Feds name and charge alleged Silk Typhoon spies behind years of China-on-US attacks Xi's freelance infosec warriors apparently paid up to $75K to crack a single American inbox Cyber-crime06 Mar 2025 | 2
Leeds United kick card swipers into Row Z after 5-day cyberattack English football club offers apologies after fans' card details stolen from online retail store Cyber-crime05 Mar 2025 | 5
Qilin ransomware gang boasts of cyberattacks on cancer clinic, Ob-Gyn facility 'No regrets' crew continues extorting victims, leaking highly sensitive data Ransomware in Focus05 Mar 2025 | 1
Ransomware thugs threaten Tata Technologies with leak if demands not met Hunters International ready to off-shore 1.4 TB of info allegedly swiped from Indian giant Ransomware in Focus05 Mar 2025 | 4
It's bad enough we have to turn on cams for meetings, now the person staring at you may be an AI deepfake Says the biz trying to sell us stuff to catch that, admittedly AI + ML04 Mar 2025 | 15
Polish space agency confirms cyberattack Officials vow to uncover who was behind it Ransomware in Focus03 Mar 2025 | 3
Governments can't seem to stop asking for secret backdoors Opinion Cut off one head and 100 grow back? Decapitation may not be the way to go Cyber-crime03 Mar 2025 | 116
Microsoft names alleged credential-snatching 'Azure Abuse Enterprise' operators Crew helped lowlifes generate X-rated celeb deepfakes using Redmond's OpenAI-powered cloud – claim AI + ML28 Feb 2025 | 3
Feds: Army soldier suspected of AT&T heist Googled ‘can hacking be treason,’ ‘defecting to Russia’ FYI: What NOT to search after committing a crime Cyber-crime27 Feb 2025 | 34
FBI officially fingers North Korea for $1.5B Bybit crypto-burglary Federal agents, open up ... your browsers and see if you recognize any of these wallets Cyber-crime27 Feb 2025 | 24
With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare 244M purloined passwords added to Have I Been Pwned thanks to govt tip-off Cyber-crime26 Feb 2025 | 10
Bybit declares war on North Korea's Lazarus crime-ring to regain $1.5B stolen from wallet Up to $140M in bounty rewards for return of Ethereum allegedly pilfered by hermit nation Cyber-crime26 Feb 2025 | 15
Drug-screening biz DISA took a year to disclose security breach affecting millions If there's something nasty on your employment record, extortion scum could come calling Cyber-crime26 Feb 2025 | 5
Xi know what you did last summer: China was all up in Republicans' email, says book Of course, Microsoft is in the mix, isn't it Cyber-crime25 Feb 2025 | 30
Southern Water takes the fifth over alleged $750K Black Basta ransom offer Leaked chats and spilled secrets as AI helps decode circa 200K private talks Ransomware in Focus25 Feb 2025 | 34
US Dept of Housing screens sabotaged to show deepfake of Trump sucking Elon's toes 'Appropriate action will be taken,' we're told – as federal HR email sparks uproar, ax falls on CISA staff Public Sector24 Feb 2025 | 134
Experts race to extract intel from Black Basta internal chat leaks Researchers say there's dissent in the ranks. Plus: An AI tool lets you have a go yourself at analysing the data Ransomware in Focus21 Feb 2025 | 5
Oops, some of our customers' Power Pages-hosted sites were exploited, says Microsoft Don't think this is SaaS and you can relax: Redmond wants a few of you to check your websites Cyber-crime20 Feb 2025 | 4
US minerals company says crooks broke into email and helped themselves to $500K A painful loss for young company that's yet to generate revenue Cyber-crime20 Feb 2025 | 10
Ghost ransomware crew continues to haunt IT depts with scarily bad infosec FBI and CISA issue reminder - deep sigh - about the importance of patching and backups Ransomware in Focus20 Feb 2025 | 7
How Google tracks Android device users before they've even opened an app No warning, no opt-out, and critic claims ... no consent
Please fasten your seatbelts. A third of US air traffic control systems are 'unsustainable' And the FAA's modernization efforts are going so badly they won't exit turbulence any time soon
Apple drags UK government to court over 'backdoor' order Updated A first-of-its-kind legal challenge set to be heard this month, per reports
Cloudflare's bot bouncer blocks weirdo browsers Not on Firefox or a Chrome derivative? You shall not pass
SpaceX loses a Falcon 9 booster and scrubs a Starship Reusable first stage of workhorse tips over after landing
Firefox 136 finally brings the features that fans wanted Vertical tabs, native Arm64 Linux version, and AMD GPU-accelerated video playback
VMware splats guest-to-hypervisor escape bugs already exploited in wild The heap overflow zero-day in the memory unsafe code by Miss Creant
Microsoft: So what if it costs 4X as much to run Windows Server in AWS, Alibaba, and Google? That's competition, that's protecting our IP, Redmond's lawyers tell UK monopoly cops
Windows 365 Disaster Recovery Plus promises Cloud PC comebacks in 30 minutes Presumably hosted by AWS?
