Security News • The Register

Security

Homeland security hopes to scuttle maritime cyber-threats with port infosec testbed

Supply chains, 13M jobs and $649B a year at risk, so Uncle Sam is fighting back - with a request for info

Public Sector05 Sep 2024 |

White House’s new fix for cyber job gaps: Serve the nation in infosec

Now do your patriotic duty and fill one of those 500k open roles, please?

Security05 Sep 2024 | 7

Uncle Sam charges Russian GRU cyber-spies behind 'WhisperGate intrusions'

Feds post $10M bounty for each of the six's whereabouts

Cyber-crime05 Sep 2024 | 3

Cisco's Smart Licensing Utility flaws suggest it's pretty dumb on security

Two critical holes including hardcoded admin credential

Security05 Sep 2024 | 3

Quantum computing is coming – are you ready?

Are you prepared for the day that quantum computing breaks today’s encryption?

Sponsored Feature

Security boom is over, with over a third of CISOs reporting flat or falling budgets

Good news? Security is still getting a growing part of IT budget

CSO05 Sep 2024 | 1

The fingerpointing starts as cyber incident at London transport body continues

Network admins take a ride on the Fright Bus

Cyber-crime05 Sep 2024 | 21

Security biz Verkada to pay $3M penalty under deal that also enforces infosec upgrade

Allowed access to 150K cameras, some in sensitive spots, but has been done for spamming

Security05 Sep 2024 | 3

White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

Russia has seemingly decided who it wants Putin the Oval Office

Security05 Sep 2024 | 60

North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

Feds warn of 'highly tailored, difficult-to-detect social engineering campaigns'

Cyber-crime05 Sep 2024 | 6

Palo Alto takes a big $500M bite out of IBM QRadar

Big Blue also shifts to Prisma SASE to secure its 250,000 workforce

Security04 Sep 2024 | 2

Copilot for Microsoft 365 might boost productivity if you survive the compliance minefield

Loads of governance issues to worry about, and the chance it might spout utter garbage

AI + ML04 Sep 2024 | 19

Planned Parenthood confirms cyber-attack as RansomHub threatens to leak data

93GB of info feared pilfered in Montana by heartless crooks

Cyber-crime04 Sep 2024 | 15

Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade

Researchers find many similarities, and nasty new customizations such as embedded compromised user credentials

Research04 Sep 2024 |

Telegram apologizes to South Korea and takes down smutty deepfakes

Unclear if this is a sign controversial service is cleaning up its act everywhere

Public Sector04 Sep 2024 | 10

Ex-senior New York State staffer charged in cash-for-favors scandal with China

Bagging two posh properties, three luxury cars on a govt salary a bit of a giveaway – allegedly

Public Sector04 Sep 2024 | 5

White House thinks it's time to fix the insecure glue of the internet: Yup, BGP

Better late than never

Networks03 Sep 2024 | 26

UK trio pleads guilty to running $10M MFA bypass biz

Updated Crew bragged they could help crooks raid victims' bank accounts

Cyber-crime03 Sep 2024 | 14

Spamouflage trolls pretend to be American patriots on X, TikTok ahead of US presidential election

No, Abbey is not really a "pure patriotic girl"

Cyber-crime03 Sep 2024 | 36

Data watchdog fines Clearview AI $33M for 'illegal' data collection

Selfie-scraper again claims European law does not apply to it

AI + ML03 Sep 2024 | 14

Popular

Admins wonder if the cloud was such a good idea after all

As AWS, Microsoft, and Google hike some prices, it's time to open up the ROI calculator

AT&T sues Broadcom for 'breaking' VMware support extension contract

Telco giant slams silicon-and-software shop for trying to bully it into buying software it doesn't want or need, at huge prices

The fingerpointing starts as cyber incident at London transport body continues

Network admins take a ride on the Fright Bus

Starlink U-turns, will block X in Brazil after all

Musk fought the law and the law won... for now

What is this computing industry anyway? The dawning era of 32-bit micros

Part 3 And you may ask yourself, 'How do I work this?' And you may ask yourself, 'Where is that large computer?'

