An ACE in the hole for miscreants The open source R programming language has patched an arbitrary code execution hole that scored a preliminary CVSS severity rating of 8.8 out of 10.… This article has been indexed from The Register…
Category: The Register – Security
Cyber-bastard jailed for stealing psychotherapy files, blackmailing patients
Vastaamo villain more than doubled reported crime in Nordic nation A cyber-thief who snatched tens of thousands of patients’ sensitive records from a psychotherapy clinic before blackmailing them and then leaking their files online has been caged for six years…
UnitedHealth CEO: ‘Decision to pay ransom was mine’
Congress to hear how Citrix MFA snafu led to massive data theft, $870M+ loss UnitedHealth CEO Andrew Witty will tell US lawmakers Wednesday the cybercriminals who hit Change Healthcare with ransomware used stolen credentials to remotely access a Citrix portal…
NSA guy who tried and failed to spy for Russia gets 262 months in the slammer
Tried to sell top secret docs for the low, low price of $85K A former NSA employee has been sentenced to 262 months in prison for attempting to do freelance as a Russian spy.… This article has been indexed from…
NSA employee who tried and failed to spy for Russia gets 262 months in the slammer
Tried to sell top secret docs for the low, low price of $85k A former NSA employee has been sentenced to 262 months in prison for attempting to do freelance as a Russian spy.… This article has been indexed from…
European Commission starts formal probe of Meta over election misinformation
Europe takes action after Facebook parent withdraws monitoring tool The European Commission has launched formal proceedings against Meta, alleging failure to properly monitor distribution by “foreign actors” of political misinformation before June’s European elections.… This article has been indexed from…
Apple’s ‘incredibly private’ Safari is not so private in Europe
Infosec eggheads find iGiant left EU iOS 17 users open to being tracked around the web Apple’s grudging accommodation of European antitrust rules by allowing third-party app stores on iPhones has left users of its Safari browser exposed to potential…
AT&T, Verizon, Sprint, T-Mobile US fined $200M for selling off people’s location info
Carriers claim real culprits are getting away with it – the data brokers The FCC on Monday fined four major US telcos almost $200 million for “illegally” selling subscribers’ location information to data brokers.… This article has been indexed from…
Google blocked 2.3M apps from Play Store last year for breaking the G law
Third of a million developer accounts kiboshed, too Google says it stopped 2.28 million Android apps from being published in its official Play Store last year because they violated security rules.… This article has been indexed from The Register –…
London Drugs closes all of its pharmacies following ‘cybersecurity incident’
Canadian stores shuttered ‘until further notice’ Canadian pharmacy chain London Drugs has closed all of its stores until further notice following a “cybersecurity incident.”… This article has been indexed from The Register – Security Read the original article: London Drugs…
France willing to buy key Atos assets to keep them French
Finance minister says government has interests in IT giant’s ‘sovereign activities’ The French government has tabled an offer to buy key assets of ailing IT giant Atos after the company late last week almost doubled its estimate of the cash…
UK lays down fresh legislation banning crummy default device passwords
New laws mean vendors need to make clear how long you’ll get updates too Smart device manufacturers will have to play by new rules in the UK as of today, with laws coming into force to make it more difficult…
Watchdog reveals lingering Google Privacy Sandbox worries
Ad tech rewrite to replace web cookies still not to regulatory taste The UK Competition and Markets Authority (CMA) still has privacy and competition concerns about Google’s Privacy Sandbox advertising toolkit, which explains why the ad giant recently again delayed…
Discord dismantles Spy.pet site that snooped on millions of users
ALSO: Infostealer spotted hiding in CDN cache, antivirus update hijacked to deliver virus, and some critical vulns Infosec in brief They say sunlight is the best disinfectant, and that appears to have been true in the case of Discord data…
The next step up for high-impact identity authorization
How SSH Communications Security cuts through the hype around Zero Trust to secure the connections that matter Sponsored Feature As business enters the 2020s, organizations find themselves protecting fast-expanding digital estates using security concepts that are decades old.… This article…
Kaiser Permanente handed over 13.4M people’s data to Microsoft, Google, others
Ouch! Millions of Kaiser Permanente patients’ data was likely handed over to Google, Microsoft Bing, X/Twitter, and other third-parties, according to the American healthcare giant.… This article has been indexed from The Register – Security Read the original article: Kaiser…
