A ‘murky’ web sees many purchases run through Singapore in a way that hides potential users Indonesia has acquired spyware and surveillance technologies through a “murky network” that extends into Israel, Greece, Singapore and Malaysia for equipment sourcing, according to…
Category: The Register – Security
Chinese government website security is often worryingly bad, say Chinese researchers
Bad configurations, insecure versions of jQuery, and crummy cookies are some of myriad problems Exclusive Five Chinese researchers examined the configurations of nearly 14,000 government websites across the country and found worrying lapses that could lead to malicious attacks, according…
Microsoft, Google do a victory lap around passkeys
Windows giant extends passwordless tech to everyone else Microsoft today said it will now let us common folk — not just commercial subscribers — sign into their Microsoft accounts and apps using passkeys with their face, fingerprint, or device PIN.… This…
Florida man gets 6 years behind bars for flogging fake Cisco kit to US military
Operation busted after dodgy devices ended up at Air Force Miami resident Onur Aksoy has been sentenced to six and a half years in prison for running a multi-million-dollar operation selling fake Cisco equipment that ended up in the US…
Patch up – 4 critical bugs in ArubaOS lead to remote code execution
Ten vulnerabilities in total for admins to apply Network admins are being urged to patch a bundle of critical vulnerabilities in ArubaOS that lead to remote code execution as a privileged user.… This article has been indexed from The Register…
Federal frenzy to patch gaping GitLab account takeover hole
Warning comes exactly a year after the vulnerability was introduced The US Cybersecurity and Infrastructure Security Agency (CISA) is forcing all federal agencies to patch a critical vulnerability in GitLab’s Community and Enterprise editions, confirming it is very much under…
Think tank: China’s tech giants refine and define Beijing’s propaganda push
Taking down TikTok won’t stop the CCP’s attempt to control global narratives Chinese tech companies that serve as important links in the world’s digital supply chains are helping Beijing to execute and refine its propaganda strategy, according to an Australian…
REvil ransomware scum sentenced to almost 14 years inside, ordered to pay $16 million
After extorting $700 million from thousands of victims A Ukrainian man has been sentenced to almost 14 years in prison and ordered to pay more than $16 million in restitution for his role in infecting thousands of victims with REvil…
Think tank: China’s tech brands refine and define Beijing’s propaganda push
Taking down TikTok won’t stop the CCP’s attempt to control global narratives Chinese tech companies that serve as important links in the world’s digital supply chains are helping Beijing to execute and refine its propaganda strategy, according to an Australian…
A million Australian pubgoers wake up to find personal info listed on leak site
Allegations fly regarding unpaid contractors and iffy infosec Over a million records describing Australians who visited local pubs and clubs have apparently been posted online.… This article has been indexed from The Register – Security Read the original article: A…
Dropbox dropped the ball on security, haemorrhaging customer and third-party info
Only from its digital doc-signing service, which is isolated from its cloudy storage Dropbox has revealed a major attack on its systems that saw customers’ personal information accessed by unknown and unauthorized entities.… This article has been indexed from The…
Block accused of mass compliance failures that saw digi-dollars reach terrorists
Developer of Square and Cash App reportedly has big back-end problems it was slow to fix Fintech biz Block is reportedly under investigation by US prosecutors over claims by a former employee that lax compliance checks mean its Square and…
Infosec biz boss accused of BS’ing the world about his career, anti-crime product, customers
Intrusion investors went through Blount farce trauma, says SEC Jack Blount, the now-ex CEO of Intrusion, has settled with the SEC over allegations he made false and misleading statements about his infosec firm’s product as well as his own background…
US charges 16 over ‘depraved’ grandparent scams
Vulnerable elderly people tricked into paying tens of thousands over fake car accidents Sixteen people are facing charges from US prosecutors for allegedly preying on the elderly and scamming them out of millions of dollars.… This article has been indexed…
Qantas app glitch sees boarding passes fly to other accounts
Issue now resolved and isn’t thought to be the work of criminals Aussie airline Qantas says its app is now stable following a data breach that saw boarding passes take off from passengers’ accounts.… This article has been indexed from…
Open source programming language R patches gnarly arbitrary code exec flaw
An ACE in the hole for miscreants The open source R programming language – popular among statisticians and data scientists for performing visualization, machine learning, and suchlike – has patched an arbitrary code execution hole that scored a preliminary CVSS…
Open source programming language R patches critical arbitrary code exec flaw
An ACE in the hole for miscreants The open source R programming language has patched an arbitrary code execution hole that scored a preliminary CVSS severity rating of 8.8 out of 10.… This article has been indexed from The Register…
Cyber-bastard jailed for stealing psychotherapy files, blackmailing patients
Vastaamo villain more than doubled reported crime in Nordic nation A cyber-thief who snatched tens of thousands of patients’ sensitive records from a psychotherapy clinic before blackmailing them and then leaking their files online has been caged for six years…
UnitedHealth CEO: ‘Decision to pay ransom was mine’
Congress to hear how Citrix MFA snafu led to massive data theft, $870M+ loss UnitedHealth CEO Andrew Witty will tell US lawmakers Wednesday the cybercriminals who hit Change Healthcare with ransomware used stolen credentials to remotely access a Citrix portal…
NSA guy who tried and failed to spy for Russia gets 262 months in the slammer
Tried to sell top secret docs for the low, low price of $85K A former NSA employee has been sentenced to 262 months in prison for attempting to do freelance as a Russian spy.… This article has been indexed from…