Bad news about the Linux system monitor may be on the way Veteran sysadmin and tech blogger Rachel Kroll posted a cryptic warning yesterday about a popular Linux system monitoring tool. Maybe it’s better to be safe than sorry.… This…
Tag: The Register – Security
NCSC taps influencers to make 2FA go viral
Who knew social media stars had a role to play in building national cyber resilience? The world’s biggest brands have benefited from influencer marketing for years – now the UK’s National Cyber Security Centre (NCSC) has hopped on the bandwagon…
There are perhaps 10,000 reasons to doubt Oracle Cloud’s security breach denial
Customers come forward claiming info was swiped from prod Oracle Cloud’s denial of a digital break-in is now in clear dispute. A infosec researcher working on validating claims that the cloud provider’s login servers were compromised earlier this year says…
Infosec pro Troy Hunt HasBeenPwned in Mailchimp phish
16,000 stolen records pertain to former and active mail subscribers Infosec veteran Troy Hunt of HaveIBeenPwned fame is notifying thousands of people after phishers scooped up his Mailchimp mailing list.… This article has been indexed from The Register – Security…
You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?
Just an FYI, like Generative AI assistants packaged up as browser extensions harvest personal data with minimal safeguards, researchers warn.… This article has been indexed from The Register – Security Read the original article: You know that generative AI browser…
VanHelsing ransomware emerges to put a stake through your Windows heart
There’s only one rule – don’t attack Russia, duh Check Point has spotted a fresh ransomware-as-a-service crew in town: VanHelsing, touting a cross-platform locker targeting Microsoft Windows, Linux, and VMware ESXi systems, among others. But so far, only Windows machines…
Hm, why are so many DrayTek routers stuck in a bootloop?
Time to update your firmware, if you can, to one with the security fixes, cough cough DrayTek router owners in the UK and beyond had a pretty miserable weekend after some ISPs began to notice a lot of their customers’…
Public-facing Kubernetes clusters at risk of takeover thanks to Ingress-Nginx flaw
How many K8s systems are sat on the internet front porch like that … Oh, thousands, apparently Cloudy infosec outfit Wiz has discovered serious vulnerabilities in the admission controller component of Ingress-Nginx Controller that could allow the total takeover of…
OTF, which backs Tor, Let’s Encrypt and more, sues to save funding from Trump cuts
Kari, OK, we’ll see you in court An organization that bankrolls various internet security projects has asked a Washington DC court to prevent the Trump administration from cancelling its federal funding – and expressed fears that if the cash stops…
Top Trump officials text classified Yemen airstrike plans to journo in Signal SNAFU
Massive OPSEC fail from the side who brought you ‘lock her up’ Senior Trump administration officials used the messaging app Signal to discuss secret government business – including detailed plans to attack Houthi rebels in Yemen – and accidentally invited…
FCC on the prowl for Huawei and other blocked Chinese makers in America
Be vewy vewy quiet, I’m hunting rackets The FCC is investigating whether Chinese manufacturers black-listed on its so-called Covered List – including Huawei – are still somehow doing business in America, either by misreading the rules or willfully ignoring them.……
As nation-state hacking becomes ‘more in your face,’ are supply chains secure?
Ex-US Air Force officer says companies shouldn’t wait for govt mandates Interview Former US Air Force cyber officer Sarah Cleveland worries about the threat of a major supply-chain attack from China or another adversarial nation. So she installed solar panels…
AI agents swarm Microsoft Security Copilot
Looking to sort through large volumes of security info? Redmond has your backend Microsoft’s Security Copilot is getting some degree of agency, allowing the underlying AI model to interact more broadly with the company’s security software to automate various tasks.……
23andMe’s genes not strong enough to avoid Chapter 11
CEO steps down after multiple failed attempts to take the DNA testing company private Beleaguered DNA testing biz 23andMe – hit by a massive cyber attack in 2023 – is filing for bankruptcy protection in the US following years of…
Is Washington losing its grip on crypto, or is it a calculated pivot to digital dominance?
It’s been a very busy week for Digicash Donald’s administration Analysis Is the US retreating from its hardline stance on crypto? On Friday, the US Treasury Department lifted sanctions imposed on notorious crypto mixer Tornado Cash, once accused of washing…
Microsoft tastes the unexpected consequences of tariffs on time
Throw a spanner in the works, best get good at fixing things. Now, where did you put that spanner? Opinion Never attribute to malice that which is adequately explained by stupidity. This works well in sane times, less so when…
Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warns
PLUS: Russian bug-buyers seeks Telegram flaws; Another WordPress security mess; NIST backlog grows; and more! Infosec In Brief Organized crime networks are now reliant on digital tech for most of their activities according to Europol, the European agency that fights…
China bans compulsory facial recognition and its use in private spaces like hotel rooms
PLUS: Zoho’s Ulaa anointed India’s most patriotic browser; Typhoon-like gang targets Taiwan; Japan debates offensive cyber-ops; and more Asia In Brief China’s Cyberspace Administration and Ministry of Public Security have outlawed the use of facial recognition without consent.… This article…
Oracle Cloud says it’s not true someone broke into its login servers and stole data
Despite evidence to the contrary as alleged pilfered info goes on sale Oracle has straight up denied claims by a miscreant that its public cloud offering has been compromised and information stolen.… This article has been indexed from The Register…
Ex-NSA boss: Election security focus helped dissuade increase in Russian meddling with US
Plus AI in the infosec world, why CISA should know its place, and more Interview Russia appears to be having second thoughts on how aggressively, or at least how visibly, it attempts to influence American elections, according to a former…