Of course, Microsoft is in the mix, isn’t it Chinese spies reportedly broke into the US Republication National Committee’s Microsoft-powered email and snooped around for months before being caught.… This article has been indexed from The Register – Security Read…
Tag: The Register – Security
MITRE Caldera security suite scores perfect 10 for insecurity
Is a trivial remote-code execution hole in every version part of the training, or? The smart cookie who discovered a perfect 10-out-of-10-severity remote code execution (RCE) bug in MITRE’s Caldera security training platform has urged users to “immediately pull down…
Harassment allegations against DEF CON veteran detailed in court filing
More than a dozen women came forward with accusations Details about the harassment allegations leveled at DEF CON veteran Christopher Hadnagy have now been revealed after a motion for summary judgment was filed over the weekend.… This article has been…
Data resilience and data portability
Why organizations should protect everything, everywhere, all at once Sponsored Feature Considering it has such a large share of the data protection market, Veeam doesn’t talk much about backups in meetings with enterprise customers these days.… This article has been…
China’s Silver Fox spoofs medical imaging apps to hijack patients’ computers
Sly like a PRC cyberattack A Chinese government-backed group is spoofing legitimate medical software to hijack hospital patients’ computers, infecting them with backdoors, credential-swiping keyloggers, and cryptominers.… This article has been indexed from The Register – Security Read the original…
Malware variants that target operational tech systems are very rare – but 2 were found last year
Fuxnet and FrostyGoop were both used in the Russia-Ukraine war Two new malware variants specifically designed to disrupt critical industrial processes were set loose on operational technology networks last year, shutting off heat to more than 600 apartment buildings in…
Southern Water takes the fifth over alleged $750K Black Basta ransom offer
Leaked chats and spilled secrets as AI helps decode circa 200K private talks Southern Water neither confirms nor denies offering Black Basta a $750,000 ransom payment following its ransomware attack in 2024.… This article has been indexed from The Register…
How nice that state-of-the-art LLMs reveal their reasoning … for miscreants to exploit
Blueprints shared for jail-breaking models that expose their chain-of-thought process Analysis AI models like OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking can mimic human reasoning through a process called chain of thought.… This article has been indexed from The…
Google binning SMS MFA at last and replacing it with QR codes
Everyone knew texted OTPs were a dud back in 2016 Google has confirmed it will phase out the use of SMS text messages for multi-factor authentication in favor of more secure technologies.… This article has been indexed from The Register…
US Dept of Housing screens sabotaged to show deepfake of Trump sucking Elon’s toes
‘Appropriate action will be taken,’ we’re told – as federal HR email sparks uproar, ax falls on CISA staff Visitors to the US Department of Housing and Urban Development’s headquarters in the capital got some unpleasant viewing on Monday morning…
Shifting the cybersecurity odds
Four domains to build resilience Partner Content Security can feel like fighting a losing battle, but it doesn’t have to be.… This article has been indexed from The Register – Security Read the original article: Shifting the cybersecurity odds
The software UK techies need to protect themselves now Apple’s ADP won’t
No matter how deep you are in Apple’s ‘ecosystem,’ there are ways to stay encrypted in the UK Apple customers, privacy advocates, and security sleuths have now had the weekend to stew over the news of the iGadget maker’s decision…
Rather than add a backdoor, Apple decides to kill iCloud E2EE for UK peeps
PLUS: SEC launches new crypto crime unit; Phishing toolkit upgraded; and more Infosec in brief Apple has responded to the UK government’s demand for access to its customers’ data stored in iCloud by deciding to turn off its Advanced Data…
Experts race to extract intel from Black Basta internal chat leaks
Researchers say there’s dissent in the ranks. Plus: An AI tool lets you have a go yourself at analysing the data Hundreds of thousands of internal messages from the Black Basta ransomware gang were leaked by a Telegram user, prompting…
Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws
PoC exploit code shows why this is a patch priority Security engineers have released a proof-of-concept exploit for four critical Ivanti Endpoint Manager bugs, giving those who haven’t already installed patches released in January extra incentive to revisit their to-do…
Thailand ready to welcome 7,000 trafficked scam call center victims back from Myanmar
It comes amid a major crackdown on the abusive industry that started during COVID Thailand is preparing to receive thousands of people rescued from scam call centers in Myanmar as the country launches a major crackdown on the pervasive criminal…
Linux royalty backs adoption of Rust for kernel code, says its rise is inevitable
Nobody wants memory bugs. Penguinistas continue debate on how to squish ’em Some Linux kernel maintainers remain unconvinced that adding Rust code to the open source project is a good idea, but its VIPs are coming out in support of…
Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes
Said bugs ‘can have significant implications’ – glad to hear that from Redmond Microsoft is so concerned about security in its Copilot products for folks that it’s lifted bug bounty payments for moderate-severity vulnerabilities from nothing to a maximum of…
Oops, some of our customers’ Power Pages sites were exploited, says Microsoft
Don’t think this is SaaS and you can relax: Redmond wants a few of you to check your websites Microsoft has fixed a security flaw in its Power Pages website-building SaaS, after criminals got there first – and urged users…
US minerals company says crooks broke into email and helped themselves to $500K
A painful loss for young company that’s yet to generate revenue A NASDAQ-listed US minerals company says cybercriminals broke into its systems on Valentine’s Day and paid themselves around $500,000 – money earmarked for a vendor.… This article has been…