Alleges cybersecurity agency was ‘weaponized’ to suppress debunked theories The Trump administration on Wednesday ordered a criminal investigation into alleged censorship conducted by the USA’s Cybersecurity and Infrastructure Security Agency, aka CISA, plus revocation of any security clearances held by…
Tag: The Register – Security
April’s Patch Tuesday leaves unlucky Windows Hello users unable to login
Can’t Redmond ask its whizz-bang Copilot AI to fix it? Those keen to get their Microsoft PCs patched up as soon as possible have been getting an unpleasant shock when they try to get in using Windows Hello.… This article…
Wyden blocks Trump’s CISA boss nominee, blames cyber agency for ‘actively hiding info’ about telecom insecurity
It worked for in 2018 with Chris Krebs. Will it work again? Uncle Sam’s Cybersecurity and Infrastructure Security Agency, aka CISA, has been “actively hiding information” about American telecommunications networks’ weak security for years, according to Senator Ron Wyden.… This…
Sensitive financial files feared stolen from US bank watchdog
OCC mum on who broke into email, but Treasury fingered China in similar hack months ago A US banking regulator fears sensitive financial oversight data was stolen from its IT systems in what’s been described as “a major information security…
Google’s got a hot cloud infosec startup, a new unified platform — and its eye on Microsoft’s $20B+ security biz
How Chocolate Factory hopes to double down on enterprise-sec Cloud Next Google will today reveal a new unified security platform that analysts think can help it battle Microsoft for a bigger chunk of the enterprise infosec market.… This article has…
Google’s got a hot cloud security startup, a new unified platform — and its eye on Microsoft’s $20B+ security biz
Chocolate Factory doubles down on enterprise security at Cloud Next Google will today reveal a new unified security platform that analysts think can help it battle Microsoft for a bigger chunk of the enterprise infosec market.… This article has been…
Pharmacist accused of using webcams to spy on women in intimate moments at work, home
Lawsuit claims sick cyber-voyeurism went undetected for years, using hundreds of PCs, due to lax infosec A now-former pharmacist at the University of Maryland Medical Center (UMMC) has been accused of compromising the US healthcare organization’s IT systems to ogle…
Bad luck, Windows 10 users. No fix yet for ransomware-exploited bug
A novel way to encourage upgrades? Microsoft would never stoop so low Patch Tuesday Patch Tuesday has arrived, and Microsoft has revealed one flaw in its products under active exploitation and 11 critical issues in its code to fix.… This…
Tough luck, Windows 10 users. No fix yet for ransomware-exploited OS bug
A novel way to encourage upgrades? Microsoft would never stoop so low Patch Tuesday Patch Tuesday has arrived, and Microsoft has revealed one flaw in its products under active exploitation and 11 critical issues in its code to fix.… This…
Don’t open that JPEG in WhatsApp for Windows. It might be an .EXE
What a MIME field A bug in WhatsApp for Windows can be exploited to execute malicious code by anyone crafty enough to persuade a user to open a rigged attachment – and, to be fair, it doesn’t take much craft…
Don’t open that JPEG sent to WhatsApp for Windows. It might be an .EXE
What a MIME field A bug in WhatsApp for Windows can be exploited to execute malicious code by anyone crafty enough to persuade a user to open a rigged attachment – and, to be fair, it doesn’t take much craft…
Scattered Spider stops the Rickrolls, starts the RAT race
Despite arrests, eight-legged menace targeted more victims this year Despite several arrests last year, Scattered Spider’s social engineering attacks are continuing into 2025 as the cybercrime collective targets high-profile organizations and adds another phishing kit to its arsenal along with…
As CISA braces for more cuts, threat intel sharing takes a hit
Will ‘gutting’ the civilian defense agency make American cybersecurity great again? Analysis Slashing staff at the US govt’s Cybersecurity and Infrastructure Security Agency, aka CISA, and scrapping vital programs, isn’t exactly boosting national security, say infosec and national security officials…
Oracle says its cloud was in fact compromised
Reliability, honesty, accuracy. And then there’s this lot Oracle has briefed some customers about a successful intrusion into its public cloud, as well as the theft of their data, after previously denying it had been compromised.… This article has been…
That massive GitHub supply chain attack? It all started with a stolen SpotBugs token
But this mystery isn’t over yet, Unit 42 opines That massive GitHub supply chain attack that spilled secrets from countless projects? It traces back to a stolen token from a SpotBugs workflow – exposed way back in November, months earlier…
Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victims
Crummy OPSEC leads to potentially decades in prison Noah Michael Urban, 20, of alleged Scattered Spider infamy, has pleaded guilty to various charges and potentially faces decades in prison.… This article has been indexed from The Register – Security Read…
UK’s attempt to keep details of Apple ‘backdoor’ case secret… denied
Last month’s secret hearing comes to light Details of Apple’s appeal against the UK’s so-called “backdoor order” will now play out in public after the Home Office failed in its bid to keep them secret on national security grounds.… This…
Chrome to patch decades-old flaw that let sites peek at your history
After 23 years, the privacy plumber has finally arrived to clean up this mess A 23-year-old side-channel attack for spying on people’s web browsing histories will get shut down in the forthcoming Chrome 136, released last Thursday to the Chrome…
Tribunal denies UK’s attempt to keep details of Apple ‘backdoor’ case secret
Last month’s secret hearing comes to light Details of Apple’s appeal against the UK’s so-called “backdoor order” will now play out in public after the Home Office failed in its bid to keep them secret on national security grounds.… This…
What native cloud security tools won’t catch
Native tools help, but they don’t cover everything – here’s what they miss and how to close the gaps Partner Content : AWS provides a number of security services, such as GuardDuty, Inspector, Config, and Security Hub, designed to protect…