Your ransomware nightmare just came true – now what? Feature Don't negotiate unless you must, and if so, drag it out as long as you can CSO06 Jun 2025 | 40
Uncle Sam puts $10M bounty on RedLine dev and Russia-backed cronies Any info on Maxim Rudometov and his associates? There's $$$ in it for you Cyber-crime05 Jun 2025 | 3
AT&T not sure if new customer data dump is déjà vu Re-selling info from an earlier breach? Probably. But which one? Cyber-crime05 Jun 2025 | 1
BidenCash busted as Feds nuke stolen credit card bazaar Dark web crime platform raked in $17M+ over three years of operation Cyber-crime05 Jun 2025 | 3
More than a hundred backdoored malware repos traced to single GitHub user Someone went to great lengths to prey on the next generation of cybercrooks Cyber-crime05 Jun 2025 | 12
HMRC: Crooks broke into 100k accounts, stole £43M from British taxpayer in late 2024 It’s definitely not a cyberattack though! Really! Public Sector05 Jun 2025 | 28
Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes Recompiled binaries and phone threats used to boost the pressure Cyber-crime04 Jun 2025 | 1
Ransomware scum leak patient data after disrupting chemo treatments at Kettering Literally adding insult to injury Cyber-crime04 Jun 2025 | 11
Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns Victims include hospitality, retail and education sectors Cyber-crime04 Jun 2025 | 24
Crims stole 40,000 people's data from our network, admits publisher Lee Enterprises Did somebody say ransomware? Not the newspaper group, not even to deny it Cyber-crime04 Jun 2025 | 2
‘Deliberate attack’ deletes shopping app’s AWS and GitHub resources CEO of India's KiranaPro, which brings convenience stores online, vows to name the perp Cyber-crime04 Jun 2025 | 22
You say Cozy Bear, I say Midnight Blizzard, Voodoo Bear, APT29 … Opinion Microsoft, CrowdStrike, and pals promise clarity on cybercrew naming, deliver alias salad instead Cyber-crime03 Jun 2025 | 14
Crooks fleece The North Face accounts with recycled logins Outdoorsy brand blames credential stuffing Cyber-crime03 Jun 2025 | 7
Bling slinger Cartier tells customers to be wary of phishing attacks after intrusion Nothing terribly valuable taken in data heist, though privacy a little tarnished Cyber-crime03 Jun 2025 | 6
US community bank says thieves drained customer data through third party hole Disclosure at MainStreet Bancshares comes as American finance orgs beg for looser reporting requirements Cyber-crime02 Jun 2025 | 13
Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump exclusive 'It's a high-stakes intelligence war,' analyst explains Cyber-crime31 May 2025 | 31
ConnectWise customers get mysterious warning about 'sophisticated' nation-state hack Pen tester on ScreenConnect bug: This one ‘terrifies’ me Cyber-crime30 May 2025 | 5
US medical org pays $50M+ to settle case after crims raided data and threatened to swat cancer patients Cash splashed on damages, infrastructure improvements, and fraud monitoring Cyber-crime30 May 2025 | 2
Crims defeat human intelligence with fake AI installers they poison with ransomware Take care when downloading AI freebies, researcher tells The Register Cyber-crime30 May 2025 | 7
Feds gut host behind pig butchering scams that bilked $200M from Americans Philippines company allegedly run by Chinese national has form running scams Security30 May 2025 | 14
Enterprises are getting stuck in AI pilot hell, say Chatterbox Labs execs Interview Security, not model performance, is what's stalling adoption
US infrastructure could crumble under cyberattack, ex-NSA advisor warns Infosec in Brief PLUS: Doxxers jailed; Botnets bounce back; CISA questioned over app-vetting program closure; And more
Chap claims Atari 2600 'absolutely wrecked' ChatGPT at chess 1.19MHz eight-bit CPU trounced modern GPUs – can you do better with your retro-tech?
China's asteroid-and-comet hunter probe unfurls a 'solar wing' Asia in brief Plus: Hitachi turns graybeards into AI agents, Tiananmen anniversary censorship, AWS in Taiwan, and more!
Field support chap got married – which took down a mainframe Who, Me? If you like it to keep working, don’t put a ring on it
Chinese spy crew appears to be preparing for conflict by backdooring 75+ critical orgs SentinelOne discovered the campaign when they tried to hit the security vendor's own servers
Blocking stolen phones from the cloud can be done, should be done, won't be done Opinion Big tech can't be bothered to fight crime. It can barely be bothered even to say so
BT won't budge over pay hike for manager grade employees Prospect union threatens to up campaign, raise dispute with CEO
Seagate still HAMRing away at the 100 TB disk drive decades later Feature The journey to mass production has been extraordinarily difficult – will it be worth it?
