Can’t reach someone’s private server on localhost from outside? No problem A years-old security oversight has been addressed in basically all web browsers – Chromium-based browsers, including Microsoft Edge and Google Chrome, WebKit browsers like Apple’s Safari, and Mozilla’s Firefox.……
Category: The Register – Security
Hello? Are you talking on a Cisco SPA300 or SPA500 IP phone? Now’s the time to junk ’em
Multiple critical flaws found and they won’t be fixed A boffin from British defence contractor BAE has found three critical flaws in Cisco’s Small Business SPA300 and SPA500 IP phones – and another couple of nasties – none of which…
Delta: CrowdStrike’s offer to help in Falcon meltdown was too little, too late
Airline unimpressed with ‘unhelpful and untimely’ phone call from CEO, Falcon maker says claims untrue Delta Air Lines has come out swinging at CrowdStrike in a letter accusing the security giant of trying to “shift the blame” for the IT…
US ‘laptop farm’ man accused of outsourcing his IT jobs to North Korea to fund weapons programs
American and Brit firms thought they were employing a Westerner, but not so, it’s alleged The FBI today arrested a Tennessee man suspected of running a “laptop farm” that got North Koreans, posing as Westerners, IT jobs at American and…
US ‘laptop farm’ man accused of outsourcing his IT jobs to North Koreans to raise funds for weapons
American and Brit firms thought they were employing a Westerner, but not so, it’s alleged The FBI today arrested a Tennessee man suspected of running a “laptop farm” that got North Koreans, posing as Westerners, IT jobs at American and…
Using 1Password on Mac? Patch up if you don’t want your Vaults raided
Hundreds of thousands of users potentially vulnerable Password manager 1Password is warning that all Mac users running versions before 8.10.36 are vulnerable to a bug that allows attackers to steal vault items.… This article has been indexed from The Register…
US elections have never been more secure, says CISA chief
Election tech is fine – it’s all thise idiots buying into the propaganda that’s worrying Jen Easterly Black Hat US Cybersecurity and Infrastructure Security Agency (CISA) director Jen Easterly and her counterparts from the UK and EU want the world…
Report: Tech misconceptions plague the IT world
Just snapping the webcam shutter closed won’t keep a user safe online New research has shown that while many Brits will snap shut a laptop camera in the name of privacy, a worrying amount will just as happily shovel all…
Entrust faces years of groveling to regain browsers’ trust, say rival chiefs
Sectigo bosses claim it’s only a matter of time before Microsoft and Apple drop Big E from their root stores too After falling down in the estimations of major browser makers Google and Mozilla, Entrust faces a lengthy fight on…
Cloud storage lockers from Microsoft and Google used to store and spread state-sponsored malware
Why run your own evil infrastructure when Big Tech offers robust tools hosted at trusted URLs? Black Hat State-sponsored cyber spies and criminals are increasingly using legitimate cloud services to attack their victims, according to Symantec’s threat hunters who have…
Samsung boosts bug bug bounty to a cool million for cracks of the Knox Vault subsystem
Good luck, crackers: It’s an isolated processor and storage enclave, and top dollar only comes from a remote attack Samsung has dangled its first $1 million bug bounty for anyone who successfully compromises Knox Vault – the isolated subsystem the…
Faulty instructions in Alibaba’s T-Head C910 RISC-V CPUs blow away all security
Let’s get physical, physical … I don’t wanna hear your MMU talk Black Hat Computer security researchers at the CISPA Helmholtz Center for Information Security in Germany have found serious security flaws in some of Alibaba subsidiary T-Head Semiconductor’s RISC-V…
Fighting AI fire with AI fire
Palo Alto Networks reveals how AI can be harnessed to strengthen cyber security defenses David Gordon Sponsored Post Hackers and cyber criminals are busy finding new ways of using AI to launch attacks on businesses and organizations often unprepared to…
Small CSS tweaks can help nasty emails slip through Outlook’s anti-phishing net
A simple HTML change and the warning is gone! Researchers say cybercriminals can have fun bypassing one of Microsoft’s anti-phishing measures in Outlook with some simple CSS tweaks.… This article has been indexed from The Register – Security Read the…
Police take just 2 days to recover $40M stolen in business email scam
Timor-Leste is a known cybercrime hotspot Two days is all it took for Interpol to recover more than $40 million worth of stolen funds in a recent business email compromise (BEC) heist, the international cop shop said this week.… This…
EQT buys majority share in Swiss cybersecurity biz Acronis
Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified Acronis, the Swiss disaster recovery turned cybersecurity firm and catch-all for managed service providers, has been majority acquired by Europe’s largest private equity firm, EQT.… This…
UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack
Nearly 83,000 people had their data stolen amid chaos that struck NHS healthcare The UK’s data protection watchdog says it plans to fine a managed software provider to the NHS £6.09 million ($7.7 million) for failings that led to a…
SharpRhino malware targets IT admins – Hunters International gang suspected
Fake Angry IP Scanner will make you furious – or maybe remind you of how the Hive gang went about its banal business The latest malware from upstart criminal gang Hunters International appears to be targeting network admins, using malicious…
Georgia’s voter portal gets a crash course in client versus backend input validation
Trying to cancel a citizen’s registration would be caught by humans no matter what the page said, officials say The US state of Georgia has a website for cancelling voter registration, and it’s had a bumpy start.… This article has…
Microsoft punches back at Delta Air Lines and its legal threats
SatNad himself offered CrowdStrike recovery help, Redmond says, before suggesting airline’s IT is in a mess Microsoft has labelled Delta Air Lines’ accusations it’s partly to blame for the outages caused by CrowdStrike’s buggy software “false” and “misleading” – and…