Czech researcher lays out a business case for reducing reliance on Redmond Comment A sharply argued blog post warns that heavy reliance on Microsoft poses serious strategic risks for organizations – a viewpoint unlikely to win favor with Redmond or…
Tag: The Register – Security
Cisco fixes two critical make-me-root bugs on Identity Services Engine components
A 10.0 and a 9.8 – these aren’t patches to dwell on Cisco has dropped patches for a pair of critical vulnerabilities that could allow unauthenticated remote attackers to execute code on vulnerable systems.… This article has been indexed from…
Glasgow City Council online services crippled following cyberattack
Nothing confirmed but authority is operating under the assumption that data has been stolen A cyberattack on Glasgow City Council is causing massive disruption with a slew of its digital services unavailable.… This article has been indexed from The Register…
Qilin ransomware attack on NHS supplier contributed to patient fatality
Pathology outage caused by Synnovis breach linked to harm across dozens of healthcare facilities The NHS says Qilin’s ransomware attack on pathology services provider Synnovis last year led to the death of a patient.… This article has been indexed from…
UK to buy nuclear-capable F-35As that can’t be refueled from RAF tankers
Aircraft meant to bolster NATO deterrent will rely on allied support to stay airborne The UK government is to buy 12 F-35A fighters capable of carrying nuclear weapons as part of the NATO deterrent, but there’s a snag: the new…
Frozen supermarket chain deploys facial recognition tech
Privacy campaigner brands Iceland’s use of ‘Orwellian’ camera tech ‘chilling,’ CEO responds: ‘It’ll cut violent crime’ Privacy campaigners are branding frozen food retailer Iceland’s decision to trial facial recognition technology (FRT) at several stores “chilling” – the UK supermarket chain…
That WhatsApp from an Israeli infosec expert could be a Iranian phish
Charming Kitten unsheathes its claws and tries to catch credentials The cyber-ops arm of Iran’s Islamic Revolutionary Guard Corps has started a spear-phishing campaign intent on stealing credentials from Israeli journalists, cybersecurity experts, and computer science professors from leading Israeli…
Citrix bleeds again: This time a zero-day exploited – patch now
Two emergency patches issued in two weeks Hot on the heels of patching a critical bug in Citrix-owned Netscaler ADC and NetScaler Gateway that one security researcher dubbed “CitrixBleed 2,” the embattled networking device vendor today issued an emergency patch…
Amazon’s Ring can now use AI to ‘learn the routines of your residence’
It’s meant to cut down on false positives but could be a trove for mischief-makers Ring doorbells and cameras are using AI to “learn the routines of your residence,” via a new feature called Video Descriptions.… This article has been…
Supply chain attacks surge with orgs ‘flying blind’ about dependencies
Who is the third party that does the thing in our thing? Yep. Attacks explode over past year The vast majority of global businesses are handling at least one material supply chain attack per year, but very few are doing…
Computer vision research feeds surveillance tech as patent links spike 5×
A bottomless appetite for tracking people as “objects” A new study shows academic computer vision papers feeding surveillance-enabling patents jumped more than fivefold from the 1990s to the 2010s.… This article has been indexed from The Register – Security Read…
French cybercrime police arrest five suspected BreachForums admins
Twentysomethings claimed to be linked to spate of high-profile cybercrimes The Paris police force’s cybercrime brigade (BL2C) has arrested a further four men as part of a long-running investigation into the criminals behind BreachForums.… This article has been indexed from…
UK govt dept website that campaigns against encryption hijacked to advertise … payday loans
Company at center of findings blamed SEO on outsourcer A website developed for the UK Home Office’s 2022 “flop” anti-encryption campaign has seemingly been hijacked to push a payday loan scheme.… This article has been indexed from The Register –…
Don’t panic, but it’s only a matter of time before critical ‘CitrixBleed 2’ is under attack
Why are you even reading this story? Patch now! Citrix patched a critical vulnerability in its NetScaler ADC and NetScaler Gateway products that is already being compared to the infamous CitrixBleed flaw exploited by ransomware gangs and other cyber scum,…
Beware of fake SonicWall VPN app that steals users’ credentials
A good reminder not to download apps from non-vendor sites Unknown miscreants are distributing a fake SonicWall app to steal users’ VPN credentials.… This article has been indexed from The Register – Security Read the original article: Beware of fake…
The vulnerability management gap no one talks about
If an endpoint goes ping but isn’t on the network, does anyone hear it? Partner content Recently, I’ve been diving deep into security control data across dozens of organizations, and what I’ve found has been both fascinating and alarming. Most…
Four REvil ransomware crooks walk free, escape gulag fate, after admitting guilt
Russian judge lets off accused with time served – but others who refused to plead guilty face years in penal colony Four convicted members of the once-supreme ransomware operation REvil are leaving captivity after completing most of their five-year sentences.……
‘Psylo’ browser tries to obscure digital fingerprints by giving every tab its own IP address
Gotta keep ’em separated so the marketers and snoops can’t come out and play Psylo, which bills itself as a new kind of private web browser, debuted last Tuesday in Apple’s App Store, one day ahead of a report warning…
‘Psylo’ browser tries to obscure digital fingerprints by giving very tab its own IP address
Gotta keep ’em separated so the marketers and snoops can’t come out and play Psylo, which bills itself as a new kind of private web browser, debuted last Tuesday in Apple’s App Store, one day ahead of a report warning…
Typhoon-like gang slinging TLS certificate ‘signed’ by the Los Angeles Police Department
Chinese crew built 1,000+ device network that runs on home devices then targets critical infrastructure A stealthy, ongoing campaign to gain long-term access to networks bears all the markings of intrusions conducted by China’s ‘Typhoon’ crews and has infected at…