06 Nov

Cyberattackers stole Microlise staff data following DHL, Serco disruption

Telematics tech biz Microlise says an attack that hit its network likely did not expose customer data, although staff aren’t so lucky. “Some limited employee

Author rabih
06 Nov

China’s Volt Typhoon reportedly breached Singtel in ‘test-run’ for US telecom attacks

Chinese government cyberspies Volt Typhoon reportedly breached Singapore Telecommunications over the summer as part of their ongoing attacks against critical infrastructure operators. The digital break-in

Author rabih
06 Nov

Scumbag puts ‘stolen’ Nokia source code, SSH and RSA keys, more up for sale

IntelBroker, a notorious peddler of stolen data, claims to have pilfered source code, private keys, and other sensitive materials belonging to Nokia. In a post

Author rabih
05 Nov

Schneider Electric ransomware crew demands $125k paid in baguettes

Schneider Electric confirmed that it is investigating a breach as a ransomware group Hellcat claims to have stolen more than 40 GB of compressed data

Author rabih
05 Nov

A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years

The FBI has recovered $8 million in funds from a cryptocurrency scam that netted $47 million and devastated the Kansas city of Elkhart. In August,

Author rabih
05 Nov

Criminals open DocuSign’s Envelope API to make BEC special delivery

Business email compromise scammers are trying to up their success rate by using a DocuSign API. The Envelope: create API is designed to let users

Author rabih
05 Nov

Ongoing typosquatting campaign impersonates hundreds of popular npm packages

An ongoing typosquatting campaign is targeting developers via hundreds of popular JavaScript libraries, whose weekly downloads number in the tens of millions, to infect systems

Author rabih
05 Nov

Washington courts grapple with statewide outage after ‘unauthorized activity’

A statewide IT outage attributed to “unauthorized activity” is affecting the availability of services provided by all courts in Washington. The Washington State Administrative Office

Author rabih
05 Nov

Google claims Big Sleep ‘first’ AI to spot freshly committed security bug that fuzzing missed

Google claims one of its AI models is the first of its kind to spot a memory safety vulnerability in the wild – specifically an

Author rabih
04 Nov

Columbus, Ohio, confirms 500K people affected by Rhysida ransomware attack

The City of Columbus, Ohio, has confirmed half a million people’s data was accessed and potentially stolen when Rhysida’s ransomware raided its systems over the

Author rabih
04 Nov

Six IT contractors accused of swindling Uncle Sam out of millions

Security in brief The US Department of Justice has charged six people with two separate schemes to defraud Uncle Sam out of millions of dollars

Author rabih
04 Nov

Why the long name? Okta discloses auth bypass bug affecting 52-character usernames

In potentially bad news for those with long names and/or employers with verbose domain names, Okta spotted a security hole that could have allowed crims

Author rabih
04 Nov

Public sector cyber break-ins: Our money, our lives, our right to know

Opinion At the start of September, Transport for London was hit by a major cyber attack. TfL is the public body that moves many of

Author rabih
03 Nov

6 IT contractors arrested for defrauding Uncle Sam out of millions

in brief The US Department of Justice has charged six people with two separate schemes to defraud Uncle Sam out of millions of dollars connected

Author rabih
02 Nov

Financial institutions told to get their house in order before the next CrowdStrike strikes

The UK’s finance regulator is urging all institutions under its remit to better prepare for IT meltdowns like that of CrowdStrike in July. The Financial

Author rabih
01 Nov

UK councils bat away DDoS barrage from pro-Russia keyboard warriors

Multiple UK councils had their websites either knocked offline or were inaccessible to residents this week after pro-Russia cyber nuisances added them to a daily

Author rabih
01 Nov

Hack Nintendo’s alarm clock to show cat pics? Let’s-a-go!

A hacker who uses the handle GaryOderNichts has found a way to break into Nintendo’s recently launched Alarmo clock, and run code on the device.

Author rabih
31 Oct

Gang gobbles 15K credentials from cloud and email providers’ garbage Git configs

A criminal operation dubbed Emeraldwhale has been discovered after it dumped more than 15,000 credentials belonging to cloud service and email providers in an open

Author rabih
Load moreLoadingAll items loaded