Do look up! NASA unfurls massive shiny solar sail in orbit

60 years after Arthur C Clarke wrote Sunjammer, space agency catches up

Copilot for Microsoft 365 might boost productivity if you survive the compliance minefield

Loads of governance issues to worry about, and the chance it might spout utter garbage

White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

Russia has seemingly decided who it wants Putin the Oval Office

Planned Parenthood confirms cyber-attack as RansomHub threatens to leak data

93GB of info feared pilfered in Montana by heartless crooks

Palo Alto takes a big $500M bite out of IBM QRadar

Big Blue also shifts to Prisma SASE to secure its 250,000 workforce

MORE
STORIES

Transport for London confirms cyberattack, assures us all is well

Government body claims there is no evidence of customer data being compromised

Cyber-crime03 Sep 2024 | 30

Application builders get ready

Head down to Grey Matter ISV Partner Day to learn about the latest Microsoft technologies

Telegram CEO was 'too free' on content moderation, says Russian minister

CEO Pavel Durov charged in France, messaging platform insists it abides by EU laws

Security02 Sep 2024 | 20

Novel attack on Windows spotted in phishing campaign run from and targeting China

Resources hosted at Tencent Cloud involved in Cobalt Strike campaign

Research02 Sep 2024 | 3

Check your IP cameras: There's a new Mirai botnet on the rise

Infosec in brief Also, US offering $2.5M for Belarusian hacker, Backpage kingpins jailed, additional MOVEit victims, and more

Security31 Aug 2024 | 22

RansomHub hits 210 victims in just 6 months

The ransomware gang recruits high-profile affiliates from LockBit and ALPHV

Cyber-crime30 Aug 2024 |

Green Berets storm building after compromising its Wi-Fi

Relax, it's just a drill. This time at least

Security30 Aug 2024 | 23

Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers

Updated Infosec hounds say they spotted vulnerability during routine travel in the US

Research30 Aug 2024 | 28

Iran hunts down double agents with fake recruiting sites, Mandiant reckons

Farsi-language posts target possibly-pro-Israel individuals

Security30 Aug 2024 | 2

US indicts duo over alleged Swatting spree that targeted elected officials

Apparently made over 100 fake crime reports and bomb threats

Cyber-crime29 Aug 2024 | 20

What a coincidence. Spyware makers, Russia's Cozy Bear seem to share same exploits

Google researchers note similarities, can't find smoking-gun link

Security29 Aug 2024 | 3

Feds claim sinister sysadmin locked up thousands of Windows workstations, demanded ransom

Sordid search history 'evidence' in case that could see him spend 35 years for extortion and wire fraud

Cyber-crime29 Aug 2024 | 52

Rock Chrome hard enough and get paid half a million

Google revises Chrome Vulnerability Rewards Program with higher payouts for bug hunters

Security29 Aug 2024 |

Brain Cipher claims attack on Olympic venue, promises 300 GB data leak

French police reckon financial system targeted during Summer Games

Cyber-crime29 Aug 2024 | 4

CrowdStrike's meltdown didn't dent its market dominance … yet

Total revenue for Q2 grew 32 percent

Software29 Aug 2024 | 22

Microsoft hosts a security summit but no press, public allowed

op-ed CrowdStrike, other vendors, friendly govt reps…but not anyone who would tell you what happened

Security28 Aug 2024 | 11

Proof-of-concept code released for zero-click critical IPv6 Windows hole

If you haven't deployed August's patches, get busy before others do

OSes28 Aug 2024 | 13

Iran's Pioneer Kitten hits US networks via buggy Check Point, Palo Alto gear

The government-backed crew also enjoys ransomware as a side hustle

Cyber-crime28 Aug 2024 | 5

Dick's Sporting Goods discloses cyberattack

Authorities probing unwanted intrusion; hard questions ahead

Cyber-crime28 Aug 2024 | 11

From Copilot to Copirate: How data thieves could hijack Microsoft's chatbot

Prompt injection, ASCII smuggling, and other swashbuckling attacks on the horizon

Patches28 Aug 2024 | 7

The ultimate dual-use tool for cybersecurity

Sword or plowshare? That depends on whether you're an attacker or a defender

Sponsored Feature

Woman uses AirTags to nab alleged parcel-pinching scum

Phew! Consumer-grade tracking devices are good for more than finding your keys and stalking

Personal Tech28 Aug 2024 | 98

Chinese broadband satellites may be Beijing's flying spying censors, think tank warns

Ground stations are the perfect place for the Great Firewall to block things China finds unpleasant

Networks28 Aug 2024 | 27

Intel's Software Guard Extensions broken? Don't panic

More of a storm in a teacup

Systems27 Aug 2024 | 9

Volt Typhoon suspected of exploiting Versa SD-WAN bug since June

update The same Beijing-backed cyber spy crew the feds say burrowed into US critical infrastructure

Cyber-crime27 Aug 2024 | 3

Microsoft security tools questioned for treating employees as threats

Cracked Labs examines how workplace surveillance turns workers into suspects

Security27 Aug 2024 | 68

Microsoft mistake blows up admins' inboxes with fake malware alerts

Updated Legitimate emails misclassified in software snafu

Security26 Aug 2024 | 11

Watchdog warns FBI is sloppy on secure data storage and destruction

update National security data up for grabs, Office of the Inspector General finds