Alphawave Semi swallowed in Qualcomm's $2.4B connectivity conquest Another tech biz to be Yanked from London Stock Exchange
Why is China deep in US networks? 'They're preparing for war,' HR McMaster tells lawmakers House Homeland Security Committee takes a field trip to Silicon Valley Cyber-crime29 May 2025 | 43
Victoria's Secret website laid bare for three days after 'security incident' Knickers outlet knackered Security29 May 2025 | 40
Attack on LexisNexis Risk Solutions exposes data on 300k + Data analytics and risk management biz says software dev platform breached, not itself Cyber-crime28 May 2025 | 2
Don't click on that Facebook ad for a text-to-AI-video tool Millions may fall for it - and end up with malware instead Cyber-crime27 May 2025 | 7
New Russian cyber-spy crew Laundry Bear joins the email-stealing pack Dutch intel services, Microsoft go big-game hunting Cyber-crime27 May 2025 | 11
Adidas confirms criminals stole data from customer service provider Hackers take personal data bytes from the brand with three stripes Cyber-crime27 May 2025 | 2
Ransomware attack on MATLAB dev MathWorks – licensing center still locked down Commercial customers, STEM students all feeling the pain after mega outage of engineering data-analysis tool Cyber-crime27 May 2025 | 23
Cybercrime is 'orders of magnitude' larger than state-backed ops, says ex-White House advisor INTERVIEW Michael Daniel also thinks Uncle Sam should increase help to orgs hit by ransomware Cyber-crime24 May 2025 | 26
Ransomware scum leaked Nova Scotia Power customers' info Bank accounts, personal details all hoovered up in the attack Cyber-crime23 May 2025 | 9
Suspected creeps behind DanaBot malware that hit 300K+ computers revealed And the associated fraud'n'spy botnet is about to be shut down Cyber-crime23 May 2025 | 1
Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit If it ain't broke? Datacenter Networking Nexus23 May 2025 | 1
US Navy sailor charged in horrific child sextortion case Blackmailed teen allegedly scared into carving his handle onto her arm Cyber-crime23 May 2025 | 18
Feds finger Russian 'behind Qakbot malware' that hit 700K computers Agents thought they shut this all down in 2023, but the duck quacked again Cyber-crime22 May 2025 | 2
Chinese snoops tried to break into US city utilities, says Talos Intrusions began weeks before Trimble patched the Cityworks hole Cyber-crime22 May 2025 | 6
Scottish council admits ransomware crooks stole school data Parents and teachers have personal info, ID documents leaked online, but exam season mostly unaffected Cyber-crime22 May 2025 | 36
US teen to plead guilty to extortion attack against PowerSchool The 19-year-old and a partner first tried to extort an unnamed telco, but failed Cyber-crime21 May 2025 | 1
FBI, Microsoft, international cops bust Lumma infostealer service Credit card theft losses in 2023 alone totaled $36.5M Cyber-crime21 May 2025 |
Coinbase confirms insiders handed over data of 70K users Bribed support staff identified, fired Cyber-crime21 May 2025 | 17
M&S warns of £300M dent in profits from cyberattack Downtime stings retailer, with technical recovery costs coming at a later date Cyber-crime21 May 2025 | 42
Scattered Spider snared financial orgs before targeting shops in Britain, America interview Crew ain't done hopping sectors, Unit 42 threat hunter warns Cyber-crime21 May 2025 | 4
'Ongoing' Ivanti hijack bug exploitation reaches clouds Nothing like insecure code in security suites CSO21 May 2025 | 4
Ransomware attack on food distributor spells more pain for UK supermarkets Peter Green Chilled supplies all the major UK chains Cyber-crime20 May 2025 | 64
SEC SIM-swapper who Googled 'signs that the FBI is after you' put behind bars Proving yet again that crims are bad at search hygiene Cyber-crime19 May 2025 | 29
Millions at risk after attackers steal UK legal aid data dating back 15 years Cybercriminals lifted info including addresses, ID numbers, and financial records from agency systems Cyber-crime19 May 2025 | 49
IT chiefs of UK's massive health service urge vendors to make public security pledge Enormous org has been hit by ransomware again and again, on multiple fronts, over the past year Cyber-crime19 May 2025 | 27
Broadcom employee data stolen by ransomware crooks following hit on payroll provider Updated Tech giant was in process of dropping payroll biz as it learned of breach Cyber-crime16 May 2025 | 1
From hype to harm: 78% of CISOs see AI attacks already AI attacks are keeping most practitioners up at night, says Darktrace, and with good reason Sponsored feature
