CISA, FBI warn healthcare organizations of Daixin ransomware
Gang was behind the attack on OakBend Medical Center
Cyber-crime24 Oct 2022 |
Security
Google says slap some GUAC on your software supply chain
In brief Also: Iranian election hackers are back, the TSA gets regulatory on train cybersecurity, and more
Security24 Oct 2022 | 1
A year of SANS security summits
Sponsored Post A mixture of free online events and in-person conferences that put you at the heart of the cyber security industry
Sponsored Post
Linux: Here, there and everywhere
Webinar How Red Hat turns an open source entity into overt enterprise security
Webinar
Could you not? BlackByte ransomware slinger twists the knife with data stealer
Your IT storage may go from terabytes to Exbytes
Cyber-crime24 Oct 2022 | 3
Hacktivists say they stole 100,000 emails from Iran's nuclear energy agency
Tehran laughs it off as foreign psyop or media stunt. Just don't remind them about Stuxnet, OK?
Cyber-crime24 Oct 2022 | 1
As Russia wages disinfo war, Ukraine's cyber chief calls for global anti-fake news fight
'Completely new approaches should be developed to prevent the influence of this propaganda'
Cybersecurity Month22 Oct 2022 | 45
Good news, URSNIF no longer a banking trojan. Bad news, it's now a backdoor
And one designed to slip ransomware and data-stealing code onto infected machines
Research21 Oct 2022 | 1
Oops, web trackers may have leaked 3 million patients' info
Scream with us: Aaaaaa-AAH
CSO20 Oct 2022 | 33
Cloud migration and the cyber skills shortage
Protecting applications off prem demands a fresh wave of security talent
Sponsored Post
BlueBleed: Microsoft customer data leak claimed to be 'one of the largest' in years
SOCRadar says sensitive info from 150,000 orgs was exposed, Redmond disputes findings
Cybersecurity Month20 Oct 2022 | 4
President Biden still wants his cybersecurity labels on those smart devices
May follow Finland and Germany in adopting Singapore's standard
Security20 Oct 2022 | 19
Confidentiality in the cloud: the delicate bargain of trust
How hardware-assisted data security can boost the integrity of sensitive data sets stored in cloud environments
Sponsored Feature
Health insurer's infosec incident diagnosis goes from 'take a chill pill' to emergency ward
Updated Australia's Medibank says it's been shown stolen data that includes details of treatments administered to customers
Cyber-crime20 Oct 2022 | 11
CISA warns of security holes in industrial Advantech, Hitachi kit
When we concede that everything has bugs, we wish it wasn't quite everything
Patches20 Oct 2022 | 2
Cost of a health insurance security breach? NY watchdogs say it's $4.5m
Hundreds of thousands of people's sensitive info poorly protected
CSO19 Oct 2022 | 1
Verizon prepaid accounts hijacked by SIM swap crooks
Nightmare for those with one-time security codes texted to their phones
Cybersecurity Month19 Oct 2022 | 7
Millennials, Gen Z actually suck at workplace security
OK, boomer – how do I turn off cookies?
CSO19 Oct 2022 | 75
So, the US, China, and Russia walk into an infosec conference
Suffice to say things got a little awkward
CSO19 Oct 2022 | 3
Tear in Microsoft Azure Service Fabric can give attackers full admin privileges
Orca Security disclosed the bug, and older versions remain vulnerable
Research19 Oct 2022 |
Popular
As Russia wages disinfo war, Ukraine's cyber chief calls for global anti-fake news fight
'Completely new approaches should be developed to prevent the influence of this propaganda'
20 years on, physicists are still figuring out anomaly in proton experiment
Anyone got the technical reference manual for this simulation we're living in?
Firefox points the way to eradicating one of the rudest words online: PDF
Comment The ghosts of dead trees haunt us still
Data loss prevention emergency tactic: keep your finger on the power button for the foreseeable future
Who, Me? When switches really were switches, one reader managed to avert a potential disaster
To build a better quantum computer, look into a black hole, says professor Brian Cox
The black hole information paradox and quantum error correction codes overlap almost completely
Toyota R&D wheels Fujitsu's pseudo-quantum tech out onto vehicle assembly floor
At least they didn't call it another DPU
Hacktivists say they stole 100,000 emails from Iran's nuclear energy agency
Tehran laughs it off as foreign psyop or media stunt. Just don't remind them about Stuxnet, OK?
