Experts race to extract intel from Black Basta internal chat leaks
Hundreds of thousands of internal messages from the Black Basta ransomware gang were leaked by a Telegram user, prompting security researchers to bust out their
Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws
Security engineers have released a proof-of-concept exploit for four critical Ivanti Endpoint Manager bugs, giving those who haven’t already installed patches released in January extra
Thailand ready to welcome 7,000 trafficked scam call center victims back from Myanmar
Thailand is preparing to receive thousands of people rescued from scam call centers in Myanmar as the country launches a major crackdown on the pervasive
Oops, some of our customers’ Power Pages-hosted sites were exploited, says Microsoft
Microsoft has fixed a security flaw in its Power Pages website-building SaaS, after criminals got there first – and urged users to check their sites
Linux royalty backs adoption of Rust for kernel code, says its rise is inevitable
Some Linux kernel maintainers remain unconvinced that adding Rust code to the open source project is a good idea, but its VIPs are coming out
Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes
Microsoft is so concerned about security in its Copilot products for folks that it’s lifted bug bounty payments for moderate-severity vulnerabilities from nothing to a
Oops, some of our customers’ Power Pages sites were exploited, says Microsoft
Microsoft has fixed a security flaw in its Power Pages website-building SaaS, after criminals got there first – and urged users to check their sites
US minerals company says crooks broke into email and helped themselves to $500K
A NASDAQ-listed US minerals company says cybercriminals broke into its systems on Valentine’s Day and paid themselves around $500,000 – money earmarked for a vendor.
Critical flaws in Mongoose library expose MongoDB to data thieves, code execution
Security sleuths found two critical vulnerabilities in a third-party library that MongoDB relies on, which means bad guys can potentially steal data and run code.
Fake job offers target software developers with infostealers
A North Korea-aligned activity cluster tracked by ESET as DeceptiveDevelopment drains victims’ crypto wallets and steals their login details from web browsers and password managers
Two arrested after pensioner scammed out of six-figure crypto nest egg
Two men are in police custody after being arrested in connection with a July cryptocurrency fraud involving a man in his seventies. The case was
DeceptiveDevelopment targets freelance developers
Cybercriminals have been known to approach their targets under the guise of company recruiters, enticing them with fake employment offers. After all, what better time
Ghost ransomware crew continues to haunt IT depts with scarily bad infosec
The operators of Ghost ransomware continue to claim victims and score payments, but keeping the crooks at bay is possible by patching known vulnerabilities and
Medusa ransomware gang demands $2M from UK private health services provider
Exclusive HCRG Care Group, a private health and social services provider, has seemingly fallen victim to the Medusa ransomware gang, which is threatening to leak
US Army soldier linked to Snowflake extortion rampage admits breaking the law
A US Army soldier suspected of hacking AT&T and Verizon has admitted leaking online people’s private call records. Cameron John Wagenius informed a federal court
Trump’s DoD CISO pick previously faced security clearance suspension
Donald Trump’s nominee for a critical DoD cybersecurity role sports a resume that outshines many of his past picks, despite previously suspended security clearance. Katie
Check out this free automated tool that hunts for exposed AWS secrets in public repos
A free automated tool that lets anyone scan public GitHub repositories for exposed AWS credentials has been released. Before you say anything, yes, we’re pretty
Healthcare outfit that served military personnel settles allegations it faked infosec compliance for $11M
An alleged security SNAFU that occurred during the Obama administration has finally been settled under the second Trump administration. The case concerns Health Net Federal