It's bad enough we have to turn on cams for meetings, now the person staring at you may be an AI deepfake Says the biz trying to sell us stuff to catch that, admittedly
Medusa ransomware gang demands $2M from UK private health services provider Exclusive 2.3 TB held to ransom as biz formerly known as Virgin Care tells us it's probing IT 'security incident' Cyber-crime20 Feb 2025 | 10
US Army soldier linked to Snowflake extortion rampage admits breaking the law That's the way the cookie melts Cyber-crime20 Feb 2025 |
London celebrity talent agency reports itself to ICO following Rhysida attack claims Showbiz members' passport scans already plastered online Cyber-crime19 Feb 2025 | 2
US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware Called it an 'incident' in SEC filing, but encrypted apps and data exfiltration suggest Lee just can’t say the R word Ransomware in Focus18 Feb 2025 | 12
Indian authorities seize loot from collapsed BitConnect crypto scam Devices containing crypto wallets tracked online, then in the real world Cyber-crime18 Feb 2025 | 14
This open text-to-speech model needs just seconds of audio to clone your voice Hands on El Reg shows you how to run Zyphra's speech-replicating AI on your own box AI + ML16 Feb 2025 | 47
If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish Roses aren't cheap, violets are dear, now all your access token are belong to Vladimir CSO15 Feb 2025 | 27
Chinese spies suspected of 'moonlighting' as tawdry ransomware crooks Some employees steal sticky notes, others 'borrow' malicious code Ransomware in Focus14 Feb 2025 | 11
Arizona laptop farmer pleads guilty for funneling $17M to Kim Jong Un 300+ US companies, 70+ individuals hit by the fraudsters Cyber-crime12 Feb 2025 | 20
Ransomware isn't always about the money: Government spies have objectives, too Feature Analysts tell El Reg why Russia's operators aren't that careful, and why North Korea wants money AND data Ransomware in Focus12 Feb 2025 | 7
Crimelords and spies for rogue states are working together, says Google Only lawmakers can stop them. Plus: software needs to be more secure, but what's in it for us? Cyber-crime12 Feb 2025 | 21
Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining These crooks have no chill Ransomware in Focus11 Feb 2025 |
UK, US, Oz blast holes in LockBit's bulletproof hosting provider Zservers Huge if true: Brit Foreign Sec says Putin running a 'corrupt mafia state' Cyber-crime11 Feb 2025 | 41
Man who SIM-swapped the SEC's X account pleads guilty Said to have asked search engine 'What are some signs that the FBI is after you?' Cyber-crime11 Feb 2025 | 9
All your 8Base are belong to us: Ransomware crew busted in global sting updated Dark web site seized, four cuffed in Thailand Cyber-crime10 Feb 2025 | 3
US news org still struggling to print papers a week after 'cybersecurity event' Publications across 25 states either producing smaller issues or very delayed ones Cyber-crime10 Feb 2025 | 9
UK industry leaders unleash hurricane-grade scale for cyberattacks Freshly minted organization aims to take the guesswork out of incident severity for insurers and policy holders Cyber-crime07 Feb 2025 | 7
Apple missed screenshot-snooping malware in code that made it into the App Store, Kaspersky claims OCR plugin great for extracting crypto-wallet secrets from galleries Cyber-crime07 Feb 2025 | 7
Coordinates of millions of smartphones feared stolen, sparking yet another lawsuit against data broker Fourth time’s the harm? Personal Tech06 Feb 2025 | 6
Robocallers who phoned the FCC pretending to be from the FCC land telco in trouble Don't laugh: The $4.5m fine proposed for carrier Telnyx shows how the Trump administration will run its comms regulator Networks06 Feb 2025 | 30
Grubhub serves up security incident with a side of needing to change your password Contact info and partial payment details may be compromised Cyber-crime04 Feb 2025 |
Cyberattack on NHS causes hospitals to miss cancer care targets Healthcare chiefs say impact will persist for months Cyber-crime04 Feb 2025 | 12
Gilmore Girls fans nabbed as Eurocops dismantle two major cybercrime forums Nulled and Cracked had a Lorelai-cal rise - until Operation Talent stepped in Security02 Feb 2025 | 2
Another banner year for ransomware gangs despite takedowns by the cops And it doesn't take a crystal ball to predict the future Cyber-crime31 Jan 2025 | 6
Google to Iran: Yes, we see you using Gemini for phishing and scripting. We're onto you And you, China, Russia, North Korea ... Guardrails block malware generation Security31 Jan 2025 | 13
