23 Sep

‘Cybersecurity issue’ takes MoneyGram offline for three days – and counting

A “cybersecurity issue” has shut down MoneyGram’s systems and payment services since Friday, and the fintech leader has yet to update customers as to when

Author rabih
23 Sep

Necro malware continues to haunt side-loaders of dodgy Android mods

The Necro trojan is once again making a move against Android users, with up to eleven million individuals thought to be exposed to infected apps.

Author rabih
23 Sep

US proposes ban on Chinese, Russian connected car tech over security fears

The US Commerce Department has decided not to wait for the inevitable, and today announced plans that would ban connected vehicle technology – and vehicles

Author rabih
23 Sep

So how’s Microsoft’s Secure Future Initiative going?

Microsoft took a victory lap today, touting the 34,000 full-time engineers it has dedicated to its Secure Future Initiative (SFI) since it launched almost a

Author rabih
23 Sep

UPS supplier’s password policy flip-flops from unlimited, to 32, then 64 characters

A major IT hardware manufacturer is correcting a recent security update after customers complained of a password character limit being introduced when there previously wasn’t

Author rabih
23 Sep

Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town

Attackers are using Splinter, a new post-exploitation tool, to wreak havoc in victims’ IT environments after initial infiltration, utilizing capabilities such as executing Windows commands,

Author rabih
23 Sep

CISA boss: Makers of insecure software are enablers of the real villains

Software suppliers who ship buggy, insecure code are the true baddies in the cyber crime story, Jen Easterly, boss of the US government’s Cybersecurity and

Author rabih
23 Sep

Apple’s latest macOS release is breaking security software, network connections

Infosec In Brief Something’s wrong with macOS Sequoia, and it’s breaking security software installed on some updated Apple systems. Sequoia, aka macOS 15, was released

Author rabih
20 Sep

US indicts two over socially engineered $230M+ crypto heist

Two individuals are in cuffs and facing serious charges in connection to a major theft of cryptocurrency worth more than $230 million from a single

Author rabih
20 Sep

Ivanti patches exploited admin command execution flaw

The US Cybersecurity and Infrastructure Security Agency (CISA) just added the latest Ivanti weakness to its Known Exploited Vulnerability (KEV) catalog, a situation sure to

Author rabih
20 Sep

FBI, CISA warning over false claims of hacked voter data – Week in security with Tony Anscombe

Video With just weeks to go before the US presidential election, the FBI and the CISA are warning about attempts to sow distrust in the

Author rabih
20 Sep

Cybercrooks strut away with haute couture Harvey Nichols data

High-end British department store Harvey Nichols is writing to customers to confirm some of their data was exposed in a recent cyberattack. Customers have already

Author rabih
20 Sep

CISA boss: Makers of insecure software are the real cyber villains

Software developers who ship buggy, insecure code are the real villains in the cyber crime story, Jen Easterly, boss of the US government’s Cybersecurity and

Author rabih
19 Sep

Valencia Ransomware explodes on the scene, claims California city, fashion giant, more as victims

A California city, a Spanish fashion giant, an Indian paper manufacturer, and two pharmaceutical companies are the alleged victims of what looks like a new

Author rabih
19 Sep

No way? Big Tech’s ‘lucrative surveillance’ of everyone is terrible for privacy, freedom

Buried beneath the endless feeds and attention-grabbing videos of the modern internet is a network of data harvesting and sale that’s perhaps far more vast

Author rabih
19 Sep

Iran’s cyber-goons emailed stolen Trump info to Team Biden – which ignored them

The Iranian cyber snoops who stole files from the Trump campaign, with the intention of leaking those documents, tried to slip the data to the

Author rabih
19 Sep

1 in 10 orgs dumping their security vendors after CrowdStrike outage

Germany’s Federal Office for Information Security (BSI) says one in ten organizations in the country affected by CrowdStrike’s outage in July are dropping their current

Author rabih
19 Sep

Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations

Security researchers say that thousands of companies are potentially leaking secrets from their internal knowledge base (KB) articles via ServiceNow misconfigurations. Aaron Costello and Dan

Author rabih
Load moreLoadingAll items loaded