Connor Jones

2 days ago | theregister.com | Connor Jones

The vast majority of global businesses are handling at least one material supply chain attack per year, but very few are doing enough to counter the growing threat. New research from SecurityScorecard shows organizations and their security leaders are gravely concerned about supply chain risks. 88 percent of the 550 CISOs and other security higher-ups surveyed expressed worry over supply chain security, but far fewer than half actually monitor security fully across their external suppliers.

2 days ago | theregister.com | Connor Jones

The Paris police force's cybercrime brigade (BL2C) has arrested a further four men as part of a long-running investigation into the criminals behind BreachForums. The arrests on Monday follow the earlier capture in February of a person police suspect of being a cyber crook known as IntelBroker, taking the total number of suspected BreachForums admins in handcuffs to five. BreachForums is one of the world's most infamous and popular cybercrime discussion boards.

3 days ago | theregister.com | Connor Jones

A website developed for the UK Home Office's 2022 "flop" anti-encryption campaign has seemingly been hijacked to push a payday loan scheme. The pwn on the government's No Place to Hide campaign, which cost over half a million pounds to produce, was first spotted by tech policy expert Heather Burns. The website originally featured a daring stunt involving a parent and child locked in a box, and was greeted with negative reception when it was unveiled three years ago.

4 days ago | theregister.com | Connor Jones

Four convicted members of the once-supreme ransomware operation REvil are leaving captivity after completing most of their five-year sentences. The quartet were arrested in 2022 alongside four other alleged members, including the group's founder, who remain in Russia's custody. Andrey Bessonov, Mikhail Golovachuk, Roman Muromsky, and Dmitry Korotayev were all handed five-year sentences to a so-called "general regime penal colony" on Monday, although they were released on time served.

4 days ago | theregister.com | Connor Jones

McLaren Health Care is in the process of writing to 743,131 individuals now that it fully understands the impact of its July 2024 cyberattack. The attack was carried out on Karmanos Cancer Institute, an independent organization that's part of McLaren's network, on July 17, 2024, but was not detected until August 5, according to the letters being sent to affected individuals.