Kaiser Permanente shared 13.4M people’s data with Microsoft Bing, Google, others
Ouch! Millions of Kaiser Permanente patients’ data was likely shared with Google, Microsoft Bing, X/Twitter, and other third-parties, according to the American healthcare giant.… This article has been indexed from The Register – Security Read the original article: Kaiser Permanente…
Second time lucky for Thoma Bravo, which scoops up Darktrace for $5.3B
Analysts brand deal a ‘nail in the coffin’ for UK tech investment Private equity investor Thoma Bravo has successfully completed a second acquisition attempt of UK-based cybersecurity company Darktrace in a $5.3 billion deal.… This article has been indexed from…
UK’s Investigatory Powers Bill to become law despite tech world opposition
Only minor changes from original proposals that kicked up privacy storm The UK’s contentious Investigatory Powers (Amendment) Bill (IPB) 2024 has officially received the King’s nod of approval and will become law.… This article has been indexed from The Register…
Four trends to top the CISO’s packed agenda
Check out the SANS CISO Primer for tips on hardening your organisation’s security posture in 2024 Sponsored Post Ever get nostalgic for the good old days of cybersecurity protection? When attacks were for the most part amateurish and infrequent, and…
Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim
Huawei is OK, but Xiaomi, OPPO, and Samsung are in strife. And Honor isn’t living its name Many Chinese keyboard apps, some from major handset manufacturers, can leak keystrokes to determined snoopers, leaving perhaps three quarters of a billion people…
Cops cuff man for allegedly framing colleague with AI-generated hate speech clip
Athletics boss accused of deep-faking Baltimore school principal Baltimore police have arrested Dazhon Leslie Darien, the former athletic director of Pikesville High School (PHS), for allegedly impersonating the school’s principal using AI software to make it seem as if he…
Ring dinged for $5.6M after, among other claims, rogue insider spied on ‘pretty girls’
Cash to go out as refunds to punters The FTC today announced it would be sending refunds totaling $5.6 million to Ring customers, paid from the Amazon subsidiary’s coffers.… This article has been indexed from The Register – Security Read…
Two cuffed in Samourai Wallet crypto dirty money sting
Suspects in Portugal and the US said to have laundered over $100M Two men alleged to be co-founders of cryptocurrency biz Samourai Wallet face serious charges and potentially decades in US prison over claims they owned a product that facilitated…
Russia, Iran pose most aggressive threat to 2024 elections, say infoseccers
Google security crew reveal ‘the four Ds’ to be on the watch for It may come as a surprise to absolutely nobody that experts say, in revealing the most prevalent and likely tactics to meddle with elections this year, that…
What to do in the age of the critical breach
Why the triple threat of ransomware, data breaches, and extortion is a cybersecurity crisis The UK government could be forgiven for wanting to forget March 2024 ever happened.… This article has been indexed from The Register – Security Read the…
Indian bank’s IT is so shabby it’s been banned from opening new accounts
After two years of warnings, and outages, regulators ran out of patience with Kotak Mahindra Bank India’s central bank has banned Kotak Mahindra Bank from signing up new customers for accounts or credit cards through its online presence and app.……
Australia’s spies and cops want ‘accountable encryption’ – aka access to backdoors
And warn that AI is already being used by extremists to plot attacks The director general of Australia’s lead intelligence agency and the commissioner of its Federal Police yesterday both called for social networks to offer more assistance to help…
Australia’s spies and cops want ‘accountable encryption’ – aka backdoors
And warn that AI is already being used by extremists to plot attacks The director general of Australia’s lead intelligence agency and the commissioner of its Federal Police yesterday both called for social networks to offer more assistance to help…
Governments issue alerts after ‘sophisticated’ state-backed actor found exploiting flaws in Cisco security boxes
Don’t get too comfortable: ‘Line Dancer’ malware may be targeting other vendors, too A previously unknown and “sophisticated” nation-state group compromised Cisco firewalls as early as November 2023 for espionage purposes — and possibly attacked network devices made by other…
Shouldn’t Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking
Doctorow: ‘The most amazing part is that this isn’t already the way it’s done’ Collaboration software used by federal government agencies — this includes apps from Microsoft, Zoom, Slack, and Google — will be required to work together and be…
Microsoft cannot keep its own security in order, so what hope for its add-ons customers?
