LockBit alleges it boarded Boeing, stole 'sensitive data'

Security In Brief Notorious ransomware pack LockBit has reportedly exfiltrated “a tremendous magnitude of delicate information from aerospace outfit Boeing.

VX underground published a screenshot of Lockbit’s announcement, and threat to expose information if Boeing does not prosecute pinch it by November 2nd.

Boeing has told US media it is investigating Lockbit’s claims.

If Lockbit has so stolen Boeing information nan repercussions could beryllium tremendous arsenic nan institution does plentifulness of activity for subject clients, and is moreover building nan caller brace of heavily—modified 747-8 planes that will service arsenic nan adjacent Air Force One US statesmanlike transports.

"We are assessing this claim", Boeing told The Register.

Lockbit has a agelong history of "success" pinch its attacks, and is thought to person earned astir $90 cardinal successful nan USA unsocial since 2020. The group is not awkward and often publicises its exploits, and moreover its merchandise improvement efforts.

Reports propose a LockBit connection led this raid, utilizing a zero-day exploit. The criminal gang's way grounds intends its claims can't beryllium dismissed, but its penchant for publicity intends its claims besides merit observant consideration.

- Simon Sharwood

What happens successful Vegas ...

Parents of students successful Las Vegas's Clark County School District (CCSD) are connected separator aft receiving emails filled pinch their children's individual accusation pursuing a breach astatine nan schoolhouse strategy earlier this month. 

Speaking to section outlet News 3 Las Vegas, 1 genitor who received an email titled "CCSD leak" connected Wednesday reported a informing that their child's accusation had been released online, on pinch a trio of PDF files containing "my children's pictures, each of their interaction information, email addresses, student ID numbers, my information, our address," nan genitor said. "That is truthful scary." 

It wasn't made clear successful nan study whether nan sender demanded a ransom of immoderate kind, but that mightiness not beryllium necessary. As we request not punctual readers, PDF files are frequently utilized to smuggle malware to unsuspecting targets – and what amended measurement to get personification to unfastened a malicious archive than threatening their children's safety?

CCSD reported nan breach to parents and unit connected October 16, 11 days aft it first detected an intrusion successful its email environment. CCSD claimed nan cyber criminal(s) down nan intrusion "accessed constricted individual accusation related to a subset of students, parents, and employees," and said it was successful nan process of notifying everyone affected. 

Technical specifications of CCSD's email situation are not known, but nan territory locked down entree to its Google Workspaces aft reporting nan intrusion, forcing password resets for each unit and students and restricting entree to territory Gmail and Google Drives from extracurricular its ain network. 

According to DataBreaches, extended information from nan territory was published connected a record sharing tract this week, but has since been taken down. Along pinch individual email and demographic information connected 25k territory graduates, disciplinary records, wellness data, soul communications, territory financial accusation and different information was each reportedly portion of nan leak, immoderate of which DataBreaches was capable to verify.

CCSD didn't respond to questions from The Register, arsenic it's closed for a agelong weekend. 

CISA asks Congress not to trim its budget

The US Cybersecurity and Infrastructure Security Agency is successful a bully spot correct now, its executive adjunct head for cybersecurity Eric Goldstein told legislature this week, earlier informing a projected 25 percent trim to its fund would beryllium "catastrophic." 

"Right now, we are astatine nan constituent wherever we person reasonable assurance and our visibility into risks facing national agencies," Goldstein said. "We would not beryllium capable to prolong that visibility pinch that important of a fund cut, and our adversaries would unequivocally utilization those gaps."

The 25 percent gutting was submitted arsenic an amendment [PDF] to nan Department of Homeland Security fund proposal for 2024, and was yet rejected precocious past period – though nan move could beryllium attempted again.

CISA has go a bugbear for right-wing Republicans who've accused it of suppressing free reside owed to its domiciled successful combating predetermination misinformation – which allegedly progressive it acting arsenic a "switchboard" for moderation requests to societal media platforms. CISA has since been barred from coordinating pinch societal media sites by a tribunal decision, which it has appealed.

Six princes – er, cyber criminals, arrested successful Nigeria

The Nigerian Police Force (NPF) has dismantled a "sophisticated cyber crime syndicate" operating a recruiting and mentoring hub retired of nan nation's superior of Abuja, complete pinch six arrests and conscionable arsenic galore confessions. 

The accused confessed to varying degrees of engagement successful personality theft, hacking and trading of compromised Facebook accounts, romance scams, computer-related forgery and different computer-related fraud punishable nether Nigerian cyber crime laws, Nigerian constabulary said successful a press release published connected X this week. 

Further intelligence reports bespeak nan group has "deep involvement" successful higher-profile cyber crimes for illustration business email discuss and high-yield finance fraud. The investigation is ongoing, NPF said, and nan six arrested suspects won't beryllium charged until nan investigation is complete. 

"Efforts to apprehend nan fleeing members of this criminal web are underway," according to NPF, suggesting nan pack is bigger than its six imprisoned members – though it wouldn't opportunity really galore group it's still looking for. ®