Tag: incident response strategies
-
Schneier on Security: Silk Typhoon Hackers Indicted
Source URL: https://www.schneier.com/blog/archives/2025/03/silk-typhoon-hackers-indicted.html Source: Schneier on Security Title: Silk Typhoon Hackers Indicted Feedly Summary: Lots of interesting details in the story: The US Department of Justice on Wednesday announced the indictment of 12 Chinese individuals accused of more than a decade of hacker intrusions around the world, including eight staffers for the contractor i-Soon, two…
-
The Register: Developer sabotaged ex-employer with kill switch that activated when he was let go
Source URL: https://www.theregister.com/2025/03/08/developer_server_kill_switch/ Source: The Register Title: Developer sabotaged ex-employer with kill switch that activated when he was let go Feedly Summary: IsDavisLuEnabledInActiveDirectory? Not any more. IsDavisLuGuilty? Yes. IsDavisLuFacingJail? Also yes A federal jury in Cleveland has found a senior software developer guilty of sabotaging his employer’s systems – and he’s now facing a potential…
-
The Register: Like whitebox servers, rent-a-crew crime ‘affiliates’ have commoditized ransomware
Source URL: https://www.theregister.com/2025/03/07/commoditization_ransomware/ Source: The Register Title: Like whitebox servers, rent-a-crew crime ‘affiliates’ have commoditized ransomware Feedly Summary: Which is why taking down chiefs and infra behind big name brand operations isn’t working Interview There’s a handful of cybercriminal gangs that Jason Baker, a ransomware negotiator with GuidePoint Security, regularly gets called in to respond…
-
The Register: Ghost ransomware crew continues to haunt IT depts with scarily bad infosec
Source URL: https://www.theregister.com/2025/02/20/fbi_beware_of_ghost_ransomware/ Source: The Register Title: Ghost ransomware crew continues to haunt IT depts with scarily bad infosec Feedly Summary: FBI and CISA issue reminder – deep sigh – about the importance of patching and backups The operators of Ghost ransomware continue to claim victims and score payments, but keeping the crooks at bay…
-
The Register: US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware
Source URL: https://www.theregister.com/2025/02/18/us_newspaper_publisher_exercises_linguistic/ Source: The Register Title: US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware Feedly Summary: Called it an ‘incident’ in SEC filing, but encrypted apps and data exfiltration suggest Lee just can’t say the R word US newspaper publisher Lee Enterprises is blaming its recent service…
-
The Register: Ransomware isn’t always about the money: Government spies have objectives, too
Source URL: https://www.theregister.com/2025/02/12/ransomware_nation_state_groups/ Source: The Register Title: Ransomware isn’t always about the money: Government spies have objectives, too Feedly Summary: Analysts tell El Reg why Russia’s operators aren’t that careful, and why North Korea wants money AND data Feature Ransomware gangsters and state-sponsored online spies fall on opposite ends of the cyber-crime spectrum.… AI Summary…