therecord.media

The EU and UK blamed Russia’s Federal Security Service (FSB) for a cyberattack that threatened to cut heating to half a million people in Poland last winter.

The EU and UK blamed Russia’s Federal Security Service (FSB) for a cyberattack that threatened to cut heating to half a million people in Poland last winter.

The EU and UK blamed Russia’s Federal Security Service (FSB) for a cyberattack that threatened to cut heating to half a million people in Poland last winter.

GitHub rejected two formal vulnerability reports identifying design flaws that researchers say are enabling variants of the Shai-Hulud supply-chain worm to infect and compromise hundreds of software packages and developer accounts worldwide.

The proposals would require researchers to cease activity the moment a vulnerability is identified, meaning they could not confirm it was real, assess its severity or determine its exploitability.

looks like 19 million records were exposed https://www.securitymagazine.com/articles/102248-hackers-claim-19m-records-stolen-from-french-government-agency

Archived version

Archived version

The popular anime streaming platform Crunchyroll confirmed that a batch of customer information that was stolen through a third-party customer service vendor and leaked online is legitimate.

Great to see others following France in moving away from Big US Tech.

Denmark’s digital affairs ministry says it plans to switch to the open source LibreOffice software and away from Microsoft products as part of an effort to make the government more digitally independent.

Archived

Archived

Romania’s national oil pipeline operator Conpet said a cyberattack disrupted parts of its technology infrastructure and knocked its website offline earlier this week, adding that oil transport operations were not affected.

cross-postowane z: https://lemmy.sdf.org/post/49039675

Human rights groups warned on Friday that it effectively forces member states to create a broad electronic surveillance dragnet that would include crimes that have nothing to do with technology. 

China-linked groups (Volt & Flax Typhoon) are attacking Taiwan’s critical infrastructure (telecom, healthcare, IT). Data theft and persistent access via web server vulnerabilities are the goals. US sanctions have been imposed.

Human rights activists in Western Sahara are being targeted by mobile malware

When The Record shared a link to the government’s press release in which officials blamed the intrusion on a possibly compromised VPN account, the hacker simply replied “careless employees yes,” indirectly confirming the point of entry.

“Since January 2020, a threat actor has been inserting thousands of malicious servers into the Tor network to identify traffic heading to cryptocurrency mixing websites and perform an SSL stripping attack, which is when traffic is downgraded from an encrypted HTTPS connection to plaintext HTTP.