IT admins, get ready to grumble CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to just 47 days by March 15,…
Tag: The Register – Security
New SSL/TLS cert to live no longer than 47 days by 2029
IT admins, get ready to grumble CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to just 47 days by March 15,…
Cyber congressman demands answers before CISA gets cut down to size
What’s the goal here, Homeland Insecurity or something? As drastic cuts to the US govt’s Cybersecurity and Infrastructure Security Agency loom, Rep Eric Swalwell (D-CA), the ranking member of the House’s cybersecurity subcommittee, has demanded that CISA brief the subcommittee…
Official abuse of state security has always been bad, now it’s horrifying
UK holds onto oversight by a whisker, but it’s utterly barefaced on the other side of the pond Opinion The UK government’s attempts to worm into Apple’s core end-to-end encryption were set back last week when the country’s Home Office…
CIO and digi VP to depart UK retail giant Asda as Walmart divorce woes settle
Brit retailer says troubled breakup with tech platform of former US owner nearing conclusion Two of the top team behind Asda’s £1 billion ($1.31 billion) tech divorce from US retail giant Walmart — which has seen a number of setbacks…
Old Fortinet flaws under attack with new method its patch didn’t prevent
PLUS: Chinese robodogs include backdoor; OpenAI helps spammer; A Dutch data disaster; And more! Infosec In Brief Fortinet last week admitted that attackers have found new ways to exploit three flaws it thought it had fixed last year.… This article…
China reportedly admitted directing cyberattacks on US infrastructure
PLUS: India’s new electronics subsidies; Philippines unplugs a mobile carrier; Alibaba Cloud expands Asia In Brief Chinese officials admitted to directing cyberattacks on US infrastructure at a meeting with their American counterparts, according to The Wall Street Journal.… This article…
Hacktivism resurges – but don’t be fooled, it’s often state-backed goons in masks
Military units, government nerds appear to join the fray, with physical infra in sights Feature From triggering a water tank overflow in Texas to shutting down Russian state news services on Vladimir Putin’s birthday, self-styled hacktivists have been making headlines.……
Hacktivism is back – but don’t be fooled, it’s often state-backed goons in masks
Military units, government nerds appear to join the fray, with physical infra in sights Feature From triggering a water tank overflow in Texas to shutting down Russian state news services on Vladimir Putin’s birthday, self-styled hacktivists have been making headlines.……
LLMs can’t stop making up software dependencies and sabotaging everything
Hallucinated package names fuel ‘slopsquatting’ The rise of LLM-powered code generation tools is reshaping how developers write software – and introducing new risks to the software supply chain in the process.… This article has been indexed from The Register –…
AI can’t stop making up software dependencies and sabotaging everything
Hallucinated package names fuel ‘slopsquatting’ The rise of AI-powered code generation tools is reshaping how developers write software – and introducing new risks to the software supply chain in the process.… This article has been indexed from The Register –…
Microsoft total recalls Recall totally to Copilot+ PCs
Redmond hopes you’ve forgotten or got over why everyone hated it the first time After temporarily shelving its controversial Windows Recall feature amid a wave of backlash, Microsoft is back at it – now quietly slipping the screenshotting app into…
Ransomware crims hammering UK more than ever as British techies complain the board just doesn’t get it
Issues at the very top continue to worsen The UK government’s latest annual data breach survey shows the number of ransomware attacks on the isles is on the increase – and many techies are forced to constantly informally request company directors…
Ex-Meta exec tells Senate Zuck dangled US citizen data in bid to enter China
Former policy boss claims Facebook cared little about national security as it chased the mighty Yuan Facebook’s former director of global public policy told a Senate committee that Meta CEO Mark Zuckerberg was willing to do almost anything to get…
Ex-Meta exec tells Senate Zuck’s biz dangled US citizen data in bid to enter China
Former policy boss claims Facebook cared little about national security as it chased the mighty Yuan Facebook’s former director of global public policy told a Senate committee that Meta CEO Mark Zuckerberg was willing to do almost anything to get…
US sensor giant Sensata admits ransomware derailed ops
Props for the transparency though US sensor maker Sensata has told regulators that a ransomware attack caused an operational disruption, and that it’s still working to fully restore affected systems.… This article has been indexed from The Register – Security…
US sensor giant Sensata admits ransomware disrupts operations
Props for the transparency though US sensor maker Sensata has told regulators that a ransomware attack caused operational disruption, and that it’s still working to fully restore affected systems.… This article has been indexed from The Register – Security Read…
Infosec experts fear China could retaliate against tariffs with a Typhoon attack
Scammers are already cashing in with fake invoices for import costs World War Fee As the trade war between America and China escalates, some infosec and policy experts fear Beijing will strike back in cyberspace.… This article has been indexed…
Europol: Five pay-per-infect suspects cuffed, some spill secrets to cops
Officials teased more details to come later this year Following the 2024 takedown of several major malware operations under Operation Endgame, law enforcement has continued its crackdown into 2025, detaining five individuals linked to the Smokeloader botnet.… This article has…
The Reg translates the letter in which Oracle kinda-sorta tells customers it was pwned
TL;DR: Move along, still nothing to see here – an idea that leaves infosec pros aghast Oracle’s letter to customers about an intrusion into part of its public cloud empire – while insisting Oracle Cloud Infrastructure was untouched – has…