Information security
Information security
[ follow ]
#cybersecurity
Information security
fromtheregister
1 day agoPoland directs officials to ditch Signal in favor of 'secure' state-developed alternative
Poland urges government officials to stop using Signal due to security risks from APT-linked social engineering and phishing that can compromise accounts and sensitive communications.
Information security
fromTechCrunch
1 day agoOpen source tool maker Grafana Labs says hackers stole its code, refuses to pay ransom | TechCrunch
Hackers accessed Grafana’s GitLab using a stolen token, obtained source code repositories, and demanded payment, but Grafana refused and invalidated the token.
#macos-malware
Information security
fromtheregister
1 day agoDo fear the Reaper - stealer swipes macOS users' passwords, wallets, then backdoors them
Reaper macOS infostealer spoofs major trusted brands, uses Script Editor to bypass Terminal defenses, then steals password-manager credentials and crypto-wallet access.
#code-signing-abuse
Information security
fromtheregister
8 hours agoMicrosoft shuts down illegal code-signing operation used by ransomware crims to mask their malware
Microsoft seized websites and took down a code-signing certificate service used to make ransomware and malware appear legitimate, infecting thousands of US machines including Microsoft-owned systems.
Information security
fromNextgov.com
15 hours agoMicrosoft disrupts cybercrime service offering malware disguised as legitimate software
Fox Tempest abused Microsoft code-signing tools to sell malware-signing services, leading to widespread ransomware and malicious attacks across multiple sectors and countries.
Information security
fromComputerWeekly.com
9 hours agoVulnerability exploitation now primary origin of data breaches | Computer Weekly
About 31% of breaches start with exploitation of unpatched software vulnerabilities, driven by AI-enabled faster weaponization, requiring stronger risk management and patch readiness.
Information security
fromComputerWeekly.com
14 hours agoAssume autonomy: Why security teams need to rethink defence at machine speed | Computer Weekly
Cybersecurity must shift from human-speed assumptions to an Assume Autonomy mindset, because AI enables autonomous discovery, exploitation, and lateral movement faster than current defenses.
#software-supply-chain-attacks
Information security
fromThe Hacker News
1 day agoMini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
A compromised npm maintainer account pushed trojanized @antv and related packages, embedding credential-stealing code and creating significant downstream exposure for auto-updating dependencies.
Information security
fromThe Hacker News
1 day agoMini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
A compromised npm maintainer account pushed trojanized @antv and related packages, embedding credential-stealing code and creating significant downstream exposure for auto-updating dependencies.
#npm-supply-chain-attacks
Information security
fromtheregister
17 hours agoShai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
An npm account compromise injected malware into 314 packages, stole cloud and GitHub credentials, and used GitHub as command-and-control via automated token-driven activity.
#data-breach
Information security
fromSecurityWeek
4 days agoIn Other News: Big Tech vs Canada Encryption Bill, Cisco's Free AI Security Spec, Audi App Flaws
GeForce NOW user data was exposed via a partner breach, while the FCC extended update timelines for covered foreign routers and OpenAI sought EU access to a cyber-focused GPT variant.
Information security
fromSecurityWeek
4 days agoIn Other News: Big Tech vs Canada Encryption Bill, Cisco's Free AI Security Spec, Audi App Flaws
GeForce NOW user data was exposed via a partner breach, while the FCC extended update timelines for covered foreign routers and OpenAI sought EU access to a cyber-focused GPT variant.
#cybercrime
Information security
fromSecurityWeek
14 hours agoMicrosoft Disrupts Malware-Signing Service Run by 'Fox Tempest'
Fox Tempest used malware-signing-as-a-service with short-lived code-signing certificates to evade detection, and Microsoft disrupted it by revoking certificates, seizing infrastructure, and filing lawsuits.
Information security
fromSecurityWeek
14 hours agoMicrosoft Disrupts Malware-Signing Service Run by 'Fox Tempest'
Fox Tempest used malware-signing-as-a-service with short-lived code-signing certificates to evade detection, and Microsoft disrupted it by revoking certificates, seizing infrastructure, and filing lawsuits.
Information security
fromtheregister
12 hours agoAmerica's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens - and incredibly obvious filenames
A public GitHub repository exposed CISA secrets for six months, including tokens, keys, credentials, and certificates, until removal after reporting.