Security26 Aug 2024 | 6

Seattle airport 'possible cyberattack' snarls travel yet again

No word yet on if ransomware is to blame

Security26 Aug 2024 | 11

AMD internal data reportedly offered for sale

Second sensitive info theft claimed by the same crims since June

Cyber-crime26 Aug 2024 | 1

31.5M invoices, contracts, patient consent forms, and more exposed to the internet

Exclusive Unprotected database with 12 years of biz records yanked offline

CSO26 Aug 2024 | 28

Cognizant alleges Infosys swiped its trade secrets

Sueball suggests outsourcer went out of bounds by developing competing product

CxO26 Aug 2024 | 9

Alleged Karakut ransomware scumbag charged in US

Infosec in brief Plus: Microsoft issues workaround for dual-boot crashes; ARRL cops to ransom payment, and more

Security26 Aug 2024 | 2

US sues Georgia Tech over alleged cybersecurity failings as a Pentagon contractor

Rap sheet spells out major no-nos after disgruntled staff blow whistle

Security23 Aug 2024 | 22

Uniting the brightest minds in security, network and cloud

Immerse is Cloudflare’s premier annual conference in Southeast Asia

Partner Content

SolarWinds left critical hardcoded credentials in its Web Help Desk product

Why go to the effort of backdooring code when devs will basically do it for you accidentally anyway

CSO22 Aug 2024 | 18

CrowdStrike deja vu as 'performance issue' leaves systems sluggish

Not related to the massive outage in July, security biz spokesperson told us

Security22 Aug 2024 | 14

Halliburton probes 'an issue' disrupting business ops

Updated What could the problem be? Reportedly, a cyberattack

Security22 Aug 2024 | 9

Ransomware batters critical industries, but takedowns hint at relief

Whether attack slowdown continues downward trend is the million dollar question that security researchers can't answer

Cyber-crime22 Aug 2024 | 1

This uni thought it would be a good idea to do a phishing test with a fake Ebola scare

Needless to say, it backfired in a big way

CSO22 Aug 2024 | 118

Kick off early Octoberfest with an EUC-fest

Visit IGEL’s DISRUPT Munich event this September to learn more about the latest end user computing technologies

Cisco calls for United Nations to revisit cyber-crime convention

Echoes human rights groups' concerns that it could suppress free speech and more

Security22 Aug 2024 | 13

Foiling bot attacks with AI-powered telemetry

Why accurate threat detection and faster response times require a comprehensive view of the threat landscape

Partner Content

You probably want to patch this critical GitHub Enterprise Server bug now

Unless you're cool with an unauthorized criminal enjoying admin privileges to comb through your code

Patches21 Aug 2024 |

110K domains targeted in 'sophisticated' AWS cloud extortion campaign

Updated If you needed yet another reminder of what happens when security basics go awry

Research21 Aug 2024 | 4

Russia tells citizens to switch off home surveillance because the Ukrainians are coming

Forget about your love life too, no dating apps until the war is over

Security21 Aug 2024 | 169

Deadbeat dad faked his own death by hacking government databases

Hoped to dodge child support payments, now faces 81 months inside – and a bigger bill than ever

Cyber-crime21 Aug 2024 | 72

Chipmaker Microchip reveals cyber attack whacked manufacturing capacity

Defense contractor gets hacked – what's the worst that could happen

Security21 Aug 2024 | 3

Plane tracker app FlightAware admits user data exposed for years

Updated Privacy blunder alert omits number of key details

Security20 Aug 2024 | 42

Iran named as source of Trump campaign phish, leaks

Political stirrer Roger Stone may have been a weak link after personal emails cracked

Security20 Aug 2024 | 40

Digital wallets can allow purchases with stolen credit cards

Researchers find it's possible to downgrade authentication checks, and shabby token refresh policies

Research20 Aug 2024 | 32

OpenAI kills Iranian accounts using ChatGPT to write US election disinfo

12 on X and one on Instagram caught in the crackdown

Cyber-crime19 Aug 2024 | 5

Multiple flaws in Microsoft macOS apps unpatched despite potential risks

Windows giant tells Cisco Talos it isn't fixing them

Research19 Aug 2024 | 21

National Public Data tells officials 'only' 1.3M people affected by intrusion

Investigators previously said the number was much, much higher

Cyber-crime19 Aug 2024 | 6

RansomHub-linked EDR-killing malware spotted in the wild

Infosec in brief Also: Your external-facing NetSuite sites need a review; five popular malware varieties for Q2, and more

