Illegitimi non carborundum? Nice password, Mr Ex-CISA Chris Krebs, the former head of the US Cybersecurity and Infrastructure Security Agency (CISA) and a longtime Trump target, has resigned from SentinelOne following a recent executive order that targeted him and revoked…
Tag: The Register – Security
Brit soldiers tune radio waves to fry drone swarms for pennies
Truck-mounted demonstration weapon costs 10p a pop, says MOD British soldiers have successfully taken down drones with a radio-wave weapon.… This article has been indexed from The Register – Security Read the original article: Brit soldiers tune radio waves to…
Whistleblower describes DOGE IT dept rampage at America’s labor watchdog
Ignored infosec rules, exfiltrated data … then the mysterious login attempts from a Russian IP address began – claim Democratic lawmakers are calling for an investigation after a tech staffer at the US National Labor Relations Board (NLRB) blew the…
Signalgate chats vanish from CIA chief phone
Extraordinary rendition of data, or just dropped it out of a helicopter? CIA Director John Ratcliffe’s smartphone has almost no trace left of the infamous Signalgate chat – the one in which he and other top US national security officials…
Free Blue Screens of Death for Windows 11 24H2 users
Microsoft rewards those who patch early with bricks hurled through its operating system Keeping with its rich history of updates that break Windows in unexpected ways, Microsoft has warned that two recent patches for Windows 11 24H2 are triggering blue…
Identifying the cyber risks that matter
From noise to clarity: Why CISOs are shifting to adversarial exposure validation Partner content A vast majority of security teams are overwhelmed by the large number of security alerts and vulnerabilities.… This article has been indexed from The Register –…
CVE program gets last-minute funding from CISA – and maybe a new home
Feds extend vulnerability nerve-center contract at 11th hour In an 11th-hour reprieve, the US government last night agreed to continue funding the globally used Common Vulnerabilities and Exposures (CVE) Program.… This article has been indexed from The Register – Security…
Law firm ‘didn’t think’ data theft was a breach, says ICO. Now it’s nursing a £60K fine
DPP Law is appealing against data watchdog’s conclusions A law firm is appealing against a £60,000 fine from the UK’s data watchdog after 32 GB of personal information was stolen from its systems.… This article has been indexed from The…
Russians lure European diplomats into malware trap with wine-tasting invite
Vintage phishing varietal has improved with age Russia never stops using proven tactics, and its Cozy Bear, aka APT 29, cyber-spies are once again trying to lure European diplomats into downloading malware with a phony invitation to a lux event.……
Guess what happens when ransomware fiends find ‘insurance’ ‘policy’ in your files
It involves a number close to three or six depending on the fiend Ransomware operators jack up their ransom demands by a factor of 2.8x if they detect a victim has cyber-insurance, a study highlighted by the Netherlands government has…
Uncle Sam abruptly turns off funding for CVE program. Yes, that CVE program
Because vulnerability management has nothing to do with national security, right? US government funding for the world’s CVE program – the centralized Common Vulnerabilities and Exposures database of product security flaws – ends Wednesday.… This article has been indexed from…
Now 1.6M people had SSNs, life chapter and verse stolen from insurance IT biz
800K? Make that double, and we’ll need a double, too, for the pain A Texas firm that provides backend IT and other services for American insurers has admitted twice as many people had their info stolen from it than previously…
4chan, the ‘internet’s litter box,’ appears to have been pillaged by rival forum
Source code, moderator info, IP addresses, more allegedly swiped and leaked Thousands of 4chan users reported outages Monday night amid rumors on social media that the edgy anonymous imageboard had been ransacked by an intruder, with someone on a rival…
China names alleged US snoops over Asian Winter Games attacks
Beijing claims NSA went for gold in offensive cyber, got caught in the act China’s state-run press has taken its turn in trying to highlight alleged foreign cyber offensives, accusing the US National Security Agency of targeting the 2025 Asian…
All right, you can have one: DOGE access to Treasury IT OK’d judge
Login green-lit for lone staffer if he’s trained, papered up, won’t pull an Elez A federal judge has partly lifted an injunction against Elon Musk’s Trump-blessed cost-trimming DOGE unit, allowing one staff member to access sensitive US Treasury payment systems.…
Chinese snoops use stealth RAT to backdoor US orgs – still active last week
Let the espionage and access resale campaigns begin (again) A cyberspy crew or individual with ties to China’s Ministry of State Security has infected global organizations with a remote access trojan (RAT) that’s “even better” than Cobalt Strike, using this…
ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?
Stopping users shooting themselves in the foot with last century’s tech Microsoft has twisted the knife into ActiveX once again, setting Microsoft 365 to disable all controls without so much as a prompt.… This article has been indexed from The…
Where it Hertz: Customer data driven off in Cleo attacks
Car hire biz takes your privacy seriously, though Car hire giant Hertz has confirmed that customer information was stolen during the zero-day data raids on Cleo file transfer products last year.… This article has been indexed from The Register –…
EU gives staff ‘burner phones, laptops’ for US visits
That would put America on the same level as China for espionage The European Commission is giving staffers visiting the US on official business burner laptops and phones to avoid espionage attempts, according to the Financial Times.… This article has…
Don’t delete that mystery empty folder. Windows put it there as a security fix
Copilot vibe coding for OS development? Why not Canny Windows users who’ve spotted a mysterious folder on hard drives after applying last week’s security patches for the operating system can rest assured – it’s perfectly benign. In fact, it’s recommended…