Chinese AI startup grapples with consequences of sudden popularity China’s DeepSeek, which shook up US AI companies with the debut of its R1 model family, has limited new signups due to ongoing cyberattack.… This article has been indexed from The…
Tag: The Register – Security
Google takes action after coder reports ‘most sophisticated attack I’ve ever seen’
Latest trope is tricky enough to fool even the technical crowd… almost Google says it’s now hardening defenses against a sophisticated account takeover scam documented by a programmer last week.… This article has been indexed from The Register – Security…
Sweden seizes cargo ship after another undersea cable hit in suspected sabotage
NATO increasing patrols in the Baltic as region awaits navy drones Swedish authorities have “seized” a vessel – believed to be the cargo ship Vezhen – “suspected of carrying out sabotage” after a cable running between Sweden and Latvia in the…
CDNs: Great for speeding up the internet, bad for location privacy
Also, Subaru web portal spills user deets, Tornado Cash sanctions overturned, a Stark ransomware attack, and more Infosec in brief Using a custom-built tool, a 15-year-old hacker exploited Cloudflare’s content delivery network to approximate the locations of users of apps…
British Museum says ex-contractor ‘shut down’ IT systems, wreaked havoc
Former freelancer cuffed a week after being dismissed by UK’s top visitor attraction The British Museum was forced to temporarily close some galleries and exhibitions this weekend after a disgruntled former tech contractor went rogue and shuttered some onsite IT…
Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet
Who could be so interested in chips, manufacturing, and more, in the US, UK, Europe, Russia… Someone has been quietly backdooring selected Juniper routers around the world in key sectors including semiconductor, energy, and manufacturing, since at least mid-2023.… This…
UK telco TalkTalk confirms probe into alleged data grab underway
Spinner says crim’s claims ‘very significantly overstated’ UK broadband and TV provider TalkTalk says it’s currently investigating claims made on cybercrime forums alleging data from the company was up for grabs.… This article has been indexed from The Register –…
AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud
GameOn? It’s looking more like game over for that biz The co-founder and former CEO of AI startup GameOn is in a pickle. After exiting the top job last year under a cloud, he’s now in court – along with…
Don’t want your Kubernetes Windows nodes hijacked? Patch this hole now
SYSTEM-level command injection via API parameter *chef’s kiss* A now-fixed command-injection bug in Kubernetes can be exploited by a remote attacker to gain code execution with SYSTEM privileges on all Windows endpoints in a cluster, and thus fully take over…
North Korean dev who renamed himself ‘Bane’ accused of IT worker fraud scheme
5 indicted as FBI warns North Korea dials up aggression, plus Russian devs allegedly get in on the act The US is indicting yet another five suspects it believes were involved in North Korea’s long-running, fraudulent remote IT worker scheme…
China and friends claim success in push to stamp out tech support cyber-scam slave camps
Paint a target on Myanmar, pledge more info-sharing to get the job done A group established by six Asian nations to fight criminal cyber-scam slave camps that infest the region claims it’s made good progress dismantling the operations.… This article…
Court rules FISA Section 702 surveillance of US resident was unconstitutional
‘Public interest alone does not justify warrantless querying’ says judge It was revealed this week a court in New York made a landmark ruling that sided against the warrantless state surveillance of people’s private communications in America.… This article has…
One of Salt Typhoon’s favorite flaws still wide open on 91% of at-risk Exchange Servers
But I mean, you’ve had nearly four years to patch One of the critical security flaws exploited by China’s Salt Typhoon to breach US telecom and government networks has had a patch available for nearly four years – yet despite…
Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management
No in-the-wild exploits … yet Cisco has pushed a patch for a critical, 9.9-rated vulnerability in its Meeting Management tool that could allow a remote, authenticated attacker with low privileges to escalate to administrator on affected devices.… This article has…
Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug
No in-the-wild exploits … yet Cisco has pushed a patch for a critical, 9.9-rated vulnerability in its Meeting Management tool that could allow a remote, authenticated attacker with low privileges to escalate to administrator on affected devices.… This article has…
SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix
Big organizations and governments are main users of these gateways SonicWall is warning customers of a critical vulnerability that was potentially already exploited as a zero-day.… This article has been indexed from The Register – Security Read the original article:…
Meta’s pay-or-consent model under fire from EU consumer group
Company ‘strongly disagrees’ with law infringement allegations Meta has again come under fire for its pay-or-consent model in the EU.… This article has been indexed from The Register – Security Read the original article: Meta’s pay-or-consent model under fire from…
FortiGate config leaks: Victims’ email addresses published online
Experts warn not to take leaks lightly as years-long compromises could remain undetected Thousands of email addresses included in the Belsen Group’s dump of FortiGate configs last week are now available online, revealing which organizations may have been impacted by…
Who is DDoSing you? Rivals, probably, or cheesed-off users
Plus: ‘Largest-ever’ duff traffic tsunami clocks in at 5.6 Tbps In addition to Chinese spies invading organizations’ networks and ransomware crews locking up sensitive files, botnets blasting distributed denial of service (DDoS) attacks can still cause a world of hurt…
Biz tax rises, inflation and high interest. Why fewer UK tech firms started in 2024
And the government thinks that AI and taking shackles off big tech will help? God help Britain For the first time since the start of the pandemic, the number of tech firms incorporated in the UK has declined, with a…