InfoSecBulletin Cybersecurity for mankind
The UK government plans to ban public sector and critical infrastructure organizations from paying ransomware ransoms. The proposed legislation would apply to local councils, schools, and the NHS.
“Ransomware is estimated to cost the UK economy millions of pounds each year, with recent high-profile ransomware attacks highlighting the severe operational, financial, and even life-threatening risks. The ban would target the business model that fuels cyber criminals’ activities and makes the vital services the public rely on a less attractive target for ransomware groups,” the UK government said.
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
“We’re determined to smash the cyber criminal business model and protect the services we all rely on as we deliver our Plan for Change. By working in partnership with industry to advance these measures, we are sending a clear signal that the UK is united in the fight against ransomware,” Security Minister Dan Jarvis added.
Businesses not covered by the proposed ban must inform the government before making a ransom payment to ensure it doesn’t violate laws on transfers to sanctioned cybercriminal groups, many of which are based in Russia.
A mandatory reporting system is being developed to help law enforcement track attackers and support victims.
The UK government announced a plan after a public consultation in January. This plan includes a ban on ransomware payments for public sector bodies and critical infrastructure, along with mandatory reporting of ransomware incidents.
Ransomware is seen as the biggest cybercrime threat in the UK and is regarded as a national security risk by the NCSC and the NCA.
In recent years, multiple high-profile UK organizations have been hit by ransomware attacks, including the NHS and the British Library.
Co-op CEO Shirine Khoury-Haq said:
“We know first-hand the damage and disruption cyber-attacks cause to businesses and communities. That’s why we welcome the government’s focus on Cyber Crime.
What matters most is learning, building resilience, and supporting each other to prevent future harm. This is a step in the right direction for building a safer digital future.
These robust proposals are part of the government’s Plan for Change to defend businesses, services, and infrastructure against cyber threats to better protect the public.”
