CISA calls for ‘fundamental, security-focused reforms’ to happen ASAP, delaying work on other software A review of the June 2023 attack on Microsoft’s Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a…
Category: The Register – Security
Microsoft slammed for lax security that led to Exchange Online attack
CISA calls for ‘fundamental, security-focused reforms’ to happen ASAP, delaying work on other software A review of the June 2023 attack on Microsoft’s Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a…
Feds finally decide to do something about years-old SS7 spy holes in phone networks
And Diameter, too, for good measure The FCC appears to finally be stepping up efforts to secure decades-old flaws in American telephone networks that are allegedly being used by foreign governments and surveillance outfits to remotely spy on and monitor…
OWASP server blunder exposes decade of resumes
Irony alerts: Open Web Application Security Project Foundation suffers lapse A misconfigured MediaWiki web server allowed digital snoops to access members’ resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.… This article has been indexed…
OWASP breach exposes decade of resumes due to misconfigured server
Irony alerts: Open Web Application Security Project Foundation suffers lapse A misconfigured MediaWiki web server allowed digital snoops to access members’ resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.… This article has been indexed…
Pandabuy admits to data breach of 1.3 million unique records
Nothing says ‘sorry’ like 10 percent off shipping for a month Ecommerce platform Pandabuy has apologized after two cybercriminals were spotted hawking personal data belonging to 1.3 million customers.… This article has been indexed from The Register – Security Read…
Microsoft warns deepfake election subversion is disturbingly easy
Simple stuff like slapping on a logo fools more folks and travels further As hundreds of millions of voters around the globe prepare to elect their leaders this year, there’s no question that trolls will try to sway the outcomes…
Rubrik files to go public following alliance with Microsoft
Cloud cyber resilience model could raise $700M despite $278M losses Cloud security provider Rubrik has filed for an IPO on the New York Stock Exchange following a flurry of similar flotations.… This article has been indexed from The Register –…
Polish officials may face criminal charges in Pegasus spyware probe
Victims of the powerful surveillance tool will soon find out the truth Former Polish government officials may face criminal charges following an investigation into their use of the notorious spyware Pegasus to surveil political opponents and others.… This article has…
INC Ransom claims to be behind ‘cyber incident’ at UK city council
This follows attack on NHS services in Scotland last week The cyber skids at INC Ransom are claiming responsbility for the ongoing cybersecurity incident at Leicester City Council, according to a post caught by eagle-eyed infosec watchers.… This article has…
Happy 20th birthday Gmail, you’re mostly grown up – now fix the spam
Senders of more than 5K messages a day are in the crosshairs It was 20 years ago on Monday that Google unleashed Gmail on the world, and the chocolate factory is celebrating with new rules that just might, hopefully, cut…
Apple’s GoFetch silicon security fail was down to an obsession with speed
Ye cannae change the laws of physics, but you can change your mind Opinion Apple is good at security. It’s good at processors. Thus GoFetch, a major security flaw in its processor architecture, is a double whammy.… This article has…
Six banks share customer info to help Singapore fight money laundering
PLUS: Google Cloud ANZ boss departs; Japan revives airliner ambitions; China-linked attackers target Asian entities ASIA IN BRIEF Singapore’s Monetary Authority on Monday launched an application, intuitively named “COllaborative Sharing of Money Laundering/TF Information & Cases” (COSMIC for short, obviously)…
US House of Reps tells staff: No Microsoft Copilot for you!
At least not until Redmond’s government edition is ready to roll Staff working at the US House Of Representatives have been barred from using Microsoft’s Copilot chatbot and AI productivity tools, pending the launch of a version tailored to the…
Malicious xz backdoor reveals fragility of open source
This time, we got lucky. It mostly affected bleeding-edge distros. But that’s not a defense strategy Analysis The discovery last week of a backdoor in a widely used open source compression library called xz could have been a security disaster…
Nearly 3M people hit in Harvard Pilgrim healthcare data theft
Also, TheMoon botnet back for EoL SOHO routers, Sellafield to be prosecuted for ‘infosec failures’, plus critical vulns Infosec in brief Nearly a year on from the discovery of a massive data theft at healthcare biz Harvard Pilgrim, and the…
Ex-White House CIO tells The Reg: TikTok ban may be diplomatic disaster
Theresa Payton on why US needs a national privacy law Interview Congress is mulling legislation that will require TikTok’s Chinese parent ByteDance to cut ties with the video-sharing mega-app, or the social network will be banned in the USA.… This…
AT&T admits massive 70m+ mid-March data dump is real, but claims it’s years old
Time to update that password – and four-digit account pin, which was also among the pilfered records That rumored AT&T dark web customer data dump from mid-March has been confirmed, and it’s a whopper: A total of more than 73…
Rust developers at Google are twice as productive as C++ teams
Code shines up nicely in production, says Chocolate Factory’s Bergstrom Echoing the past two years of Rust evangelism and C/C++ ennui, Google reports that Rust shines in production, to the point that its developers are twice as productive using the…
Malicious SSH backdoor sneaks into xz, Linux world’s data compression library
Red Hat in all caps says STOP USAGE OF ANY FEDORA RAWHIDE INSTANCES Red Hat on Friday warned that a malicious backdoor found in the widely used data compression library called xz may be present in Fedora Linux 40 and…