Information security
fromTechCrunch
15 hours agoUS cyber agency CISA exposed reams of passwords and cloud keys to the open web | TechCrunch
Publicly exposed plaintext credentials in a contractor GitHub repository enabled access to CISA and DHS systems, prompting reporting after contractor alerts went unanswered.
fromnews.bitcoin.com
10 hours agoEcho Protocol Pauses Monad Bridge After Admin Key Breach Sparks $816K Loss
An attacker compromised an administrative key tied to Echo Protocol’s deployment on the Monad blockchain network and used it to mint 1,000 eBTC tokens valued at about $76.7 million. The attacker granted their own wallet minting privileges, then deposited 45 eBTC as collateral into the Curvance decentralized lending protocol. Using that collateral, the attacker borrowed 11.29 WBTC, bridged the borrowed assets to Ethereum, swapped them for ETH, and sent about 385 ETH into Tornado Cash.
Information security
fromTechRepublic
1 day agoGrafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft
Grafana has confirmed that an unauthorized party gained access to its GitHub environment after obtaining a compromised token, allowing the attacker to download parts of its codebase. In a public statement shared on X, the company said its investigation found no evidence that customer data or personal information was accessed and that no evidence that customer systems or operations were affected. The breach was discovered after unusual activity triggered a forensic investigation.
Information security
#phishing
Information security
fromThe Hacker News
1 day agoIvanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws
Security fixes address critical vulnerabilities across Ivanti, Fortinet, and SAP that could enable authentication bypass, unauthorized code execution, and sensitive data exposure.
#nginx
Information security
fromThe Hacker News
2 days agoNGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
CVE-2026-42945 in NGINX heap overflow is actively exploited, enabling unauthenticated worker crashes and potential RCE when ASLR is disabled and specific configuration is known.
from24/7 Wall St.
1 day agoOkta Price Target Bumped to $103 at KeyBanc as Security Spending Catches Fire
Analyst Eric Heath raised the firm’s price target on Okta to $103 from $95 and kept an Overweight rating on the shares, citing a sharper outlook for enterprise security spending in the back half of the year.
Information security
fromtheregister
1 day agoTanStack weighs invitation-only pull requests after supply chain attack
The attack used code from the Shai-Hulud worm, published by malware outfit TeamPCP, which can extract secrets from memory used by GitHub Actions. It began with a PR that triggered an automatic workflow via TanStack's use of the pull_request_target feature, causing the malicious code to be built and run by a GitHub Action, poisoning a cache used across the entire repository.
Information security
fromSecurityWeek
2 days agoHackers Earn $1.3 Million at Pwn2Own Berlin 2026
According to TrendAI's Zero Day Initiative (ZDI), white hat hackers have been awarded $1,298,250 for 47 unique vulnerabilities. Nearly $750,000 of the total amount was won by the first two teams: Devcore and StarLabs SG. The two teams also received the highest payouts for a single exploit chain. Devcore earned $200,000 for a remote code execution exploit with System privileges on Microsoft Exchange, and $175,000 for a Microsoft Edge sandbox escape. It also received $100,000 for exploiting Microsoft SharePoint.
Information security
Information security
fromTNW | Data-Security
2 days agoA student with a laptop and a radio stopped four high-speed trains. The crypto keys hadn't been changed in 19 years.
A university student used cloned TETRA emergency signaling to trigger manual braking across Taiwan’s high-speed rail network, disrupting service for 48 minutes.
Information security
fromwww.theguardian.com
3 days agoCanvas hack: is it ever a good idea to pay a ransom, and what happens to the data?
Instructure reached an agreement with ransomware attackers after student data theft, login page defacement, and assignment delays, with experts suspecting ransom payment.
Information security
fromtheregister
3 days agoEurope built sovereign clouds to escape US control. Then forgot about the processors
European sovereign cloud programs reduce legal exposure, but underlying Intel/AMD management engines operate below host control and can persist outside security visibility.
Information security
fromThe Hacker News
4 days agoWhat 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface
Legitimate administrative tools are widely abused in high-severity incidents, so reducing attack surface by removing risky capabilities is faster than relying on detection alone.
Information security
fromThe Hacker News
5 days agoCISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
CVE-2026-20182 in Cisco Catalyst SD-WAN Controller enables unauthenticated remote authentication bypass and administrative access, added to CISA KEV with FCEB remediation by May 17, 2026.
Information security
fromtheregister
5 days agoNobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data
Instructure claims stolen data was destroyed and no customers will be extorted, but ransomware researchers doubt deletion and warn further threats are likely.
Information security
fromSecuritymagazine
5 days agoDid Iran Hack Tank Readers at US Gas Stations? Security Leaders Discuss
Iranian actors are suspected of hacking gas station tank gauge systems, altering displayed readings without changing fuel levels, prompting calls to strengthen critical infrastructure security.
[ Load more ]