DoorDash scam used fake drivers, phantom deliveries to bilk $2.59M Entire process took less than five minutes, prosecutors say Cyber-crime15 May 2025 | 18
Cyber fiends battering UK retailers now turn to US stores Interview DragonForce-riding ransomware ring also has 'shiny object syndrome' so will likely move on to another sector soon Cyber-crime15 May 2025 | 6
Coinbase extorted for $20M. Support staff bribed. Customers scammed. One hell of a SNAFU Expert tells us: 'It is the most unique breach disclosure I've ever seen' Cyber-crime15 May 2025 | 14
Here's what we know about the DragonForce ransomware that hit Marks & Spencer Would you believe it, this RaaS cartel says Russia is off limits Cyber-crime15 May 2025 | 23
Metal maker meltdown: Nucor stops production after cyber-intrusion Ransomware or critical infra hit? Top US manufacturer maintains steely silence Cyber-crime14 May 2025 | 13
Marks & Spencer admits cybercrooks made off with customer info Market cap down by more than £1B since April 22 Cyber-crime13 May 2025 | 76
Attackers pwn charter airline helping Trump's deportation campaign Intruders claim they stole GlobalX's flight records and manifests Cyber-crime12 May 2025 | 49
Britain's cyber agents and industry clash over how to tackle shoddy software CYBERUK Providers argue that if end users prioritized security, they'd get it CSO12 May 2025 | 76
Unending ransomware attacks are a symptom, not the sickness Opinion We need to make taking IT systems 'off the books' a problem for corporate types Cyber-crime12 May 2025 | 63
You think ransomware is bad now? Wait until it infects CPUs RSAC Rapid7 threat hunter wrote a PoC. No, he's not releasing it Research11 May 2025 | 64
Feds disrupt proxy-for-hire botnet, indict four alleged net miscreants The FBI also issued a list of end-of-life routers you need to replace Cyber-crime10 May 2025 | 10
VC behemoth Insight Partners fears top-secret financial info swiped by cyber-miscreants Weapons-grade fuel for fraud Cyber-crime09 May 2025 | 8
PowerSchool paid thieves to delete stolen student, teacher data. Looks like crooks lied Now individual school districts extorted by fiends CSO08 May 2025 | 33
Disney Slack attack wasn't Russian protesters, just a Cali dude with malware 25-year-old fella pleads guilty to stealing, dumping 1.1TB of data from the House of Mouse Cyber-crime02 May 2025 | 18
Generative AI makes fraud fluent – from phishing lures to fake lovers RSAC Real-time video deepfakes? Not convincing yet Spotlight on RSAC02 May 2025 | 5
British govt agents step in as Harrods becomes third mega retailer under cyberattack Experts suggest the obvious: There is an ongoing coordinated attack on UK retail sector Cyber-crime02 May 2025 | 142
Healthcare group Ascension discloses second cyberattack on patients' data This time criminals targeted partner’s third-party software Cyber-crime01 May 2025 | 1
Data watchdog will leave British Library alone – further probes 'not worth our time' No MFA? No problem – as long as you show you’ve learned your lesson Cyber-crime01 May 2025 | 7
Maryland man pleads guilty to outsourcing US govt work to North Korean dev in China Feds say $970K scheme defrauded 13+ companies Cyber-crime30 Apr 2025 | 10
China now America's number one cyber threat – US must get up to speed RSAC Former Rear Admiral calls for National Guard online deployment and corporates to be held accountable Spotlight on RSAC29 Apr 2025 | 22
The one interview question that will protect you from North Korean fake workers RSAC FBI and others list how to spot NK infiltrators, but AI will make it harder Spotlight on RSAC29 Apr 2025 | 96
Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus Florida man altered allergen info, DoSed former colleagues Cyber-crime29 Apr 2025 | 15
From 112K to 4M folks' data – HR biz attack goes from bad to mega bad It took a 1 year+ probe, plenty of client calls for VeriSource to understand just how much of a yikes it has on its hands Cyber-crime28 Apr 2025 | 7
M&S stops online orders as 'cyber incident' issues worsen One step forward and one step back as earlier hopes of progress dashed by latest update Cyber-crime25 Apr 2025 | 21
Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry Because coding phishing sites from scratch is a real pain in the neck Cyber-crime25 Apr 2025 | 5
SSNs and more on 5.5M+ patients feared stolen from Yale Health At least it wasn't Harvard Cyber-crime24 Apr 2025 | 5
