The latest in a run of serious networking bugs gives attackers root if they have SNMP access Cisco has confirmed a new IOS and IOS XE zero-day, the latest in a string of flaws that attackers have been quick to…
Tag: The Register – Security
EU starting registration of fingerprints and faces for short-stay foreigners
Biometric Entry/Exit System phased in from October to 29 Schengen countries Travelers including Britons and Americans visiting most European countries will have to register their fingerprints and faces under a system that goes live next month.… This article has been…
Empty shelves, empty coffers: Co-op pegs cyber hit at £80m
Supermarket says the hack that shut down systems and emptied shelves has turned profits into losses The Co-operative Group has revealed the cyberattack that knocked its systems offline earlier this year will leave it nursing an £80 million hangover. … This…
Check your own databases before asking to see our passport photos, Home Office tells UK cops
Guidance follows privacy complaints over sharp increase in police searches of travel doc and visa pic libraries The Home Office has told police forces to check their own photo databases before asking it to search its libraries of passport and…
Three in four European companies are hooked on US tech
Secure your data, avoid US sanctions, and stay compliant with European cybersecurity alternatives Partner Content What happens when your company’s future depends on a service controlled by another country that loves trade fights, tariffs, and industrial-scale surveillance? That’s the risk…
New string of phishing attacks targets Python developers
If you recently got an email asking you to verify your credentials to a PyPI site, better change that password The Python Software Foundation warned users of a new string of phishing attacks using a phony Python Package Index (PyPI)…
Google warns China-linked spies lurking in ‘numerous’ enterprises since March
Mandiant CTO anticipates ‘hearing about this campaign for the next one to two years’ Unknown intruders – likely China-linked spies – have broken into “numerous” enterprise networks since March and deployed backdoors, providing access for their long-term IP and other…
UK agency makes arrest in airport cyberattack investigation
After air passenger travel hit across the Atlantic, organized crime agency strikes Breaking The UK’s National Crime Agency has arrested a man as part of an investigation into a ransomware attack that disrupted airports around the world last weekend.… This…
Cybercriminals cash out with casino giant’s employee data
Attackers hit jackpot after targeting Boyd Gaming Hotel and casino operator Boyd Gaming has disclosed a cyberattack to US regulators, warning that hackers may have stolen personal information belonging to employees and other individuals.… This article has been indexed from…
Campaigners urge UK PM Starmer to dump digital ID wheeze before it’s announced
Labour accused of sneaking in plans it denied before the general election Seven campaign groups have written to UK prime minister Keir Starmer urging him to scrap plans for a mandatory digital identity system – a project that is expected…
Politicos: ‘There is a good strong case for government intervention’ on JLR cyberattack
Covid-style financial support? Nothing to confirm yet, say MPs The chair of the UK’s business and trade committee says the situation at Jaguar Land Rover is likely to get “harder and harder over the next week or two,” but stopped…
Nearly half of businesses suffered deepfaked phone calls against staff
AI attacks on the rise A survey of cybersecurity bosses has shown that 62 percent reported attacks on their staff using AI over the last year, either by the use of prompt injection attacks or faking out their systems using…
SonicWall releases rootkit-busting firmware update following wave of attacks
Security vendor’s no good, very bad week year SonicWall on Monday released a firmware update that the security vendor says will remove rootkit malware deployed in recent attacks targeting Secure Mobile Access (SMA) 100 appliances.… This article has been indexed…
Third time’s the charm? SolarWinds (again) patches critical Web Help Desk RCE
Or maybe 3 strikes, you’re out? SolarWinds on Tuesday released a hotfix – again – for a critical, 9.8-severity flaw in its Web Help Desk IT ticketing software that could allow a remote, unauthenticated attacker to run commands on a…
OnePlus leaves researchers on read over Android bug that exposes texts
Rapid7 warns flaw could let any app peek at your SMS, but smartphone vendor won’t pick up Security researchers report that OnePlus smartphone users remain vulnerable to a critical bug that allows any application to read SMS and MMS data…
SIM city: Feds say 100,000-card farms could have killed cell towers in NYC
Secret Service seizes 300-server network allegedly tied to nation-state hackers The US Secret Service has dismantled a network of SIM farms in and around New York City it claims was behind multiple incidents targeting senior government officials and had enough…
Kaspersky: RevengeHotels checks back in with AI-coded malware
Old hotel scam gets an AI facelift, leaving travellers’ card details even more at risk Kaspersky has raised the alarm over the resurgence of hotel-hacking outfit “RevengeHotels,” which it claims is now using artificial intelligence to supercharge its scams.… This…
OpenSSF warns that open source infrastructure doesn’t run on thoughts and prayers
Foundations say billions of downloads rely on registries running on fumes – and someone’s gotta pay the bills The Open Source Security Foundation (OpenSSF) has had enough of being the unpaid janitor of the world’s software supply chain.… This article…
GitHub moves to tighten npm security amid phishing, malware plague
Hundreds of compromised packages pulled as registry shifts to 2FA and trusted publishing GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.… This article has been indexed from The Register…
Oracle gets to store US users’ TikTok data, says Trump
President to announce details on Big Red’s storage and security deal for Chinese social media phenomenon later this week The White House has promised that all US user data on TikTok will be stored on Oracle servers in the United…