Secure-by-default… if your pockets are deep enough Microsoft has come under fire for charging for security add-ons despite the company’s own patchy record when it comes to vulnerabilities and breaches.… This article has been indexed from The Register – Security…
Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets
The firm ‘fessed up to staff misconduct and avoided criminal liability A company contracted to manage an Amarillo, Texas nuclear weapons facility has to pay US government $18.4 million in a settlement over allegations that its atomic boffins fudged their…
Google cools on cookie phase-out while regulators chew on plans
Privacy Sandbox slips into 2025 after challenges from UK authorities Google’s plan to phase out third-party cookies in Chrome is being postponed to 2025 amid wrangling with the UK’s Competition and Markets Authority (CMA) and Information Commissioner’s Office (ICO).… This…
US charges Iranians with cyber snooping on government, companies
Their holiday options are now far more restricted The US has charged and sanctioned four Iranian nationals for their alleged roles in various attacks on US companies and government departments, all of whom are claimed to have worked for fake…
If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers?
One wonders why are there adverts on public-sector portals at all Exclusive At least 18 public-sector websites in the UK and US send visitor data in some form to various web advertising brokers – including an ad-tech biz in China…
Mandiant: Orgs are detecting cybercriminals faster than ever
The ‘big victory for the good guys’ shouldn’t be celebrated too much, though The average time taken by global organizations to detect cyberattacks has dropped to its lowest-ever level of ten days, Mandiant revealed today.… This article has been indexed…
UnitedHealth admits breach could ‘cover substantial proportion of people in America’
That said, good old US healthcare system so elaborately costly some are forced to avoid altogether UnitedHealth Group, the parent of ransomware-struck Change Healthcare, delivered some very unwelcome news for customers today as it continues to recover from the massively…
Leicester streetlights take ransomware attack personally, shine on 24/7
City council says it lost control after shutting down systems It’s become somewhat cliché in cybersecurity reporting to speculate whether an organization will have the resources to “keep the lights on” after an attack. But the opposite turns out to…
Over a million Neighbourhood Watch members exposed through web app bug
Unverified users could scoop up data on high-value individuals without any form of verification process Neighbourhood Watch (NW) groups across the UK can now rest easy knowing the developers behind a communications platform fixed a web app bug that leaked…
Misconfigured cloud server leaked clues of North Korean animation scam
Outsourcers outsourced work for the BBC, Amazon, and HBO Max to the hermit kingdom A misconfigured cloud server that used a North Korean IP address has led to the discovery that film production studios including the BBC, Amazon, and HBO…
Old Windows print spooler bug is latest target of Russia’s Fancy Bear gang
Putin’s pals use ‘GooseEgg’ malware to launch attacks you can defeat with patches or deletion Russian spies are exploiting a years-old Windows print spooler vulnerability and using a custom tool called GooseEgg to elevate privileges and steal credentials across compromised…
FBI and friends get two more years of warrantless FISA Section 702 snooping
US Senate kills reform amendment, Biden swiftly signs bill into law US lawmakers on Saturday reauthorized a contentious warrantless surveillance tool for another two years — and added a whole bunch of people and organizations to the list of those…
Europol now latest cops to beg Big Tech to ditch E2EE
Don’t bore us, get to the chorus: You need less privacy so we can protect the children Yet another international cop shop has come out swinging against end-to-end encryption – this time it’s Europol which is urging an end to…
Europol becomes latest law enforcement group to plead with big tech to ditch E2EE
Don’t bore us, get to the chorus: You need less privacy so we can protect the children Yet another international cop shop has come out swinging against end-to-end encryption – this time it’s Europol which is urging an end to…
Germany arrests trio accused of trying to smuggle naval military tech to China
