Just snapping the webcam shutter closed won’t keep a user safe online New research has shown that while many Brits will snap shut a laptop camera in the name of privacy, a worrying amount will just as happily shovel all…
Category: The Register – Security
Entrust faces years of groveling to regain browsers’ trust, say rival chiefs
Sectigo bosses claim it’s only a matter of time before Microsoft and Apple drop Big E from their root stores too After falling down in the estimations of major browser makers Google and Mozilla, Entrust faces a lengthy fight on…
Cloud storage lockers from Microsoft and Google used to store and spread state-sponsored malware
Why run your own evil infrastructure when Big Tech offers robust tools hosted at trusted URLs? Black Hat State-sponsored cyber spies and criminals are increasingly using legitimate cloud services to attack their victims, according to Symantec’s threat hunters who have…
Samsung boosts bug bug bounty to a cool million for cracks of the Knox Vault subsystem
Good luck, crackers: It’s an isolated processor and storage enclave, and top dollar only comes from a remote attack Samsung has dangled its first $1 million bug bounty for anyone who successfully compromises Knox Vault – the isolated subsystem the…
Faulty instructions in Alibaba’s T-Head C910 RISC-V CPUs blow away all security
Let’s get physical, physical … I don’t wanna hear your MMU talk Black Hat Computer security researchers at the CISPA Helmholtz Center for Information Security in Germany have found serious security flaws in some of Alibaba subsidiary T-Head Semiconductor’s RISC-V…
Fighting AI fire with AI fire
Palo Alto Networks reveals how AI can be harnessed to strengthen cyber security defenses David Gordon Sponsored Post Hackers and cyber criminals are busy finding new ways of using AI to launch attacks on businesses and organizations often unprepared to…
Small CSS tweaks can help nasty emails slip through Outlook’s anti-phishing net
A simple HTML change and the warning is gone! Researchers say cybercriminals can have fun bypassing one of Microsoft’s anti-phishing measures in Outlook with some simple CSS tweaks.… This article has been indexed from The Register – Security Read the…
Police take just 2 days to recover $40M stolen in business email scam
Timor-Leste is a known cybercrime hotspot Two days is all it took for Interpol to recover more than $40 million worth of stolen funds in a recent business email compromise (BEC) heist, the international cop shop said this week.… This…
EQT buys majority share in Swiss cybersecurity biz Acronis
Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified Acronis, the Swiss disaster recovery turned cybersecurity firm and catch-all for managed service providers, has been majority acquired by Europe’s largest private equity firm, EQT.… This…
UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack
Nearly 83,000 people had their data stolen amid chaos that struck NHS healthcare The UK’s data protection watchdog says it plans to fine a managed software provider to the NHS £6.09 million ($7.7 million) for failings that led to a…
SharpRhino malware targets IT admins – Hunters International gang suspected
Fake Angry IP Scanner will make you furious – or maybe remind you of how the Hive gang went about its banal business The latest malware from upstart criminal gang Hunters International appears to be targeting network admins, using malicious…
Georgia’s voter portal gets a crash course in client versus backend input validation
Trying to cancel a citizen’s registration would be caught by humans no matter what the page said, officials say The US state of Georgia has a website for cancelling voter registration, and it’s had a bumpy start.… This article has…
Microsoft punches back at Delta Air Lines and its legal threats
SatNad himself offered CrowdStrike recovery help, Redmond says, before suggesting airline’s IT is in a mess Microsoft has labelled Delta Air Lines’ accusations it’s partly to blame for the outages caused by CrowdStrike’s buggy software “false” and “misleading” – and…
CrowdStrike hires outside security outfits to review troubled Falcon code
And reveals the small mistake that bricked 8.5M Windows boxes CrowdStrike has hired two outside security firms to review the Falcon functionality that sparked a global IT outage last month – but it may not have an awful lot to…
CrowdStrike hires outside security outfits to review Falcon code
And reveals the small mistake that bricked 8.5M Windows boxes CrowdStrike has hired two outside security firms to review the Falcon functionality that sparked a global IT outage last month – but it may not have an awful lot to…
CrowdStrike hires outside security firms to review Falcon code
And reveals the small mistake that bricked 8.5 million Windows boxes CrowdStrike has hired two outside security firms to review the Falcon sensor code that sparked a global IT outage last month – but it may not have an awful…
Google splats device-hijacking exploited-in-the-wild Android kernel bug among others
And Qualcomm addresses ‘permanent denial of service’ flaw in its stuff Google released 46 fixes for Android in its August security patch batch, including one for a Linux kernel flaw in the mobile OS that can lead to remote code…
Sonic Automotive says ransomware-linked CDK software outage cost it $30M
Misery loves company – all of its competitors were also negatively impacted One of the US’s largest car dealerships says the IT outage caused by CDK Global’s June ransomware attack cost it approximately $30 million.… This article has been indexed…
Bad apps bypass Windows security alerts for six years using newly unveiled trick
Windows SmartScreen and Smart App Control both have weaknesses of which to be wary Elastic Security Labs has lifted the lid on a slew of methods available to attackers who want to run malicious apps without triggering Windows’ security warnings,…
Users call on Microsoft to update Outlook’s friendly name feature
That one weird thing in Outlook that gives phishers and scammers an in to an inbox Users are urging Microsoft to rethink how it shows sender email addresses in Outlook because phishing criminals are taking advantage, using helpful, friendly names…