PLUS: Kryptos solution up for auction; Canadian parliament springs a leak; Fake crypto lawyers; And more Infosec In Brief New York State is suing bank-owned peer-to-peer payment app Zelle, claiming that the banks behind it knew fraud was rampant on…
Tag: The Register – Security
Election workers fear threats and intimidation without feds’ support in 2026
‘Hope for the best, but prepare for the worst,’ one tells The Reg Feature Bill Gates, an Arizona election official and former Maricopa County supervisor, says that the death threats started shortly after the 2020 presidential election.… This article has…
Typhoon-adjacent Chinese crew broke into Taiwanese web host
Is that a JuicyPotato on your network? A suspected Chinese-government-backed cyber crew recently broke into a Taiwanese web hosting provider to steal credentials and plant backdoors for long-term access, using a mix of open-source and custom software tools, Cisco Talos…
Cisco’s Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole
Switchzilla’s summer of perfect 10s Cisco has issued a patch for a maximum-severity bug in its Secure Firewall Management Center (FMC) software that could allow an unauthenticated, remote attacker to inject arbitrary shell commands on vulnerable systems.… This article has…
Cyberattack on Dutch prosecution service is keeping speed cameras offline
Who knew zero-days could be so useful to highway speedsters? The lingering effects of a cyberattack on the Public Prosecution Service of the Netherlands are preventing it from reactivating speed cameras across the country.… This article has been indexed from…
Telco giant Colt suffers attack, takes systems offline
London-based multinational takes customer portal and Voice API platform offline as ‘protective measure’ following breach Multinational telco Colt Technology Services says a “cyber incident” is to blame for its customer portal and other services being down for a number of…
LLM chatbots trivial to weaponise for data theft, say boffins
System prompt engineering turns benign AI assistants into ‘investigator’ and ‘detective’ roles that bypass privacy guardrails A team of boffins is warning that AI chatbots built on large language models (LLM) can be tuned into malicious agents to autonomously harvest…
Should UK.gov save money by looking for open source alternatives to Microsoft? You decide
As £9 billion MoU sparks debate about value for money, it’s time to have your say Register debate series It’s a lot of money, £9 billion ($12 billion). Especially for a government which finds itself — for whatever reason —…
Ransomware crews don’t care about your endpoint security – they’ve already killed it
Some custom malware, some legit software tools At least a dozen ransomware gangs have incorporated kernel-level EDR killers into their malware arsenal, allowing them to bypass almost every major endpoint security tool on the market, escalate privileges, and ultimately steal…
Psst: wanna buy a legit FBI email account for $40?
Government and police employee credentials sold at bargain-basement prices on underground forums Criminals are selling access to FBI and other law enforcement and government email accounts to other criminals via dark web marketplaces for as little as $40.… This article…
‘MadeYouReset’ HTTP/2 flaw lets attackers DoS servers
Researchers had to notify over 100 vendors of flaw that builds on 2023’s Rapid Reset with neat twist past usual mitigations Security researchers Gal Bar Nahum, Anat Bremler-Barr, and Yaniv Harel have published details of a “common design flaw” in…
Lock down your critical infrastructure, CISA begs admins
The agency offered some tips for operational technology environments, where attacks are rising CISA is urging companies with operational technology environments to set a better cybersecurity posture, and not just by adopting some new best practices and purchasing some new…
BtcTurk suspends operations amid alleged $49M hot wallet heist
Turkish exchange is the latest victim of a recent spate of major crypto thefts Turkish cryptocurrency exchange BtcTurk is halting all deposits and withdrawals amid fears that blockchain bandits succeeded in significantly compromising its hot wallets.… This article has been…
Law and water: Russia blamed for US court system break-in and Norwegian dam drama
Moscow-linked miscreants accused of swiping sealed US court files and fiddling with a Norwegian dam’s floodgates Russian attackers reportedly spent months rummaging through the US federal court’s creaky case-management system, while Norway reckons the same Kremlin-friendly miscreants took control of…
Italian hotels breached en masse since June, government confirms
Nearly 100,000 records allegedly up for sale after apparent breach at booking system Italy’s digital agency (AGID) says a cybercriminal’s claims concerning a spate of data thefts affecting various hotels across the country are genuine.… This article has been indexed…
Stock in the Channel pulls website amid cyberattack
Intruders accessed important systems but tells customers their data is safe A UK-based multinational that provides tech stock availability tools is telling customers that its website outage is due to a cyber attack.… This article has been indexed from The…
The £9 billion question: To Microsoft or not to Microsoft?
Are UK taxpayers getting real value from SPA24 — or just high cost convenience? Register debate series The UK government’s five-year Strategic Partnership Agreement (SPA24) with Microsoft is set to see public sector bodies spend around £1.9 billion each year—nearly…
Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts
If there’s smoke? Fortinet warned customers about a critical FortiSIEM bug that could allow an unauthenticated attacker to execute unauthorized commands, and said working exploit code for the flaw has been found in the wild.… This article has been indexed…
Crooks can’t let go: Active attacks target Office vuln patched 8 years ago
CVE-2017-11882 in discontinued Equation Editor still attracting keylogger campaigns despite software being killed off in 2018 Very few people are immune to the siren song of nostalgia, a yearning for a “better time” when this was all fields and kids…
UK expands police facial recognition rollout with 10 new vans heading to a town near you
Seven additional regions across England will now have access to the controversial tech A fresh expansion of UK crimefighters’ access to live facial recognition (LFR) technology is being described by officials as “an excellent opportunity for policing.” Privacy campaigners diagree.……