Ransomware attack at New York blood services provider – donors turned away during shortage crisis 400 hospitals and med centers across 15 states rely on its products Cyber-crime30 Jan 2025 | 13
Wacom says crooks probably swiped customer credit cards from its online checkout Digital canvas slinger indicates dot-com was skimmed for over a month Cyber-crime30 Jan 2025 | 3
'Bro delete the chat': Feel the panic shortly before cops bust major online fraud ring Mastermind begs colluders to bury evidence later used to imprison him Cyber-crime29 Jan 2025 | 21
Baguette bandits strike again with ransomware and a side of mockery Big-game hunting to the extreme Cyber-crime28 Jan 2025 | 6
Security pros more confident about fending off ransomware, despite being battered by attacks Data leak, shmata leak. It will all work out, right? Cyber-crime28 Jan 2025 | 5
DeepSeek limits new accounts amid cyberattack Updated Chinese AI startup grapples with consequences of sudden popularity Cyber-crime27 Jan 2025 | 43
Google takes action after coder reports 'most sophisticated attack I've ever seen' Latest trope is tricky enough to fool even the technical crowd… almost Cyber-crime27 Jan 2025 | 32
AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud GameOn? It's looking more like game over for that biz Cyber-crime24 Jan 2025 | 30
North Korean dev who renamed himself 'Bane' accused of IT worker fraud caper 5 indicted as FBI warns North Korea dials up aggression, plus Russian devs allegedly get in on the act Cyber-crime24 Jan 2025 | 2
China and friends claim success in push to stamp out tech support cyber-scam slave camps Paint a target on Myanmar, pledge more info-sharing to get the job done Cyber-crime24 Jan 2025 | 12
FortiGate config leaks: Victims' email addresses published online Experts warn not to take SNAFU lightly as years-long compromises could remain undetected Cyber-crime23 Jan 2025 | 8
Trump 'waved a white flag to Chinese hackers' as Homeland Security axed cyber advisory boards And: America 'has never been less secure,' retired rear admiral tells Congress Security22 Jan 2025 | 94
Supply chain attack hits Chrome extensions, could expose millions Threat actor exploited phishing and OAuth abuse to inject malicious code Cyber-crime22 Jan 2025 | 6
Ransomware scum make it personal for Reg readers by impersonating tech support That invitation to a Teams call on which IT promises to mop up a spamstorm may not be what it seems CSO22 Jan 2025 | 18
PowerSchool theft latest: Decades of Canadian student records, data from 40-plus US states feared stolen Updated Lawsuits pile up after database accessed by miscreants Cyber-crime22 Jan 2025 | 31
HPE probes IntelBroker's bold data theft boasts Incident response protocols engaged following claims of source code burglary Cyber-crime21 Jan 2025 |
Ransomware attack forces Brit high school to shut doors Students have work to complete at home in the meantime Cyber-crime20 Jan 2025 | 103
Fortinet: FortiGate config leaks are genuine but misleading Competition hots up with Ivanti over who can have the worst start to a year Cyber-crime17 Jan 2025 | 5
Medusa ransomware group claims attack on UK's Gateshead Council Pastes allegedly stolen documents on leak site with £600K demand Cyber-crime17 Jan 2025 | 13
Russia's Star Blizzard phishing crew caught targeting WhatsApp accounts updated FSB cyberspies venture into a new app for espionage, Microsoft says Security16 Jan 2025 | 4
Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M That's in addition to the $4.5M fine paid to three state AGs last year Cyber-crime16 Jan 2025 | 1
Crypto klepto North Korea stole $659M over just 5 heists last year US, Japan, South Korea vow to intensify counter efforts Cyber-crime15 Jan 2025 | 13
FBI wipes Chinese PlugX malware from thousands of Windows PCs in America Hey, Xi: Zài jiàn! Cyber-crime14 Jan 2025 | 31
UK floats ransomware payout ban for public sector Stronger proposals may also see private sector applying for a payment 'license' Cyber-crime14 Jan 2025 | 25
Microsoft sues 'foreign-based' cyber-crooks, seizes sites used to abuse AI Scumbags stole API keys, then started a hacking-as-a-service biz, it is claimed Security13 Jan 2025 | 4
Chinese cyber-spies peek over shoulder of officials probing real-estate deals near American military bases Gee, wonder why Beijing is so keen on the – checks notes – Committee on Foreign Investment in the US Cyber-crime10 Jan 2025 | 7
Drug addiction treatment service admits attackers stole sensitive patient data Details of afflictions and care plastered online Cyber-crime10 Jan 2025 | 8
Security pros baited with fake Windows LDAP exploit traps Tricky attackers trying yet again to deceive the good guys on home territory Cyber-crime09 Jan 2025 | 7
