Uncategorized

LA County Superior Court closes doors to reboot justice after ransomware attack 2024-07-22 at 20:17 By Jessica Lyons Some rest for the wicked? Los Angeles County Superior Court, the largest trial court in America, closed all 36 of its courthouses today following an “unprecedented” ransomware attack on Friday.… This article is an excerpt from The […]

Cybercrooks crafting solo careers in wake of ransomware takedowns 2024-07-22 at 19:47 By Connor Jones More baddies go it alone as trust in big gangs withers, claims Europol A fresh report from Europol suggests that the recent disruption of ransomware-as-a-service (RaaS) groups is fragmenting the threat landscape, making it more difficult to track.… This article

A majority of the SEC lawsuit against SolarWinds has been dismissed 2024-07-22 at 19:16 By A judge has dismissed a majority of the SEC lawsuit against SolarWinds. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Engineers fix ESA’s Gaia observatory from 1.5 million kilometers away 2024-07-22 at 18:46 By Richard Speed And you thought rolling back a borked update on a server down the hall was hard? The European Space Agency (ESA) has shared the story of how engineers brought a mission back from the brink after a micrometeoroid strike,

Cloudy with a Chance of Hackers: Protecting Critical Cloud Workloads 2024-07-22 at 18:16 By David Broggy If you’ve been following along with David’s posts, you’ll have noticed a structure to the topics: Part I: The Plan, Part II: The Execution and now we move into Part III: Security Operations. Things get a bit more exciting

Websites clamp down as creepy AI crawlers sneak around for snippets 2024-07-22 at 17:31 By Matthew Connatser Shrinks training pool, but hurts services like the Internet Archive The internet is becoming significantly more hostile to webpage crawlers, especially those operated for the sake of generative AI, researchers say.… This article is an excerpt from The

Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking 2024-07-22 at 17:16 By The relationship between various TDSs and DNS associated with Vigorish Viper and the final landing experience for the user A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an advanced “technology

Oracle coughs up $115M to make privacy case go away 2024-07-22 at 17:01 By Lindsay Clark Big Red agrees not to capture personal details after two-year class action Oracle has agreed to cough up $115 million to settle a two-year class action lawsuit that alleged misuse of user data.… This article is an excerpt from

EU gave CrowdStrike the keys to the Windows kernel, claims Microsoft 2024-07-22 at 16:01 By Richard Speed Was a 2009 directive on interoperability to blame? Did the EU force Microsoft to let third parties like CrowdStrike run riot in the Windows kernel as a result of a 2009 undertaking? This is the implication being peddled

PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing 2024-07-22 at 16:01 By A Latin America (LATAM)-based financially motivated actor codenamed FLUXROOT has been observed leveraging Google Cloud serverless projects to orchestrate credential phishing activity, highlighting the abuse of the cloud computing model for malicious purposes. “Serverless architectures are attractive to developers and

Two Russians sanctioned over cyberattacks on US critical infrastructure 2024-07-22 at 15:16 By Connor Jones Supposed hacktivist efforts previously linked to the Kremlin’s GRU Flying under the radar on Clownstrike day last week, two members of the Cyber Army of Russia Reborn (CARR) hacktivist crew are the latest additions to the US sanctions list.… This

New honeypot techniques for addressing targeted attacks 2024-07-22 at 15:16 By Defenders should define their honeypot strategy by identifying attack risks and intelligence gaps.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

MSPs & MSSPs: How to Increase Engagement with Your Cybersecurity Clients Through vCISO Reporting 2024-07-22 at 15:01 By As a vCISO, you are responsible for your client’s cybersecurity strategy and risk governance. This incorporates multiple disciplines, from research to execution to reporting. Recently, we published a comprehensive playbook for vCISOs, “Your First 100 Days as

How to Set up an Automated SMS Analysis Service with AI in Tines 2024-07-22 at 15:01 By The opportunities to use AI in workflow automation are many and varied, but one of the simplest ways to use AI to save time and enhance your organization’s security posture is by building an automated SMS analysis service.

The Clacktop: A Thinkpad Yoga with a mechanical keyboard 2024-07-22 at 14:33 By Liam Proven Impressively home-made, this is the sort of laptop we wish we could buy new A Thinkpad Yoga, modded with a mechanical keyboard, may serve as a wake-up call to both Lenovo and Framework.… This article is an excerpt from The

Unit4 ends support for research costing tool used to plan the Covid vaccine 2024-07-22 at 13:47 By Lindsay Clark UK university users face migration path following plan to withdraw support for product some build £1M solutions around Exclusive  Software used to cost the University of Oxford’s Covid vaccine research has become the subject of an

Microsoft’s CISPE settlement includes a suspension of audits for members 2024-07-22 at 12:47 By Richard Speed Cloud group companies free of Redmond’s compliance cops for 2 years in return for ditching EC antitrust complaint EXCLUSIVE  Part of Microsoft’s settlement with a bunch of cloud providers in Europe to make an antitrust complaint disappear is a

Serco appoints former GDS leader Tom Read to digital leadership role 2024-07-22 at 11:46 By Lindsay Clark Read also served at UK’s MoJ, where outsourcer paid fine over electronic tagging fiasco UK outsourcing provider Serco has appointed Tom Read, head of central government’s digital agency, to the role of group chief digital and technology officer.…

SocGholish Malware Exploits BOINC Project for Covert Cyberattacks 2024-07-22 at 10:46 By The JavaScript downloader malware known as SocGholish (aka FakeUpdates) is being used to deliver a remote access trojan called AsyncRAT as well as a legitimate open-source project called BOINC. BOINC, short for Berkeley Open Infrastructure Network Computing Client, is an open-source “volunteer computing”