M&S takes systems offline as 'cyber incident' lingers Customers told to expect further delays as contactless payments still down Cyber-crime24 Apr 2025 | 12
Ransomware scum and other crims bilked victims out of a 'staggering' $16.6B last year, says FBI Biggest threat to America's critical infrastructure? Ransomware Cyber-crime24 Apr 2025 | 7
Ripple NPM supply chain attack hunts for private keys A mystery thief and a critical CVE involved in crypto cash grab Cyber-crime23 Apr 2025 | 4
This is not just any 'cyber incident' … this is an M&S 'cyber incident' Retailer tight-lipped on details as digital hiccup disrupts customer orders Cyber-crime22 Apr 2025 | 36
UN says Asian scam call center epidemic expanding globally amid political heat What used to be a serious issue mainly in Southeast Asia is now the world’s problem Cyber-crime22 Apr 2025 | 14
Russians lure European diplomats into malware trap with wine-tasting invite Vintage phishing varietal has improved with age Cyber-crime16 Apr 2025 | 14
Guess what happens when ransomware fiends find 'insurance' 'policy' in your files It involves a number close to three or six depending on the pickle you're in Spotlight on RSAC16 Apr 2025 | 20
Now 1.6M people had SSNs, life chapter and verse stolen from insurance IT biz 800K? Make that double, and we'll need a double, too, for the pain Cyber-crime15 Apr 2025 | 16
4chan, the 'internet’s litter box,' appears to have been pillaged by rival forum Source code, moderator info, IP addresses, more allegedly swiped and leaked Cyber-crime15 Apr 2025 | 33
China names alleged US snoops over Asian Winter Games attacks Beijing claims NSA went for gold in offensive cyber, got caught in the act Cyber-crime15 Apr 2025 | 6
Where it Hertz: Customer data driven off in Cleo attacks Car hire biz takes your privacy seriously, though Cyber-crime15 Apr 2025 | 7
Hacktivism resurges – but don't be fooled, it's often state-backed goons in masks Feature Military units, government nerds appear to join the fray, with physical infra in sights CSO13 Apr 2025 | 7
Ransomware crims hammering UK more than ever as British techies complain the board just doesn't get it Issues at the very top continue to worsen Cyber-crime11 Apr 2025 | 13
US sensor giant Sensata admits ransomware derailed ops Props for the transparency though Cyber-crime10 Apr 2025 | 4
Europol: Five pay-per-infect suspects cuffed, some spill secrets to cops Officials teased more details to come later this year Cyber-crime10 Apr 2025 |
The Reg translates the letter in which Oracle kinda-sorta tells customers it was pwned TL;DR: Move along, still nothing to see here - an idea that leaves infosec pros aghast Cyber-crime10 Apr 2025 | 28
Someone compromised US bank watchdog to access sensitive financial files OCC mum on who broke into email, but Treasury fingered China in similar hack months ago Cyber-crime09 Apr 2025 | 5
Pharmacist accused of using webcams to spy on women in intimate moments at work, home Lawsuit claims sick cyber-voyeurism went undetected for years, using hundreds of PCs, due to lax infosec Cyber-crime09 Apr 2025 | 23
Bad luck, Windows 10 users. No fix yet for ransomware-exploited bug Patch Tuesday A novel way to encourage upgrades? Microsoft would never stoop so low Patches08 Apr 2025 | 14
Oracle says its cloud was in fact compromised Reliability, honesty, accuracy. And then there's this lot PaaS + IaaS08 Apr 2025 | 37
That massive GitHub supply chain attack? It all started with a stolen SpotBugs token But this mystery isn't over yet, Unit 42 opines Devops07 Apr 2025 | 7
Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victims Crummy OPSEC leads to potentially decades in prison Cyber-crime07 Apr 2025 | 1
Ex-ASML, NXP staffer accused of stealing chip secrets, peddling them to Moscow We're not Putin up with this alleged industrial espionage, say the Dutch Cyber-crime04 Apr 2025 | 5
Retirement funds reportedly raided after unexplained portal probes and data theft Australians checking their pensions are melting down call centers and websites Cyber-crime04 Apr 2025 | 9
Suspected Chinese spies right now hijacking buggy Ivanti gear – for third time in 3 years Simple denial-of-service blunder turned out to be remote unauth code exec disaster Cyber-crime03 Apr 2025 | 3
Why is someone mass-scanning Juniper and Palo Alto Networks products? Updated Espionage? Botnets? Trying to exploit a zero-day? Networks03 Apr 2025 | 11
Customer info allegedly stolen from compromised supplier of Royal Mail, Samsung Updated Stamp it out: Infostealer malware at German outfit may be culprit Cyber-crime03 Apr 2025 | 10