Prosecutors believe one frikkin’ laser did make its way to Beijing Germany has arrested three citizens who allegedly tried to transfer military technology to China, a violation of the country’s export rules.… This article has been indexed from The Register…
Watchdog tells Dutch govt: ‘Do not use Facebook if there is uncertainty about privacy’
Meta insists it’s just misunderstood and it’s safe to talk to citizens over FB The Dutch Data Protection Authority (AP) has warned that government organizations should not use Facebook to communicate with the country’s citizens unless they can guarantee the…
US House of Representatives passes new TikTok ban bill to Senate
Sadly no push to ban stupid TikTok dances, but ByteDance would have year to offload app Stateside Fresh US legislation to force the sale of TikTok locally was passed in Washington over the weekend after an earlier version stalled in…
UK data watchdog questions how private Google’s Privacy Sandbox is
Leaked draft report says stated goals still come up short Google’s Privacy Sandbox, which aspires to provide privacy-preserving ad targeting and analytics, still isn’t sufficiently private.… This article has been indexed from The Register – Security Read the original article:…
Has the ever-present cyber danger just got worse?
Facing down the triple threat of ransomware, data breaches and criminal extortion Sponsored On the face of it, there really isn’t much of an upside for the current UK government after MPs described its response to attacks by cyber-espionage group…
Google all at sea over rising tide of robo-spam
What if it’s not AI but the algorithm to blame? Opinion It was a bold claim by the richest and most famous tech founder: bold, precise and wrong. Laughably so. Twenty years ago, Bill Gates promised to rid the world…
Rarest, strangest, form of Windows saved techie from moment of security madness
For once, Redmond’s finest saved the day – by being rubbish in unexpectedly useful ways Who, Me? It’s Monday once again, dear reader, and you know what that means: another dive into the Who, Me? confessional, to share stories of…
Researchers claim Windows Defender can be fooled into deleting databases
Two rounds of reports and patches may not have completely closed this hole BLACK HAT ASIA Researchers at US/Israeli infosec outfit SafeBreach last Friday discussed flaws in Microsoft and Kaspersky security products that can potentially allow the remote deletion of…
China creates ‘Information Support Force’ to improve networked defence capabilities
A day after FBI boss warns Beijing is poised to strike against US infrastructure China last week reorganized its military to create an Information Support Force aimed at ensuring it can fight and win networked wars.… This article has been…
MITRE admits ‘nation state’ attackers touched its NERVE R&D operation
PLUS: Akira ransomware resurgent; Telehealth outfit fined for data-sharing; This week’s nastiest vulns Infosec In Brief In a cautionary tale that no one is immune from attack, the security org MITRE has admitted that it got pwned.… This article has…
Sacramento airport goes no-fly after AT&T internet cable snipped
Police say this appears to be a ‘deliberate act.’ Sacramento International Airport (SMF) suffered hours of flight delays yesterday after what appears to be an intentional cutting of an AT&T internet cable serving the facility.… This article has been indexed…
WhatsApp, Threads, more banished from Apple App Store in China
Still available in Hong Kong and Macau, for now Apple has removed four apps from its China-regional app store, including Meta’s WhatsApp and Threads, after it was ordered to do so by Beijing for security reasons.… This article has been…
Cybercriminals threaten to leak all 5 million records from stolen database of high-risk individuals
It’s the second time the World-Check list has fallen into the wrong hands The World-Check database used by businesses to verify the trustworthiness of users has fallen into the hands of cybercriminals.… This article has been indexed from The Register…
Germany cuffs alleged Russian spies over plot to bomb industrial and military targets
Apparently an attempt to damage Ukraine’s war effort Bavarian state police have arrested two German-Russian citizens on suspicion of being Russian spies and planning to bomb industrial and military facilities that participate in efforts to assist Ukraine defend itself against…
