cyber-crime Attackers exploit legitimate mailing channels to demand crypto wallet backups

cyber-crime Stolen funds bought mansions, private jets, and supercars – now he faces up to 20 years

cyber-crime Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion

security Phishers find a new use for invisible Unicode tag characters

Security McKesson admits breach as ShinyHunters demands $55.2M

CYBER-CRIME It's 'built to be operated by a human with no technical background'

Security 'These are test runs for a larger-scale attack'

Security No timeline to restore IT systems as probe remains ongoing

Security No risk to wider energy system, government tells The Reg

cyber-crime Attackers took a look at an employee's identity dashboard, but security firm says that's as far as they got

cyber-crime Hackers spent four days inside the org's cloud platforms after apparently talking their way in

PATCHES Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf

cybercrime Toronto org says it wasn’t the only one to be affected by the third-party software vulnerability

SECURITY Malicious updates turned routine builds into a delivery system for infostealer malware

cyber-crime Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication

CYBER-CRIME Redmond says the cloud identity bug is already fixed

CYBER-CRIME Because apparently even ransomware gangs can't trust the people they do business with

cyber-crime Unknown parties know where you stayed last summer, down under, across 120 Quest properties

SECURITY McDonald's, Vodafone, TCS, Kyndryl, and others named as researchers point to compromised credentials

CYBER-CRIME Another one bites the dust

CYBER-CRIME Custom tools harvested whatever over-permissioned guest accounts would surrender

CYBER-CRIME Exploit Wednesday's back, baby

cyber-crime Social engineering and malware combine to enable financial fraud before banks have time to act

security Newly minted RaaS crew breaks in through using internet-facing kit via known Fortinet flaws, then steals and scrambles data

cyber-crime Valve, Bol, ING, Ajax, and others affected as pwnage disrupts eight European warehouses

Security Calling all defenders

CYBER-CRIME Cancer diagnostics breach spills personal and health info as extortion crew says healthcare giant ‘should’ve paid the ransom’

security Unlimited Technology Systems says names, Social Security numbers, diagnoses, and insurance details may have been swiped

security A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA

security CrowdStrike tracks 89% surge in machine-assisted activity as patch windows shrink to 48 hours

CYBER-CRIME History suggests this was not wise

cyber-crime APUC investigating after criminals claim historical data theft

cyber-crime Researchers say Sapphire Sleet socially engineered maintainers before publishing malicious updates through trusted accounts

Security Stop the spread (of online recruiting and propaganda)

security Plus dozens of PoCs in the public domain

CYBER-CRIME Chinese open-weight model GLM 5.2 happily obliged

cyber-crime HIBP claims leaked info includes bank account numbers, payout histories, and personal details

CYBER-CRIME No use crying over spilled milk when US plants can't bottle it in the first place

cyber-crime Newly documented stealer ClickLock comes for the more trusting Mac user with spot of social engineering

cyber-crime Sentencing bookends the biggest cybercrime conviction in UK history

cyber-crime It’s possible to leak PII describing 5.7 million people without breaching privacy rules

CYBER-CRIME ZEGO-TVZ says the financial fallout from a March cyberattack left shutting its doors as the only option

cyber-crime Leaked negotiations spill the tea

security Consulting giant says it has 'remediated ... source' after crook claims to offer source code, keys, and cloud creds for sale

Security Proofpoint researcher tells The Reg: 'We estimate the total volume of targets would be a few dozen'

cyber-crime Along with other telemetry, Windows GDID makes online activity more traceable

security Dog-eat-dog world for credential-stealing attackers

SECURITY Greek lawsuit comes as rights campaigners lobby the EU to take firmer stance on spyware abuses

SECURITY Greek lawsuit comes as rights campaigners lobby the EU to take firmer stance on spyware abuses

Cybercrime Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping EtherRAT trojan

Security Financial institutions are putting their clients at risk in the name of convenience.

Cybercrime Left hand, meet right hand

cyber-crime Attackers appear to have reverse-engineered Big Red's patch

cyber-crime It's a 'complete BEC operations environment,' Talos researcher says

Security At least two vulnerabilities are already under attack

security Researchers warn many AI coding assistants now execute commands from project configurations

Cyber-Crime Former employee accuses company of prioritizing pending IPO over client security

security 200+ C2 servers linked to StealC and Amadey shut down

Cyber-Crime Five ISPs and plenty of users await their fate

Security As yet another extortion crew Icarus exploits Salesforce-linked integrations

security Severe weather event alert platform buzzed devices across the country with the word 'misanthropy'

cyber-crime Latest Interpol review shows how scams continue to dominate, and AI-enabled attackers prove too hot to handle for cash-strapped regions

CYBER-CRIME Why are you even reading this?! Rotate your passwords!!

Security Updated at the time? No sweat. Check those logs, though

Cyber-crime 15-year-old among six arrested after Dutch cops target suspected bank fraud call center

CYBER-CRIME Bitter harvest for Australia's Mackay Sugar, attacked in peak cane crushing season

Security All have patches, so make sure you upgrade to a fixed version

Cyber-crime Custom malware routed communications through legitimate Microsoft services, making malicious activity look like routine corporate collaboration

CYBER-CRIME Attackers used social engineering to access third-party business apps and steal patient information

cyber-crime More reasons to love social media and AI

CYBER-CRIME Joins the ranks of Nottingham Uni and 100 other unnamed victims

Security University of Nottingham is first of many, Shiny tells The Reg

CYBER-CRIMe Great Marlow restricts network access while it investigates suspected infection

cyber-crime Crooks claim 40 GB haul as breach database pegs number of exposed email addresses at 455K

cyber-crime As if there weren't enough package poisonings to worry about

cyber-crime Two years on from ransomware attack, hospitals are still trying to identify and warn patients

cyber-crime Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7

Cyber-crime Meanwhile, 13 schools in Wales affected by separate attack

cyber-crime When 'Chatty Spider' morphs into tech services cosplay spider

CYBER-CRIME A familiar tactic popularized by chaotic crime crew Lapsus$

cyber-crime Fresh penalties secured after initial prison, community service sentences for RAC double act

cyber-crime You don't infect anyone in Russia or other CIS countries

Security Hacking voting machines is so 2017. Phishing, impersonation pose the real election risks

Cyber-crime Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users

Cyber-Crime Telco giant says no sensitive data was taken, though names, addresses, phones, and emails are now out there

Cyber-Crime Travel and leisure giant was just one of many victims of the cybercrooks' crime spree this year

cyber-crime Script kiddies these days

cyber-crime Developer-targeted, supply-chain attacks all the rage these days

cyber-crime Guess they could deny the alleged intrusion … like the 2020 election results

Security Hey, Gemini, how much can we earn from one pump-and-dump cycle?

Cyber-Crime MFA? No problem, says crimeware that tricks users into handing attackers the keys to M365