Human-replacing AI startups reach $1bn unicorn status
In brief Plus: Meta builds speech-to-speech system to translate Hokkien, Waymo expands to LA, and more
Most Metaverse business projects will be dead by 2025
Canalys Channels Forum McKinsey forecasts market value of $5 trillion by 2030, Citi says up to $13 trillion, but Canalys doesn't agree
Microsoft's Chinese website reveals free PC Manager utility
Yet more nagware to use the Edge browser, plus some usefully re-imagined tools liberated from the maze of the Settings menu
STORIES
The infinite beauty of the hive mind
Looking at the future of crowdsourced security
Webinar
Germany stands down cyber boss over Russian ties
Involvement with lobby group that welcomed Putin's pals presses buttons
Security19 Oct 2022 | 14
FBI: Looking for Biden's student loan forgiveness? Watch out for these scams
You really think someone would do that? Just go on the internet and steal identities?
Cyber-crime19 Oct 2022 | 8
Build some flexibility into your cyber learning
Training should bend around the many moving parts in your daily schedule, not the other way around.
Sponsored Post
'Fully undetectable' Windows backdoor gets detected
SafeBreach supposedly spots somewhat stealthy subversive software
Cybersecurity Month18 Oct 2022 | 21
NSA urges enterprises to watch China, Taiwan tensions
Have you thought about your supply chains, partnerships, and how far they reach?
Cybersecurity Month18 Oct 2022 | 2
Putting on the Red Hat
Keeping on top of Linux enterprise security requirements
Webinar
Upstart Ransom Cartel linked to REvil veterans
Lesser of two REvils? There’s a relationship, say infosec bods, but not enough to say one evolved into the other
Cyber-crime18 Oct 2022 | 4
Ever considered using Confidential Computing to beef up cloud data protection?
This is your chance to let us know, so we can report back to you
Sponsored Feature
Imagine surviving a wiper attack only for ransomware to scramble your restored files
Then again, imagine being invaded by Russia
Cybersecurity Month18 Oct 2022 | 4
Japanese giants to offer security-as-a-service for connected cars
NTT Communications and Toyota’s parts maker Denso plan a ‘Security Operation Centre for Vehicles’
Security18 Oct 2022 | 20
Cops swoop after crooks use wireless keyfob hack to steal cars
Hotwiring is so 2021
Cyber-crime18 Oct 2022 | 115
Ex-WSJ reporter says he was framed in elaborate 'hack-and-smear' operation
Wild story of a multinational law firm, cyber-mercenaries, a sheikh, and more
Cybersecurity Month18 Oct 2022 | 12
Interpol busts global 'Black Axe' cyber-fraud suspects
75 collars felt, $1.2m seized in bid to cut off crime network’s financial lifeline
Cyber-crime17 Oct 2022 | 3
China-linked Budworm burrows hole in US legislature systems
In brief Also, Senator Warren says banks need to grow the Zelle up, an AirTag does some good – if you’re a Democrat, and more
Security17 Oct 2022 | 7
Phishing works so well crims won't bother with deepfakes, says Sophos chap
People reveal passwords if you ask nicely, so AI panic is overblown
Research17 Oct 2022 | 15
Xi Jinping hails 'improved cyber ecology', says state to direct strategic tech research
Asia In Brief Samsung and TSMC hit with chip tech patent suit; Ant Group's DB hits AWS; PayPal drops Hong Kong rights group; and more
Security16 Oct 2022 | 5
Infosec still (mostly) a boys club
Feature Women who do join get paid and promoted less, leave faster. What can be done to stop that?
Cybersecurity Month15 Oct 2022 | 104
'Baby Al Capone' to pay $22m to SIM-swap crypto-heist victim
Too young to drive, old enough to bribe AT&T staff, apparently
Cyber-crime15 Oct 2022 | 18
FYI: Microsoft Office 365 Message Encryption relies on insecure block cipher
Redmond says OME isn't supposed to be used for security, just for something else
Cybersecurity Month14 Oct 2022 | 13
Store credit card numbers in a debug log, lose millions of accounts. Cost? $1.9m
That's roughly 300,000 Shein crop tops
Cyber-crime14 Oct 2022 | 4
Just how critical is data sovereignty?