Ransomware feared as IT ‘issues’ force Octapharma Plasma to close 150+ centers
Source blames BlackSuit infection – as ISP Frontier confirms cyberattack Octapharma Plasma has blamed IT “network issues” for the ongoing closure of its 150-plus centers across the US. It’s feared a ransomware infection may be the root cause of the…
Crooks exploit OpenMetadata holes to mine crypto – and leave a sob story for victims
‘I want to buy a car. That’s all’ Crooks are exploiting month-old OpenMetadata vulnerabilities in Kubernetes environments to mine cryptocurrency using victims’ resources, according to Microsoft.… This article has been indexed from The Register – Security Read the original article:…
House passes bill banning Uncle Sam from snooping on citizens via data brokers
Vote met strong opposition from Biden’s office A draft law to restrict the US government’s ability to procure data on citizens through data brokers will progress to the Senate after being passed in the House of Representatives.… This article has…
Korean researcher details scheme abusing Apple’s third-party pickup policy
Criminals make lucrative use of stolen credit cards Speaking at Black Hat Asia on Thursday, a Korean researcher revealed how the discovery of one phishing website led to uncovering an operation whose activities leveraged second-hand shops and included using Apple’s…
185K people’s sensitive data in the pits after ransomware raid on Cherry Health
Extent of information seized will be a concern for those affected Ransomware strikes at yet another US healthcare organization led to the theft of sensitive data belonging to just shy of 185,000 people.… This article has been indexed from The…
EU tells Meta it can’t paywall privacy
Platforms should not confront users with ‘binary choice’ over personal data use The EU’s Data Protection Board (EDPB) has told large online platforms they should not offer users a binary choice between paying for a service and consenting to their…
Prolific phishing-made-easy emporium LabHost knocked offline in cyber-cop op
Police mimic Spotify Wrapped videos to let crims know they’re being hunted Feature Cops have brought down a dark-web souk that provided cyber criminals with convincing copies of trusted brands’ websites for use in phishing campaigns.… This article has been…
Cisco creates architecture to improve security and sell you new switches
Hypershield detects bad behavior and automagically reconfigures networks to snuff out threats Cisco has developed a product called Hypershield that it thinks represents a new way to do network security.… This article has been indexed from The Register – Security…
Singapore infosec boss warns China/West tech split will be bad for interoperability
When you decide not to trust a big chunk of the supply chain, tech (and trade) get harder One of the biggest challenges Singapore faces is the potential for a split between tech stacks developed and used by China and…
Taiwanese film studio snaps up Chinese surveillance camera specialist Dahua
Stymied by sanctions, it had to go … but where? Chinese surveillance camera manufacturer Zhejiang Dahua Technology, which has found itself on the USA’s entity list of banned orgs, has fully sold off its stateside subsidiary for $15 million to…
Hugely expanded Section 702 surveillance powers set for US Senate vote
Opponents warn almost anyone could be asked to share info with Uncle Sam On Thursday the US Senate is expected to reauthorize the contentious warrantless surveillance powers conferred by Section 702 of the Foreign Intelligence Surveillance Act (FISA), and may…
Kremlin’s Sandworm blamed for cyberattacks on US, European water utilities
Water tank overflowed during one system malfunction, says Mandiant The Russian military’s notorious Sandworm crew was likely behind cyberattacks on US and European water plants that, in at least one case, caused a tank to overflow.… This article has been…
Exploit code for Palo Alto Networks zero-day now public
Race on to patch as researchers warn of mass exploitation of directory traversal bug Various infosec researchers have released proof-of-concept (PoC) exploits for the maximum-severity vulnerability in Palo Alto Networks’ PAN-OS used in GlobalProtect gateways.… This article has been indexed…
OpenAI’s GPT-4 can exploit real vulnerabilities by reading security advisories
