Security News

How two brothers allegedly swiped $25M in a 12-second Ethereum heist
2024-05-18 06:29

Feds scoff at blockchain integrity while software bug said to have been at heart of the matter The US Department of Justice has booked two brothers on allegations that they exploited open source...

Aussie cops probe MediSecure's 'large-scale ransomware data breach'
2024-05-17 23:31

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

The Week in Ransomware - May 17th 2024 - Mailbombing is back
2024-05-17 21:30

After the Conti suffered a massive data breach, the ransomware operation shut down and its members splintered into different groups or launched their own ransomware operations. Ransomware phishing attacks also took front stage this week, with the Phorpiex botnet sending millions of emails that led to LockBit Black ransomware attacks, with the encryptor believed to have been created using LockBit's leaked source code.

Friday Squid Blogging: Emotional Support Squid
2024-05-17 21:04

They're emotional support squid because they're large, and cuddly, but also cheerfully bright and derpy. They make great neck pillows for travelling, and, on a more personal note, when my mum was sick in the hospital I gave her one and she said it brought her "Great comfort" to have her squid tucked up beside her and not be a nuisance while she was sleeping.

Microsoft to start enforcing Azure multi-factor authentication in July
2024-05-17 18:53

Starting in July, Microsoft will begin gradually enforcing multi-factor authentication for all users signing into Azure to administer resources. "Service principals, managed identities, workload identities, and similar token-based accounts used for automation are excluded. Microsoft is still gathering customer input for certain scenarios such as break-glass accounts and other special recovery processes," explained Azure product manager Naj Shahid.

Three cuffed for 'helping North Koreans' secure remote IT jobs in America
2024-05-17 18:34

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking
2024-05-17 17:20

The cryptojacking group known as Kinsing has demonstrated its ability to continuously evolve and adapt, proving to be a persistent threat by swiftly integrating newly disclosed vulnerabilities to...

SEC: Financial orgs have 30 days to send data breach notifications
2024-05-17 16:13

The Securities and Exchange Commission has adopted amendments to Regulation S-P that require certain financial institutions to disclose data breach incidents to impacted individuals within 30 days of discovery. Notify affected individuals within 30 days if their sensitive information is, or is likely to be, accessed or used without authorization, detailing the incident, breached data, and protective measures taken.

US arrests suspects behind $73M ‘pig butchering’ laundering scheme
2024-05-17 15:57

The U.S. Department of Justice charged two suspects for allegedly leading a crime ring that laundered at least $73 million from cryptocurrency investment scams, also known as "Pig butchering." In pig butchering scams, criminals approach targets using various messaging apps, dating platforms, or social media platforms to build trust and introduce them to investment schemes that help them drain the victims' cryptocurrency wallets.

WebTPA data breach impacts 2.4 million insurance policyholders
2024-05-17 14:45

The WebTPA Employer Services data breach disclosed earlier this month is impacting close to 2.5 million individuals, the U.S. Department of Health and Human Services notes. A recent update on the U.S. Department of Health and Human Services data breach portal shows that the number of affected individuals is 2,429,175.