Viry a Červi
Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits
Leicester City Council is finally admitting its "cyber incident" was carried out by a ransomware gang and that data was stolen, hours after the criminals forced its hand.…
When AI attacks
Sponsored Post Artificial intelligence (AI) offers enormous commercial potential but also substantial risks to data security if it is harnessed by cyber criminals intent on stealing or corrupting sensitive information for their own gain.…
Nearly 1M medical records feared stolen from City of Hope cancer centers
Nearly one million individuals' personal details, financial account information, and medical records may well have been stolen from City of Hope systems in the United States.…
Cyberattack hits Omni Hotels systems, taking out bookings, payments, door locks
Updated Omni Hotels & Resorts' computer systems have been offline since Friday due to what the American luxury hospitality chain called a "disruption."…
Security pioneer Ross Anderson dies at 67
Obituary Venerable computer scientist and information security expert Ross Anderson has died at the age of 67.…
Google bakes new cookie strategy that will leave crooks with a bad taste
Google reckons that cookie theft is a problem for users, and is seeking to address it with a mechanism to tie authentication data to a specific device, rendering any stolen cookies useless.…
Meet clickjacking's slicker cousin, 'gesture jacking,' aka 'cross window forgery'
Web browsers still struggle to prevent clickjacking, an attack technique first noted in 2008 that repurposes web page interface elements to deceive visitors.…
Microsoft slammed for lax security that led to China's cyber-raid on Exchange Online
A review of the June 2023 attack on Microsoft's Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a China-linked group called "Storm-0558" – has found that the incident would have been preventable save for Microsoft's lax infosec culture and sub-par cloud security precautions.…
Feds finally decide to do something about years-old SS7 spy holes in phone networks
The FCC appears to finally be stepping up efforts to secure decades-old flaws in American telephone networks that are allegedly being used by foreign governments and surveillance outfits to remotely spy on and monitor wireless devices.…
OWASP server blunder exposes decade of resumes
A misconfigured MediaWiki web server allowed digital snoops to access members' resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.…
Pandabuy confirms crooks nabbed data on 1.3M punters
Ecommerce platform Pandabuy has apologized after two cybercriminals were spotted hawking personal data belonging to 1.3 million of its customers.…
Microsoft warns deepfake election subversion is disturbingly easy
As hundreds of millions of voters around the globe prepare to elect their leaders this year, there's no question that trolls will try to sway the outcomes using AI, according to Clint Watts, general manager of Microsoft's Threat Analysis Center.…
Rubrik files to go public following alliance with Microsoft
Cloud security provider Rubrik has filed for an IPO on the New York Stock Exchange following a flurry of similar flotations.…
Polish officials may face criminal charges in Pegasus spyware probe
Former Polish government officials may face criminal charges following an investigation into their use of the notorious spyware Pegasus to surveil political opponents and others.…
INC Ransom claims to be behind 'cyber incident' at UK city council
The cyber skids at INC Ransom are claiming responsbility for the ongoing cybersecurity incident at Leicester City Council, according to a post caught by eagle-eyed infosec watchers.…
Happy 20th birthday Gmail, you're mostly grown up – now fix the spam
It was 20 years ago on Monday that Google unleashed Gmail on the world, and the chocolate factory is celebrating with new rules that just might, hopefully, cut down on the amount of spam users receive.…
In memoriam: Prof. Ross Anderson
Apple's GoFetch silicon security fail was down to an obsession with speed
Opinion Apple is good at security. It's good at processors. Thus GoFetch, a major security flaw in its processor architecture, is a double whammy.…
Six banks share customer info to help Singapore fight money laundering
Asia in brief Singapore's Monetary Authority on Monday launched an application, intuitively named "COllaborative Sharing of Money Laundering/TF Information & Cases" (COSMIC for short, obviously) to target money laundering and terrorism financing.…
US House of Reps tells staff: No Microsoft Copilot for you!
Staff working at the US House Of Representatives have been barred from using Microsoft's Copilot chatbot and AI productivity tools, pending the launch of a version tailored to the needs of government users.…