Answering our poll questions will give us a clue
Sponsored Feature
LockBit 3.0 malware forced NHS tech supplier to shut down hosted sites
Managed software provider Advanced admits some customer data 'exfiltrated' in August ransomware attack
Cyber-crime14 Oct 2022 | 2
India set to extend deadline for absurd infosec reporting requirements
60 days becomes five months and counting, without any indication government can process or learn from flood of trivial incident reports
Security14 Oct 2022 | 6
Mormon Church IT ransacked, data stolen by 'state-sponsored' cyber-thieves
Don't get your underwear in a twist
Cyber-crime14 Oct 2022 | 54
Banks face their 'darkest hour' as malware steps up, maker of antivirus says
Interview When I saw it, I had to reverse engineer it, Kaspersky's lead security researcher tells us
Cybersecurity Month13 Oct 2022 | 17
Insurer Medibank hit by targeted cyberattack
Hot on heels of Optus and Dialog breaches, criminals turn sights to insurance sector
Cyber-crime13 Oct 2022 | 1
Get ready to defend your data against cyber warfare
Hear intelligence agents and security experts discuss cyber warfare and resilience in a morning of virtual talks
Sponsored Post
Financial watchdogs want to know what traders are talking about on WhatsApp
Keen interest in messaging platform follows $2 billion fines in US
Security13 Oct 2022 | 29
Scanning phones to detect child abuse evidence is harmful, 'magical' thinking
Exclusive Security expert challenges claim that bypassing encryption is essential to protecting kids
Cybersecurity Month13 Oct 2022 | 140
Prison inmate accused of orchestrating $11M fraud using cell cellphone
Judge rejects defense effort to toss warrantless device search on privacy grounds
Security13 Oct 2022 | 29
US election workers slammed with phishing, malware-stuffed emails
It's almost like there's some midterms coming up
Cybersecurity Month12 Oct 2022 | 6
Hospital giant's IT still poorly a week after suspected ransomware infection
Updated Insiders tell of struggle to access patient info, meds without working computers
Cybersecurity Month12 Oct 2022 | 10
Microsoft tries again to ignite interest in DevOps cloud security
Ignite Identity governance and SOCs also on the menu
Security12 Oct 2022 | 3
How Wi-Fi spy drones snooped on financial firm
Check your rooftops: Flying gear caught carrying network-intrusion kit
Cyber-crime12 Oct 2022 | 35
Crypto exchange Bittrex coughs up $53m to end claims of US sanctions busting
Feds also said the biz sucked at policing transactions for suspicious activity – as if!
Cyber-crime11 Oct 2022 | 12
It’s Patch Tuesday and still no fix for ProxyNotShell Microsoft Exchange holes
Patch Tuesday And for bonus points, there's a Windows flaw under active exploit
Patches11 Oct 2022 | 21
China could use Digital Yuan to swerve Russia-style sanctions
GCHQ spy boss talks up threat of east's tech dominance, says Putin has 'badly misjudged' Ukraine attack
Security11 Oct 2022 | 27
If you're wondering why Google blew $5b on Mandiant, this may shed some light
GCN Automating infosec knowhow, essentially
Security11 Oct 2022 | 7
Fortinet warns of critical flaw in its security appliance OSes, admin panels
Naturally, they're already under attack – so you know what to do next
Patches11 Oct 2022 | 15
Can IAM help save on cyber insurance?
Demonstrating a robust defense can help underwrite cyber risk for customers and providers, says One Identity
Sponsored Feature
Optus data breach prompts pincer movement of twin regulatory probes
Data retention requirements to be considered alongside infosec failings
Security11 Oct 2022 | 4
Toyota dev left key to customer info on public GitHub page for five years
'Oh what a feeling' when your contractor leaks site source code
Cybersecurity Month11 Oct 2022 | 8
Pro-Putin goons claim responsibility for blowing US airport websites offline
Updated How's that boot taste?
Security10 Oct 2022 | 27
Intel Alder Lake BIOS code leak may contain vital secrets
Gurus say source includes secret hardware info, private signing key for Boot Guard protection
Security10 Oct 2022 | 13
Red Hat backs CNCF project, spills TEE support over Kubernetes
Keeping the contents of your clusters secure from whoever's hosting them
Security10 Oct 2022 |
It’s 2022 and netizens are only now getting serious about cybersecurity
US folks start to get the message about protecting themselves online
Cybersecurity Month10 Oct 2022 | 12
Singtel confirms digital burglary at Dialog subsidiary
Second of Singapore telco's Australian businesses to be prised open by criminals in weeks
Cyber-crime10 Oct 2022 |
Criminal multitool LilithBot arrives on malware-as-a-service scene
Bespoke botnet up for grabs from outfit praised for, er, customer service
Research10 Oct 2022 | 1
How do you protect your online systems? Cultivate an insider threat
Opinion Challenge your people to try to break into your systems, and see how interesting life gets for your colleagues
Security10 Oct 2022 | 28
Mastercard moves to protect 'risky and frisky' crypto transactions
Expands into a sector so toxic many won't touch it
Security10 Oct 2022 | 17
That thing to help protect internet traffic from hijacking? Here's how to break it
RPKI is supposed to verify network routes. Cyber-researchers suggest ways to potentially defeat it
Cybersecurity Month09 Oct 2022 |
When are we gonna stop calling it ransomware? It's just data kidnapping now
Comment It's not like the good old days with iffy cryptography and begging for keys
Cybersecurity Month09 Oct 2022 | 20
Biden's Privacy Shield 2.0 order may not satisfy Europe
In brief Also, Albania almost called in NATO over cyber attacks, and Facebook warns of account-stealing mobile apps
Security08 Oct 2022 | 20
Make your neighbor think their house is haunted by blinking their Ikea smart bulbs
Radio comms vulnerabilities detailed
Patches08 Oct 2022 | 54
Binance robbed of $600 million in crypto-tokens
How's your day going?