While some other LLMs appear to flat-out suck AI agents, which combine large language models with automation software, can successfully exploit real world security vulnerabilities by reading security advisories, academics have claimed.… This article has been indexed from The Register…
Japanese government rejects Yahoo! infosec improvement plan
Just doesn’t believe it will sort out the mess that saw data leak from LINE messaging app Japan’s government has considered the proposed security improvements developed by Yahoo!, found them wanting, and ordered the onetime web giant to take new…
Fire in the Cisco! Networking giant’s Duo MFA message logs stolen in phish attack
Also warns of brute force attacks targeting its own VPNs, Check Point, Fortinet, SonicWall and more Cisco is fighting fires on a couple cybersecurity fronts this week involving its Duo multi-factor authentication (MFA) service and its remote-access VPN services.… This…
Fire in the Cisco! Networking giant’s Duo MFA leaks message logs
Also warns of brute force attacks targeting its own VPNs, Check Point, Fortinet, SonicWall and more Cisco is fighting fires on a couple fronts this week after security incidents involving its Duo multi-factor authentication (MFA) service and its remote-access VPN…
MGM says FTC can’t possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time
What a twist! MGM Resorts wants the FTC to halt a probe into last year’s ransomware infection at the mega casino chain – because the watchdog’s boss Lina Khan was a guest at one of its hotels during the cyberattack,…
Alleged cryptojacker accused of stealing $3.5M from cloud to mine under $1M in crypto
No prizes for guessing the victims A Nebraska man will appear in court today to face charges related to allegations that he defrauded cloud service providers of more than $3.5 million in a long-running cryptojacking scheme.… This article has been…
SIM swap crooks solicit T-Mobile US, Verizon staff via text to do their dirty work
No breach responsible for employee contact info getting out, says T-Mo T-Mobile US employees say they are being sent text messages that offer them cash to perform illegal SIM swaps for supposed criminals.… This article has been indexed from The…
Open sourcerers say suspected xz-style attacks continue to target maintainers
Social engineering patterns spotted across range of popular projects Open source groups are warning the community about a wave of ongoing attacks targeting project maintainers similar to those that led to the recent attempted backdooring of a core Linux library.……
Change Healthcare’s ransomware attack costs edge toward $1B so far
First glimpse at attack financials reveals huge pain UnitedHealth, parent company of ransomware-besieged Change Healthcare, says the total costs of tending to the February cyberattack for the first calendar quarter of 2024 currently stands at $872 million.… This article has…
Google location tracking deal could be derailed by politics
$62 million settlement plan challenged over payments to progressive nonprofits Google’s plan to pay $62 million to settle allegations that it tracked people even when their Location History setting was switched off may have to be renegotiated based on several…
CISA in a flap as Chirp smart door locks can be trivially unlocked remotely
Hard-coded credentials last thing you want in home security app Some smart locks controlled by Chirp Systems’ software can be remotely unlocked by strangers thanks to a critical security vulnerability.… This article has been indexed from The Register – Security…
Roku makes 2FA mandatory for all after nearly 600K accounts pwned
Streamer says access came via credential stuffing Streaming giant Roku is making 2FA mandatory after attackers accessed around 591,000 customer accounts earlier this year.… This article has been indexed from The Register – Security Read the original article: Roku makes…
Delinea Secret Server customers should apply latest patches
Attackers could nab an org’s most sensitive keys if left unaddressed Customers of Delinea’s Secret Server are being urged to upgrade their installations “immediately” after a researcher claimed a critical vulnerability could allow attackers to gain admin-level access.… This article…
US senator wants to put the brakes on Chinese EVs
Fears of low-cost invasion and data spies spark call for ban Electric vehicles may become a new front in America’s tech war with China after a US senator called for Washington DC to block Chinese-made EVs to protect domestic industries…
