Security vendor’s no good, very bad week year SonicWall on Monday released a firmware update that the security vendor says will remove rootkit malware deployed in recent attacks targeting Secure Mobile Access (SMA) 100 appliances.… This article has been indexed…
Category: The Register – Security
Third time’s the charm? SolarWinds (again) patches critical Web Help Desk RCE
Or maybe 3 strikes, you’re out? SolarWinds on Tuesday released a hotfix – again – for a critical, 9.8-severity flaw in its Web Help Desk IT ticketing software that could allow a remote, unauthenticated attacker to run commands on a…
OnePlus leaves researchers on read over Android bug that exposes texts
Rapid7 warns flaw could let any app peek at your SMS, but smartphone vendor won’t pick up Security researchers report that OnePlus smartphone users remain vulnerable to a critical bug that allows any application to read SMS and MMS data…
SIM city: Feds say 100,000-card farms could have killed cell towers in NYC
Secret Service seizes 300-server network allegedly tied to nation-state hackers The US Secret Service has dismantled a network of SIM farms in and around New York City it claims was behind multiple incidents targeting senior government officials and had enough…
Kaspersky: RevengeHotels checks back in with AI-coded malware
Old hotel scam gets an AI facelift, leaving travellers’ card details even more at risk Kaspersky has raised the alarm over the resurgence of hotel-hacking outfit “RevengeHotels,” which it claims is now using artificial intelligence to supercharge its scams.… This…
OpenSSF warns that open source infrastructure doesn’t run on thoughts and prayers
Foundations say billions of downloads rely on registries running on fumes – and someone’s gotta pay the bills The Open Source Security Foundation (OpenSSF) has had enough of being the unpaid janitor of the world’s software supply chain.… This article…
GitHub moves to tighten npm security amid phishing, malware plague
Hundreds of compromised packages pulled as registry shifts to 2FA and trusted publishing GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.… This article has been indexed from The Register…
Oracle gets to store US users’ TikTok data, says Trump
President to announce details on Big Red’s storage and security deal for Chinese social media phenomenon later this week The White House has promised that all US user data on TikTok will be stored on Oracle servers in the United…
Workers fear for their jobs as JLR’s latest shutdown extended
With no idea when engines restart, families gear down on spending ahead of Christmas Jaguar Land Rover is extending the shutdown of its production plants another week in a move that experts say could cost the business in the multiple…
Suspected Iran-backed attackers targeting European aerospace sector with novel malware
Instead of job offers, victims get MiniJunk backdoor and MiniBrowse stealer Suspected Iranian government-backed online attackers have expanded their European cyber ops with fake job portals and new malware targeting organizations in the defense, manufacturing, telecommunications, and aviation sectors.… This…
UK chancellor Putin the blame on Russia for cyber chaos, but evidence says otherwise
Reeves points finger at Moscow in interview when authorities reckon it’s local lads UK chancellor Rachel Reeves is blaming Moscow for Britain’s latest cyber woes, an attribution that seems about as solid as wet cardboard given the trail of evidence…
EV charging biz zaps customers with data leak scare
Names, emails unplugged in DCS support snafu – but ‘billing is safe’ An electric vehicle charging point provider is telling users that their data may be compromised, following a recent security “incident” at a service provider.… This article has been…
Cops cuff another teen over alleged Scattered Spider attack that broke Vegas casinos
Not old enough to drink, old enough to be accused of causing millions in damage A teen surrendered to Las Vegas police and was booked on suspicion of breaking into multiple Las Vegas casino networks in 2023, as part of…
EU’s cyber agency blames ransomware as Euro airport check-in chaos continues
Airport staff revert to manual ops as travellers urged to use self-service check-in where possible The EU’s cybersecurity agency today confirmed that ransonmware is the cause of continued disruption blighting major airports across Europe.… This article has been indexed from…
Car giant Stellantis says customer data nicked after partner vendor pwned
Automaker insists only names and emails exposed, no financials Car giant Stellantis is admitting that attackers targeted one of its third-party partners, spilling its own customers’ details in the process.… This article has been indexed from The Register – Security…
FOMO? Brit banking biz rolls out AI tools, talks up security
Lloyds Data and AI lead doesn’t want devs downloading models from the likes of Hugging Face – too risky Lloyds Banking Group is leaning into 21st century tech – yet trying to do so in a way that the data…
Trump says Michael Dell is part of the team buying TikTok, with Larry Ellison and maybe some Murdochs
The Register looks forward to a briefing on Dell’s future hyperscale sovereign SaaS platform Dell CEO Michael Dell is part of the consortium that intends to acquire TikTok’s US operations, according to US president Donald Trump.… This article has been…
Tech troubles create aviation chaos on both sides of the Atlantic
‘Cyber-attack’ on ticketing outfit Collins and cable cuts at Dallas ground hundreds of flights Technology problems hit the commercial aviation industry hard over the weekend, leading to hundreds of cancelled flights and myriad delays on both sides of the Atlantic.……
Ransomware attack linked to museum break-in and theft of golden exhibits
PLUS: Luxury brands under fire; FBI warns crims are spoofing it again; ICE buys phone cracking software Infosec in brief Online criminals prefer to deal in digital assets, but a side effect of a ransomware attack has seen a French…
ChatGPT joins human league, now solves CAPTCHAs for the right prompt
Could this bot-prevention technique now be obsolete? ChatGPT can be tricked via cleverly worded prompts to violate its own policies and solve CAPTCHA puzzles, potentially making this human-proving security mechanism obsolete, researchers say.… This article has been indexed from The…