch Tuesday preview
Go forth and install your important security fixes
Cybersecurity Month09 Oct 2024 | 5
Ransomware gang Trinity joins pile of scumbags targeting healthcare
As if hospitals and clinics didn't have enough to worry about
Cybersecurity Month09 Oct 2024 | 6
Asian crime gangs are growing – fast – thanks to AI and other tech
UN report finds Telegram, cryptocurrency are tools of a growing 'criminal service economy'
Cybersecurity Month09 Oct 2024 | 7
Microsoft issues 117 patches – some for flaws already under attack
Patch Tuesday Plus: SAP re-patches a failed patch for critical-rated flaw
Cybersecurity Month08 Oct 2024 | 6
Qualcomm urges device makers to push patches after 'targeted' exploitation
Given Amnesty's involvement, it's a safe bet spyware is in play
Patches08 Oct 2024 |
Google brings better bricking to Androids, to curtail crims
Improved security features teased in May now appearing around the world
Cybersecurity Month08 Oct 2024 | 24
Feds reach for sliver of crypto-cash nicked by North Korea's notorious Lazarus Group
A couple million will do for a start … but Kim's crews are suspected of stealing much more
Cybersecurity Month08 Oct 2024 | 2
American Water rinsed in cyber attack, turns off app
Updated It's still safe to drink, top provider tells us
Cybersecurity Month07 Oct 2024 | 12
Chinese cyberspies reportedly breached Verizon, AT&T, Lumen
Salt Typhoon may have accessed court-ordered wiretaps and US internet traffic
Security07 Oct 2024 | 6
'Critical' CUPS vulnerability chain easy to use for massive DDoS attacks
Infosec In Brief Also, rooting for Russian cybercriminals, a new DDoS record, sneaky Linux server malware and more
Cybersecurity Month07 Oct 2024 | 5
UK's Sellafield nuke waste processing plant fined £333K for infosec blunders
Radioactive hazards and cyber failings ... what could possibly go wrong?
Cybersecurity Month05 Oct 2024 | 21
About a quarter million Comcast subscribers had their data stolen from debt collector
Cable giant says ransomware involved, FBCS keeps schtum
Cybersecurity Month04 Oct 2024 | 6
Apple fixes bug that let VoiceOver shout your passwords
Not a great look when the iGiant just launched its first password manager
Cybersecurity Month04 Oct 2024 | 6
Harvard duo hacks Meta Ray-Bans to dox strangers on sight in seconds
'You can build this in a few days – even as a very naïve developer'
Cybersecurity Month04 Oct 2024 | 115
Big brands among thousands infected by payment-card-stealing CosmicSting crooks
Updated Gangs hit 5% of all Adobe Commerce, Magento-powered stores, Sansec says
Cybersecurity Month04 Oct 2024 | 6
Sensitive data on 61K+ patients accessed in Alabama hospital cyberattack
Intruder pored over medical records, insurance details, Social Security numbers in some cases
Cybersecurity Month03 Oct 2024 |
DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks
Winter is coming
Cybersecurity Month03 Oct 2024 | 7
Average North American CISO pay now $565K, mainly thanks to one weird trick
Best way to boost your package is to leave, or pretend to
Cybersecurity Month03 Oct 2024 | 12
Two British-Nigerian men sentenced over multimillion-dollar business email scam
Fraudsters targeted local government, colleges, and construction firms in Texas and North Carolina
Cybersecurity Month03 Oct 2024 | 13
Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant
Exclusive Crooks 'like a sysadmin, with a malicious slant'
Cybersecurity Month03 Oct 2024 | 3
Brits hate how big tech handles their data, but can't be bothered to do much about it
Managing the endless stream of cookie banners leaves little energy for anything else
Cybersecurity Month03 Oct 2024 | 38
700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking
With 14 serious security flaws found, what a gift for spies and crooks
Cybersecurity Month02 Oct 2024 | 21
Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing
Poor use of PHP include() strikes again
Cybersecurity Month02 Oct 2024 | 4
NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great
Logjam 'hurting infosec processes world over' one expert tells us as US body blows its own Sept deadline