Identifying third-party risk
The prima facie case for real-time threat intelligence Webinar Cybercriminals are always on the hunt for new ways to breach your privacy, and busy supply chains often look like a good way to get in under the wire.… This article…
US House approves FISA renewal – warrantless surveillance and all
PLUS: Chinese chipmaker Nexperia attacked; A Microsoft-signed backdoor; CISA starts scanning your malware; and more Infosec in brief US Congress nearly killed a reauthorization of FISA Section 702 last week over concerns that it would continue to allow warrantless surveillance…
Zero-day exploited right now in Palo Alto Networks’ GlobalProtect gateways
Out of the PAN-OS and into the firewall, a Python backdoor this way comes Palo Alto Networks on Friday issued a critical alert for an under-attack vulnerability in the PAN-OS software used in its firewall-slash-VPN products.… This article has been…
Google One VPN axed for everyone but Pixel loyalists … for now
Another one bytes the dust In an incredibly rare move, Google is killing off one of its online services – this time, VPN for Google One.… This article has been indexed from The Register – Security Read the original article:…
Microsoft breach allowed Russian spies to steal emails from US government
Affected federal agencies must comb through mails, reset API keys and passwords The US Cybersecurity and Infrastructure Security Agency (CISA) warns that Russian spies who gained access to Microsoft’s email system were able to steal sensitive data, including authentication details…
French issue alerte rouge after local governments knocked offline by cyber attack
Embarrassing, as its officials are in the US to discuss Olympics cyber threats Several French municipal governments’ services have been knocked offline following a “large-scale cyber attack” on their shared servers.… This article has been indexed from The Register –…
Apple stops warning of ‘state-sponsored’ attacks, now alerts about ‘mercenary spyware’
Report claims India’s government, which is accused of using Pegasus at home, was displeased Apple has made a significant change to the wording of its threat notifications, opting not to attribute attacks to a specific source or perpetrator, but categorizing…
Space Force boss warns ‘the US will lose’ without help from Musk and Bezos
China, Russia have muscled up, and whoever wins up there wins down here The commander of the US Space Force (USSF) has warned that America risks losing its dominant position in space, and therefore on Earth too.… This article has…
96% of US hospital websites share visitor info with Meta, Google, data brokers
Could have been worse – last time researchers checked it was 98.6% Hospitals – despite being places where people implicitly expect to have their personal details kept private – frequently use tracking technologies on their websites to share user information…
Global taxi software vendor exposes details of nearly 300K across UK and Ireland
High-profile individuals including MPs said to be caught up in leak Exclusive Taxi software biz iCabbi recently fixed an issue that exposed the personal information of nearly 300,000 individuals via an unprotected database.… This article has been indexed from The…
It’s 2024 and Intel silicon is still haunted by data-spilling Spectre
Go, go InSpectre Gadget Intel CPU cores remain vulnerable to Spectre data-leaking attacks, say academics at VU Amsterdam.… This article has been indexed from The Register – Security Read the original article: It’s 2024 and Intel silicon is still haunted…
Rust rustles up fix for 10/10 critical command injection bug on Windows
BatBadBut hits Erlang, Go, Python, Ruby as well Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on Windows machines.… This…
X fixes URL blunder that could enable convincing social media phishing campaigns
Poorly implemented rule allowed miscreants to deceive users with trusted URLs Elon Musk’s X has apparently fixed an embarrassing issue implemented earlier in the week that royally bungled URLs on the social media platform formerly known as Twitter.… This article…
Turning the tide on third-party risk
Using threat intelligence to mitigate against security breaches Webinar There are some unhappy projections out there about the prevalence of third-party security breaches.… This article has been indexed from The Register – Security Read the original article: Turning the tide…