800K? Make that double, and we’ll need a double, too, for the pain A Texas firm that provides backend IT and other services for American insurers has admitted twice as many people had their info stolen from it than previously…
Tag: The Register – Security
4chan, the ‘internet’s litter box,’ appears to have been pillaged by rival forum
Source code, moderator info, IP addresses, more allegedly swiped and leaked Thousands of 4chan users reported outages Monday night amid rumors on social media that the edgy anonymous imageboard had been ransacked by an intruder, with someone on a rival…
China names alleged US snoops over Asian Winter Games attacks
Beijing claims NSA went for gold in offensive cyber, got caught in the act China’s state-run press has taken its turn in trying to highlight alleged foreign cyber offensives, accusing the US National Security Agency of targeting the 2025 Asian…
All right, you can have one: DOGE access to Treasury IT OK’d judge
Login green-lit for lone staffer if he’s trained, papered up, won’t pull an Elez A federal judge has partly lifted an injunction against Elon Musk’s Trump-blessed cost-trimming DOGE unit, allowing one staff member to access sensitive US Treasury payment systems.…
Chinese snoops use stealth RAT to backdoor US orgs – still active last week
Let the espionage and access resale campaigns begin (again) A cyberspy crew or individual with ties to China’s Ministry of State Security has infected global organizations with a remote access trojan (RAT) that’s “even better” than Cobalt Strike, using this…
ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?
Stopping users shooting themselves in the foot with last century’s tech Microsoft has twisted the knife into ActiveX once again, setting Microsoft 365 to disable all controls without so much as a prompt.… This article has been indexed from The…
Where it Hertz: Customer data driven off in Cleo attacks
Car hire biz takes your privacy seriously, though Car hire giant Hertz has confirmed that customer information was stolen during the zero-day data raids on Cleo file transfer products last year.… This article has been indexed from The Register –…
EU gives staff ‘burner phones, laptops’ for US visits
That would put America on the same level as China for espionage The European Commission is giving staffers visiting the US on official business burner laptops and phones to avoid espionage attempts, according to the Financial Times.… This article has…
Don’t delete that mystery empty folder. Windows put it there as a security fix
Copilot vibe coding for OS development? Why not Canny Windows users who’ve spotted a mysterious folder on hard drives after applying last week’s security patches for the operating system can rest assured – it’s perfectly benign. In fact, it’s recommended…
New SSL/TLS certs to each live no longer than 47 days by 2029
IT admins, get ready to grumble CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to just 47 days by March 15,…
New SSL/TLS cert to live no longer than 47 days by 2029
IT admins, get ready to grumble CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to just 47 days by March 15,…
Cyber congressman demands answers before CISA gets cut down to size
What’s the goal here, Homeland Insecurity or something? As drastic cuts to the US govt’s Cybersecurity and Infrastructure Security Agency loom, Rep Eric Swalwell (D-CA), the ranking member of the House’s cybersecurity subcommittee, has demanded that CISA brief the subcommittee…
Official abuse of state security has always been bad, now it’s horrifying
UK holds onto oversight by a whisker, but it’s utterly barefaced on the other side of the pond Opinion The UK government’s attempts to worm into Apple’s core end-to-end encryption were set back last week when the country’s Home Office…
CIO and digi VP to depart UK retail giant Asda as Walmart divorce woes settle
Brit retailer says troubled breakup with tech platform of former US owner nearing conclusion Two of the top team behind Asda’s £1 billion ($1.31 billion) tech divorce from US retail giant Walmart — which has seen a number of setbacks…
Old Fortinet flaws under attack with new method its patch didn’t prevent
PLUS: Chinese robodogs include backdoor; OpenAI helps spammer; A Dutch data disaster; And more! Infosec In Brief Fortinet last week admitted that attackers have found new ways to exploit three flaws it thought it had fixed last year.… This article…
China reportedly admitted directing cyberattacks on US infrastructure
PLUS: India’s new electronics subsidies; Philippines unplugs a mobile carrier; Alibaba Cloud expands Asia In Brief Chinese officials admitted to directing cyberattacks on US infrastructure at a meeting with their American counterparts, according to The Wall Street Journal.… This article…
Hacktivism resurges – but don’t be fooled, it’s often state-backed goons in masks
Military units, government nerds appear to join the fray, with physical infra in sights Feature From triggering a water tank overflow in Texas to shutting down Russian state news services on Vladimir Putin’s birthday, self-styled hacktivists have been making headlines.……
Hacktivism is back – but don’t be fooled, it’s often state-backed goons in masks
Military units, government nerds appear to join the fray, with physical infra in sights Feature From triggering a water tank overflow in Texas to shutting down Russian state news services on Vladimir Putin’s birthday, self-styled hacktivists have been making headlines.……
LLMs can’t stop making up software dependencies and sabotaging everything
Hallucinated package names fuel ‘slopsquatting’ The rise of LLM-powered code generation tools is reshaping how developers write software – and introducing new risks to the software supply chain in the process.… This article has been indexed from The Register –…
AI can’t stop making up software dependencies and sabotaging everything
Hallucinated package names fuel ‘slopsquatting’ The rise of AI-powered code generation tools is reshaping how developers write software – and introducing new risks to the software supply chain in the process.… This article has been indexed from The Register –…