Security19 Aug 2024 | 1

After nearly 3B personal records leak online, Florida data broker confirms it was ransacked by cyber-thieves

Names, addresses, Social Security numbers, more all out there

Cyber-crime16 Aug 2024 | 43

Unicoin hints at potential data meddling after G-Suite compromise

Attacker locked out all staff for four days

Cyber-crime16 Aug 2024 | 9

DARPA, ARPA-H award $14m to 7 AIxCC semifinalists, with a catch

Teams wanting the cash have to commit to handing their models to OpenSSF after next year's final

Security15 Aug 2024 | 4

Google raps Iran's APT42 for raining down spear-phishing attacks

US politicians and Israeli officials among the top targets for the IRGC’s cyber unit

Research15 Aug 2024 | 1

Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail

He’ll also have to pay back $1.2 million from fraudulent transactions he facilitated

Cyber-crime15 Aug 2024 | 5

Mad Liberator extortion crew emerges on the cyber-crook scene

Anydesk is its access tool of choice

Cyber-crime15 Aug 2024 | 4

Over 40 million Kakao Pay users' data somehow ended up with Alipay

Payment arm of Korean messaging app denies any illegal activity

Security15 Aug 2024 | 10

China-linked cyber-spies infect Russian govt, IT sector

No, no, go ahead, don't let us stop you, Xi

Research15 Aug 2024 | 17

Russian cyber snoops linked to massive credential-stealing campaign

Citizen Lab also spots a COLDWASTREL swimming in the Rivers of Phish

Cyber-crime14 Aug 2024 |

Texas sues GM for selling driver data to analytics, insurance companies

Lone Star State alleges GM cashed in with "millions in lump sum payments" from the sale

Security14 Aug 2024 | 30

Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster

Three state attorneys general probed the company and found plenty to chastise

Cyber-crime14 Aug 2024 | 3

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

Biz admits turning human women into faceless, sexualized furniture was a 'tone deaf' marketing ploy

Security14 Aug 2024 | 202

Is Lenovo a blind spot in US anti-China security measures?

Opinion Questions raised as one of the world's largest PC makers joins America's critical defense team

Security14 Aug 2024 | 47

Indian telcos to cut off scammy, spammy, telemarketers for two whole years

There's a blockchain involved so it's totally going to stop you getting those calls

Public Sector14 Aug 2024 | 33

NIST finalizes trio of post-quantum encryption standards

Nicely ahead of that always-a-decade-away moment when all our info becomes an open book

Security14 Aug 2024 | 18

Microsoft patches scary wormable hijack-my-box-via-IPv6 security bug and others

Patch Tuesday Plus more pain for Intel which fixed 43 bugs, SAP and Adobe also in on the action

Patches14 Aug 2024 | 24

Six ransomware gangs behind over 50% of 2024 attacks

Plus many more newbies waiting in the wings

Cyber-crime13 Aug 2024 |

US accuses man of being 'elite' ransomware pioneer they've hunted for years

Authorities allege 'J.P. Morgan' practiced ‘extreme operational and online security’

Cyber-crime13 Aug 2024 | 7

Feds bust minor league Radar/Dispossessor ransomware gang

The takedown may be small but any ransomware gang sent to the shops is good news in our book

Cyber-crime13 Aug 2024 | 5

Orion SA says scammers conned company out of $60 million

Incident sounds like a BEC fraud targeting an unwitting staffer

Cyber-crime13 Aug 2024 | 7

Who uses LLM prompt injection attacks IRL? Mostly unscrupulous job seekers, jokesters and trolls

Because apps talking like pirates and creating ASCII art never gets old

AI + ML13 Aug 2024 | 17

'Digital arrest' scams are big in India and may be spreading

Bad guys claim they're cops, keep you on hold for hours until you pay to make loved ones' crimes go away

Cyber-crime13 Aug 2024 | 5

AMD won’t patch Sinkclose security bug on older Zen CPUs

Updated Kernel mode not good enough for you? Maybe you'll like SMM of this

Patches13 Aug 2024 | 14

Attacker steals personal data of 200K+ people with links to Arizona tech school

Nearly 50 different data points were accessed by cybercrim

Cyber-crime12 Aug 2024 | 7

Mega money, unfathomable violence pervade thriving underground doxxing scene

Black Hat It also attracts exactly the type of unempathetic people you would think it does

Cyber-crime12 Aug 2024 | 8

The Register icon Biting the hand that feeds IT

About Us

Our Websites

Your Privacy

Situation Publishing

Copyright. All rights reserved © 1998–2024