News

The addresses of defence sites, a missile maintenance unit and domestic violence shelters were among the 500,000 addresses leaked by mistake. This is the first major breach of the New South Wales government's huge store of QR code data. Premier Dominic Perrottet said the information was uploaded in error and “shouldn’t have happened”. The mistake has alarmed both privacy advocates and women’s safety advocates. Cybersecurity experts have long warned the huge amount of data being...

Mere hours before the Super Bowl kick off, the San Francisco 49ers confirmed they were the most recent victims of the BlackByte ransomware group. In a statement to ZDNet, the team said it "recently became aware of a network security incident" causing disruption to their corporate IT network. "Upon learning of the incident, we immediately initiated an investigation and took steps to contain the incident. Third-party cybersecurity firms were engaged to assist, and law enforcement was...

Microsoft has addressed in the Microsoft Defender Antivirus that allowed attackers to plant and execute malicious payloads while avoiding Defender's malware detection engine. The flaw affected even the latest Windows 10 versions and threat attackers have been able to exploit it since at least 2014. As BleepingComputer previously reported, the flaw resulted from lax security settings for the "HKLM\Software\Microsoft\Windows Defender\Exclusions" Registry key. This key contains the list of locations (files, folders, extensions, or processes) excluded from...

DomainTools has announced the availability of DomainTools Iris Detect, an innovative new product designed to discover and monitor domain names spoofing brands, trademarks, or other domains with unprecedented speed, accuracy, and comprehensiveness. Building on the world’s largest databases of domain registration and Domain Name System (DNS) data developed by DomainTools and Farsight Security, the discovery engine underpinning Iris Detect identifies some 350,000 new domains every day—far more than any other technology available. In fact, in a 12-hour period earlier...

A new study reports that Dorset Healthcare University NHS Foundation Trust (DHC) experienced the fourth highest number of data breaches in the UK. The trust argues this does not tell the whole story. Security website VPNoverview.com sent out Freedom of Information requests to 229 NHS foundations across the UK regarding data breaches. Of those, 152 responded. DHC was found to have recorded 3,017 total data breaches from 2016 to 2021. They also recorded the most...

Cybersecurity company Kaspersky found that distributed denial of service (DDoS) attacks recorded quarterly peaked towards the end of 2021. The company’s DDoS attacks in Q4 2021 Report found the total number of DDoS attacks that occurred in Q4 2021 was 4.65 times higher compared with Q4 the previous year, then showing an increase of 52% over Q3 2021. Q4 2021 saw the emergence of several new DDoS botnets, including a zombie network named Abcbot.  The...

Cryptocurrency experts have warned that ransomware payments will likely surpass both the $602m already identified and the 2020 figure. The Ransomware Crypto Crime Report produced by blockchain investigations and analytics company Chainalysis presents significant insight into industry trends. The report shows that average payment size has soared in recent years. In 2019 it was only $25,000, rising to $88,000 in 2020 and $118,000 in 2021. This is likely due to increasing attacks on large organisations,...

The Cybersecurity of Maryland, Inc (CAMI) announced today plans to expand its membership program alongside setting up Centres of Excellence. CAMI aims to develop cybersecurity in the Old Line State through collaboration and advocacy. The organisation hopes to foster cooperation in cybersecurity through opportunities for companies across all industries. The organisation announced today that it will be expanding its membership qualifications to “companies across all verticals who view cybersecurity as a strategic initiative.” “We are...

Analysts at Sansec found the source of over 500-ecommerce stores involving a single domain loading a credit card skimmer on all of them. The attack became evident in late January when a Sansec crawler discovered 374 infections in one day, all using the same malware. The domain that loaded the malware, naturalfreshmallcom, is currently offline and the goal of threat actors was to steal the credit card information of customers on the targeted websites.

A TikTok rapper and her husband have been charged with conspiring to launder $4.5bn worth of bitcoin. The bitcoin was stolen from a virtual currency exchange in 2016 in the biggest crypto-heist the world has ever seen. Heather Morgan, 31, and Ilya’ Dutch’ Lichtenstein, 34, both of New York, New York, were arrested in Manhattan on Tuesday. The couple is accused of conspiring to launder the proceeds of 119,754 bitcoin swiped from Bitfinex’s platform.  In 2016...