Cyber-crime07 Oct 2022 | 57
Utility security is so bad, US DoE offers rate cuts to improve it
New hardware? Consultants? You tell us because your infosec is off the grid
Cyber-crime07 Oct 2022 | 7
Loads of PostgreSQL systems are sitting on the internet without SSL encryption
They probably shouldn't be connected in the first place, says database expert
Research07 Oct 2022 | 20
Hardening data security in the cloud
How Intel’s SGX hardware helps safeguard applications in multi-tenant environments
Sponsored Feature
Top of the Pops: US authorities list the 20 hottest vulns that China's hackers love to hit
Microsoft has four entries on list of shame, Log4j tops the chart
Cybersecurity Month07 Oct 2022 | 4
Lloyd's of London cuts off network after dodgy activity detected
Updated Is it Putin? Is it the Norks? Is it a bored teenager? Roll the dice
Cyber-crime07 Oct 2022 | 11
Huge nonprofit hospital network suffers IT meltdown after 'security incident'
Ambulances diverted, patient records frozen, rhymes with handsome wear
Cyber-crime06 Oct 2022 | 18
Papa John's sued for 'wiretap' spying on website mouse clicks, keystrokes
When the tracking hits your eye like a big pizza pie, that's a priori
Security06 Oct 2022 | 27
Foreign spies hijacking US mid-terms? FBI, CISA are cool as cucumbers about it
I think we can handle one little Russia. We sent two units, they're bringing any attempts down now
Cybersecurity Month06 Oct 2022 | 40
South Korea cancels passport of Terraform Lab's Do Kwon
Whereabouts of wanted cryptobro unknown, but he's reliably on Twitter
Cyber-crime06 Oct 2022 | 1
Australian Federal Police arrest man suspected of exploiting Optus cyberattack
Customers were allegedly sent texts demanding $1,300 or face having ID used in financial crime
Security06 Oct 2022 | 1
Learning from real life situations
How about some cyber security education that’s actually delivered by people with genuine everyday experience?
Sponsored Post
China upgrades Great Firewall to defeat censor-beating TLS tools
Just in time to ensure nobody can disagree that giving Xi five more years as president is the best idea ever
Cybersecurity Month06 Oct 2022 | 8
Former Uber CSO convicted for covering up massive 2016 data theft
Passing off a ransom payment as a bug bounty? That's obstruction of justice
Cyber-crime06 Oct 2022 | 14
NetWalker ransomware scumbag jailed for 20 years
And note to his crime pals – he said he would sing like a canary
Cyber-crime05 Oct 2022 | 6
Cyber-snoops broke into US military contractor, stole data, hid for months
Tell us it’s Russia without telling us it’s Russia
Cybersecurity Month05 Oct 2022 | 14
Modified version of Tor Browser spies on Chinese users
Patiently gathers data that can be used to identify the victims, says Kaspersky
Security05 Oct 2022 | 7
DoJ ‘very disappointed’ with probation sentence for Capital One hacker Paige Thompson
‘This is not what justice looks like’ says official on sanction for leak of 100 million records
Cyber-crime05 Oct 2022 | 40
All your identity needs fulfilled
How to build an environment of trust and enhance customer experience
Video
No Shangri-La for you: Top hotel chain confirms data leak
In Xanadu did Kubla Khan a stately pleasure-dome decree
Security05 Oct 2022 | 8
Uncle Sam orders federal agencies to step up scans for govt IT security holes
Good time to be selling automation tools
Cybersecurity Month04 Oct 2022 | 2
Microsoft: Watch out for password spray attacks – especially you, Basic Auth
Exchange Online users should have authentication policies in place
CSO04 Oct 2022 | 7
Japanese sushi chain boss resigns amid accusation of improper data access
Data theft stinks, says victim. Alleged perp claims he's getting a raw deal
Cyber-crime04 Oct 2022 | 15
Giveaways for every security professional
Don’t chuck money away before you’ve checked SANS free educational content
Sponsored Post
Atlassian, Microsoft bugs on CISA’s must-patch list after exploitation spree
Some days, security just feels like a total illusion. OK, most days...
Patches04 Oct 2022 | 7