Cybersecurity Month02 Oct 2024 | 8
'Patch yesterday': Zimbra mail servers under siege through RCE vuln
Attacks began the day after public disclosure
Cybersecurity Month02 Oct 2024 | 5
Euro cops arrest 4 including suspected LockBit dev chilling on holiday
And what looks like proof stolen data was never deleted even after ransom paid
Cybersecurity Month01 Oct 2024 | 15
NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate
Aleksandr Ryzhenkov alleged to have extorted around $100M from victims, built 60 LockBit attacks
Cybersecurity Month01 Oct 2024 |
Australian e-tailer digiDirect customers' info allegedly stolen and dumped online
Full names, contact details, and company info – all the fixings for a phishing holiday
Cybersecurity Month01 Oct 2024 | 1
Rackspace internal monitoring web servers hit by zero-day
Exclusive Intruders accessed machines via tool bundled with ScienceLogic, 'limited' info taken, customers told not to worry
Cybersecurity Month30 Sep 2024 | 10
Ransomware forces hospital to turn away ambulances
Only level-one trauma unit in 400 miles crippled
Cybersecurity Month30 Sep 2024 | 19
Red team hacker on how she 'breaks into buildings and pretends to be the bad guy'
Interview Alethe Denis exposes tricks that made you fall for that return-to-office survey
Cybersecurity Month29 Sep 2024 | 68
AT&T sues Broadcom for 'breaking' VMware support extension contract
Telco giant slams silicon-and-software shop for trying to bully it into buying software it doesn't want or need, at huge prices
Virtualization05 Sep 2024 | 29
Cloud computing hits the nuclear button amid energy crisis
Analysis Other options considered too as the power draw on electricity grids continues unabated
Cloud Infrastructure Month03 Sep 2024 | 13
Veeam debuts its Proxmox backup tool – and reveals outfit using it to quit VMware
More help for Nutanix, too
Software02 Sep 2024 | 23
Broadcom has brought VMware down to earth and that’s welcome
VMware Explore But users aren’t optimistic it will land softly
VMware Explore29 Aug 2024 | 32
Nvidia's growth slows to a mere 122 percent but it’s still topping expectations
Still growing in China, ramping Hopper prods and predicting Blackwell billions soon
Cloud Infrastructure Month29 Aug 2024 | 10
Public clouds are 'dirty' about VMware's on-prem push, says Broadcom CEO Hock Tan
VMware Explore Virtzilla's sales swing decisively to the Cloud Foundation bundle
VMware Explore29 Aug 2024 | 8
Gartner warns Omnissa – formerly VMware's end-user compute biz – represents new risks
Weak roadmap, tricky migration path, and Broadcom dependencies add up to uncertainty
Virtualization28 Aug 2024 |
Google’s Irish bit barn plans denied over eco shortfall
DCs on the Emerald Isle better be green, says Dublin council - unless your name is Microsoft
Systems27 Aug 2024 | 13
Broadcom boss Hock Tan says public cloud gave IT departments PTSD
VMware Explore While datacenter silos have left you ‘so screwed’
Off-Prem27 Aug 2024 | 18
VMware reveals how it will deliver Broadcom's unified hybrid cloud … sometime soon
VMware Explore Claims just two management consoles will emerge
VMware Explore27 Aug 2024 | 7
The elusive dream of cloud portability: Why migrating workloads isn't so simple
Analysis Despite early promises, moving between providers remains a complex and costly endeavor
Cloud Infrastructure Month27 Aug 2024 | 18
VMware prepping unified SDK for its core hybrid cloud products
VMware Explore Also working to clean up inconsistent APIs and lack of SSO across vSphere, vSAN, NSX, SDDC Manager, vRealize and more
Virtualization26 Aug 2024 | 1
Broadcom promised to reform VMware so it enables better hybrid clouds. Will it deliver?
VMware Explore It needs to – Virtzilla's customers, allies, and enemies are all pondering off-ramps and trying to lure unhappy users
VMware Explore26 Aug 2024 | 8
Open Compute Project seeks standard for concrete, with help from AWS, Google, Meta, and Microsoft
There's a lot of CO2 in datacenters, and Big Tech has promised to get to net zero
Cloud Infrastructure Month23 Aug 2024 | 10
Biting the hand that feeds IT
