NIST Publishes Three Post-Quantum Cryptography Standards

FBI warned Harris campaign of influence op, Carbon black maker lost $60m in BEC scam, Biotech giant Enzo fined $4.5m for lax security, MSFT patches six zero-days, Flaws could allow SAP system compromise, Ivanti patches critical flaw, Cyber pro contradicts Columbus mayor on stolen data, much more

Law Enforcement Disrupts Ransomware Gang Dispossessor, Seizes Domains

Man appears in court in connection with Angler Exploit kit, FBI probes apparent Trump campaign hack, Musk's conversation with Trump not interrupted by DDoS attack, Swiss engineering firm hit with malware, Hackers stole unreleased Netflix anime shows, Oz gold mine company hit by ransomware, much more

Trump Campaign Claims Iranian Hackers Stole Documents

Sinkclose flaw in AMD chips could allow hackers to run code in privileged mode, New dimension of GPS spoofing emerges for airliners, New hacking technique cracks keycards, Developer secrets hardcoded into software, Fake records in speedrunning video games, DEF CON badge makers cry fowl, much more

Best Infosec-Related Long Reads for the Week of 8/3/24

Scamming older people out of life savings, The brutality of a forced labor cybercrime operation, When the US sold Moscow sabotaged tech, AI scanners expose kids to dangers, Doxing for profit is dark, How Putin's trader made illegal millions in stock trades, So many threats to underseas cables, more

UK Police Websites Are Inaccessible Outside the Country Following a Surge of Foreign Contacts

Iran ups US elections interference, Threat actors flood TikTok with fake news, Man charged with helping N. Koreans land fake jobs, Cybercrime treaty OK’ed, ADT confirms data breach, Russian spies stole UK gov't emails, MOVEit probe closed, Rhysida leaks Columbus data, Trend Micro for sale, much more

Update Vulnerability Could Downgrade Windows Systems to Older, More Vulnerable Versions

0.0.0.0 zero-day flaw affects all major browsers, BlackSuit has demanded $500m in ransoms in two years, 5G baseband flaws allow spying, $10m reward for CyberAv3ngers, McLaren health centers in MI paralyzed by IT disruption, North Miami hit by network breach, Ransomware gangs get nasty, much more

Interpol Recovered a Record-Breaking $40 Million Stolen in a BEC Scam

Georgia voter portal allowed anyone to cancel voter registrations, CrowdStrike issues root cause analysis, MSFT joins CrowdStrike in Delta fight, UK to fine NHS software provider for breach, White Hat hacker drained $12m from crypto service and got $500k, Abnormal Security nabs $250m, much more

Paris Prosecutor Probes Ransomware Attacks on Olympic Venues

Apache OFBiz users subject to critical flaw, New flaw affects Windows Smart App Control and SmartScreen, Google patches 46 Android flaws, Android malware targets Russian users, DPRK seeks construction and machinery data from S. Korea, Bitcoin wallets vulnerable to Dark Skippy flaw, much more

CrowdStrike to Delta: You Rejected Our Help, Stop With the Misleading Narrative

US to ban Chinese software in autonomous & connected vehicles, Feds say TikTok violated COPPA, UK shuts down fraudster platform, US and German authorities shutter Cryptonator, USDoD posts database of allegedly 3 billion people's data, Chinese nationals indicted for bilking older people, much more

Best Infosec-Related Long Reads for the Week of 7/27/24

Web infostealers are a growing threat, An FBI informant continued to spew vile web content, A case study in the damage of deepfake porn, A slap on the wrist for the UK's Electoral Commission, Can LLMs be self-aware?, Hacking computer chips with lasers

Prominent Russian Cybercriminals Were Part of Blockbuster Prisoner Exchange

China's APT41 stole passwords and documents from a Taiwan computing research center, Dating apps allow miscreants to pinpoint victims' locations, Rabbit says employee leaked source code, Canada launches Ticketmaster probe, Rhysida claims Columbus attack, CISA hires first-ever AI chief, much more

Delta, Shareholders Gear Up for Lawsuits Against CrowdStrike

Blood supplies imperiled in US Southeast after likely ransomware attack on OneBlood, Ransomware attack on Indian banking tech supplier shutters 300 small banks, SMS stealer targets Android users, One million-plus domains subject to takeover, Cloudflare still serves dodgy domains, much more