Cybersecurity News

The recent data breach targeting the TRANServe transit benefits system, which provides reimbursement for commuting costs to government employees, has raised concerns about the potential misuse of personal information. The extent of any criminal activity resulting from the breach remains uncertain. On Friday, USDOT (United States Department of Transportation) notified…

TechCrunch has a story today about Capita with an unsecured S3 bucket. A few people came across this last week — I saw it floating around social media and Discord amongst security researchers. Capita claim it is “information such as release notes and user guides, which are routinely published alongside…

In today’s rapidly evolving digital landscape, staying informed about cyber threats and security updates is crucial. In this week’s roundup, we cover several key topics, including Android malware, ransomware targeting Mac and Microsoft SQL servers, and the importance of cybersecurity in smart cities. …

Capita have finally admitted a data breach, but still do not think they need to disclose key details of the incident to customers, regulators, impacted parties and investors. So in this piece we shall dig into the details using open source intelligence, and prove Capita was penetrated by Black Basta…

In the current world fast growing with technology, computer technology takes the main place of technology. Every individual and every organization need computer technology. And the other hand it’s easy to face business competition with other organizations in the current world. If we get individuals’ side, they use computer technology…

There’s an interesting piece in The Times today, where the CEO of Capita declares Capita’s response to the hack “will go down as a case history for how to deal with a sophisticated cyberattack”. That’s a bold statement, so let us explore it. While that may be true on a…

Yesterday Microsoft dropped a patch for a vulnerability found by @[email protected]. It’s a great vuln, in theory allowing code execution over ICMP. It also sounds really scary, as it’s a high CVSS score in Windows OS on a commonly used protocol. I’ve had a quick reverse engineer of the patch…

Those who have known me for a long time will know I’ve been banging on about ransomware for years. On here, on Twitter, in person. Here, I documented things like the emergence of Locky 7 years ago, one of the first big single endpoint ransomware incidents. I worked with the…

Get our 3 min daily newsletter on what matters in cybersecurity. Welcome to our very first edition of Ice Phishing! I spent way too much time putting this together and calculating the x365 editions we will be sending per year. I was thinking what we could kickoff as a daily…