Japanese police claim China ran five-year cyberattack campaign targeting local orgs ‘MirrorFace’ group found ways to run malware in the Windows sandbox, which may be worrying Security09 Jan 2025 | 6
Database tables of student, teacher info stolen from PowerSchool in cyberattack Class act: Cloud biz only serves 60M-plus folks globally, no biggie Cyber-crime09 Jan 2025 | 23
UN's aviation agency confirms attack on recruitment database Various data points compromised but no risk to flight security Cyber-crime08 Jan 2025 | 4
Turbulence at UN aviation agency as probe into potential data theft begins Crime forum-dweller claims to have leaked 42,000 documents packed with personal info Cyber-crime07 Jan 2025 |
Charter, Consolidated, Windstream reportedly join China's Salt Typhoon victim list Slow drip of compromised telecom networks continues Cyber-crime06 Jan 2025 | 4
After China's Salt Typhoon, the reconstruction starts now Opinion If 40 years of faulty building gets blown down, don’t rebuild with the rubble Cyber-crime06 Jan 2025 | 41
Encryption backdoor debate 'done and dusted,' former White House tech advisor says interview When the FBI urges E2EE, you know it's serious business Cyber-crime04 Jan 2025 | 74
Atos denies Space Bears' ransomware claims – with a 'but' updated Points finger at third-party infrastructure being breached Cyber-crime04 Jan 2025 | 3
Chinese cyber-spies reportedly targeted sanctions intel in US Treasury raid OFAC, Office of the Treasury Secretary feared hit in data-snarfing swoop CSO02 Jan 2025 | 3
US Army soldier who allegedly stole Trump's AT&T call logs arrested Brings the arrest count related to the Snowflake hacks to 3 Cyber-crime01 Jan 2025 | 16
US Treasury Department outs the blast radius of BeyondTrust's key leak Data pilfered as miscreants roamed affected workstations Cyber-crime31 Dec 2024 | 16
China's cyber intrusions took a sinister turn in 2024 From targeted espionage to pre-positioning - not that they are mutually exclusive Security31 Dec 2024 | 9
More telcos confirm China Salt Typhoon security breaches as White House weighs in Intrusions allowed Beijing to 'geolocate millions of individuals, record phone calls at will' Cyber-crime30 Dec 2024 | 36
It's only a matter of time before LLMs jump start supply-chain attacks Interview 'The greatest concern is with spear phishing and social engineering' Security29 Dec 2024 | 58
How cops taking down LockBit, ALPHV led to RansomHub's meteoric rise Cut off one head, two more grow back in its place Cyber-crime28 Dec 2024 | 4
How Androxgh0st rose from Mozi's ashes to become 'most prevalent malware' Botnet's operators 'driven by similar interests as that of the Chinese state' Cyber-crime24 Dec 2024 | 3
What do ransomware and Jesus have in common? A birth month and an unwillingness to die Feature 35 years since AIDS first borked a PC and we're still no closer to a solution Cyber-crime24 Dec 2024 | 23
Suspected LockBit dev, facing US extradition, 'did it for the money' Dual Russian-Israeli national arrested in August Cyber-crime23 Dec 2024 | 18
UK ICO not happy with Google's plans to allow device fingerprinting Infosec in brief Also, Ascension notifies 5.6M victims, Krispy Kreme bandits come forward, LockBit 4.0 released, and more Security23 Dec 2024 | 75
Don't fall for a mail asking for rapid Docusign action – it may be an Azure account hijack phish Recent campaign targeted 20,000 folk across UK and Europe with this tactic, Unit 42 warns Cyber-crime19 Dec 2024 | 17
Phishers cast wide net with spoofed Google Calendar invites Not that you needed another reason to enable the 'known senders' setting Cyber-crime18 Dec 2024 | 17
Interpol wants everyone to stop saying 'pig butchering' Victims' feelings might get hurt, global cops contend, and that could hinder reporting Cyber-crime17 Dec 2024 | 45
Ransomware scum blow holes in Cleo software patches, Cl0p (sort of) claims responsibility But can you really take crims at their word? Security16 Dec 2024 | 1
Trump administration wants to go on cyber offensive against China The US has never attacked Chinese critical infrastructure before, right? Cyber-crime16 Dec 2024 | 25
Deloitte says cyberattack on Rhode Island benefits portal carries 'major security threat' Personal and financial data probably stolen Cyber-crime16 Dec 2024 | 2
Scumbag gets 30 years in the clink for running CSAM dark-web chatrooms, abusing kids 'Today’s sentencing is more than just a punishment. It’s a message' Cyber-crime13 Dec 2024 | 42
North Korea's fake IT worker scam hauled in at least $88M over six years DoJ thinks it's found the folks that ran it, and some of the 'IT warriors' sent out to fleece employers Cyber-crime13 Dec 2024 | 2