Given Amnesty’s involvement, it’s a safe bet spyware is in play Qualcomm has issued 20 patches for its chipsets’ firmware, including one Digital Signal Processor (DSP) software flaw that has been exploited in the wild.… This article has been indexed…
Tag: The Register – Security
Using iPhone Mirroring at work? You might have just overshared to your boss
What does IT see but a dating app on your wee little screen If you’re using iPhone Mirroring at work: it’s time to stop, lest you give your employer’s IT department the capability to snoop through your dating apps, photos,…
Happy birthday, Putin – you’ve been pwned
Pro-Ukraine hackers claim credit for Russian state broadcasting shutdown Ukrainian hackers shut down Russian state news agency VGTRK’s online broadcasting and streaming services on Monday – president Vladimir Putin’s 72nd birthday – as Kremlin officials vowed to bring those responsible…
Google brings better bricking to Androids, to curtail crims
Improved security features teased in May now appearing around the world Google has apparently started a global rollout of three features in Android designed to make life a lot harder for thieves to profit from purloined phones.… This article has…
American Water rinsed in cyberattack, turns off app
It’s still safe to drink, top provider tells us American Water, which supplies over 14 million people in the US and numerous military bases, has stopped issuing bills and has taken its MyWater app offline while it investigates a cyberattack…
Feds reach for sliver of crypto-cash nicked by North Korea’s notorious Lazarus Group
A couple million will do for a start … but Kim’s crews are suspected of stealing much more The US government is attempting to claw back more than $2.67 million stolen by North Korea’s Lazarus Group, filing two lawsuits to…
American Water stops billing for H2O due to ‘cybersecurity incident’
Water is still safe to drink, it confirms American Water, which supplies over 14 million people in the US and numerous military bases, has stopped issuing bills and has taken its MyWater app offline while it investigates a hacking incident.……
Cops love facial recognition, and withholding info on its use from the courts
Withholding exculpatory evidence from suspects isn’t a great look when the tech is already questionable Police around the United States are routinely using facial recognition technology to help identify suspects, but those departments rarely disclose they’ve done so – even…
Chinese cyberspies reportedly breached Verizon, AT&T, Lumen
Salt Typhoon may have accessed court-ordered wiretaps and US internet traffic Verizon, AT&T, and Lumen Technologies were among the US broadband providers whose networks were reportedly hacked by Chinese cyberspies, possibly compromising the wiretapping systems used for court-ordered surveillance.… This…
Embattled users worn down by privacy options? Let them eat code
Struggle ye not with cookies, lest ye become a cookie monster Opinion The people are defeated. Worn out, deflated, and apathetic about the barrage of banners and pop-ups about cookies and permissions.… This article has been indexed from The Register…
Ryanair faces GDPR turbulence over customer ID checks
Irish data watchdog opens probe after ‘numerous complaints’ Ireland’s Data Protection Commission (DPC) has launched an inquiry into Ryanair’s Customer Verification Process for travelers booking flights through third-party websites or online travel agents (OTA).… This article has been indexed from…
UK’s Sellafield nuke waste processing plant fined £333K for infosec blunders
Radioactive hazards and cyber failings … what could possibly go wrong? The outfit that runs Britain’s Sellafield nuclear waste processing and decommissioning site has been fined £332,500 ($440,000) by the nation’s Office for Nuclear Regulation (ONR) for its shoddy cybersecurity…
About a quarter million Comcast subscribers had their data stolen from debt collector
Cable giant says ransomware involved, FBCS keeps schtum Comcast says data on 237,703 of its customers was in fact stolen in a cyberattack on a debt collector it was using, contrary to previous assurances it was given that it was…
About a quarter million Comcast subscribers had data stolen from debt collector
Cable giant says ransomware involved, FBCS keeps schtum Comcast says data on 237,703 of its customers was in fact stolen in a cyberattack on a debt collector it was using, contrary to previous assurances it was given that it was…
Apple fixes bug that let VoiceOver shout your passwords
Not a great look when the iGiant just launched its first password manager Apple just fixed a duo of security bugs in iOS 18.0.1 and iPadOS 18.0.1, one of which might cause users’ saved passwords to be read aloud. It’s…
Visit CyberThreat 2024 to hone your cybersecurity skills
Get together with the European cybersecurity community at a two-day conference in London this December Sponsored Post This year’s CyberThreat returns to London to provide a place for cybersecurity professionals to share experiences, new tools and techniques to help organisations…
Harvard duo hacks Meta Ray-Bans to dox strangers on sight in seconds
‘You can build this in a few days – even as a very naïve developer’ A pair of inventive Harvard undergraduates have created what they believe could be one of the most intrusive devices ever built – a wake-up call,…
Big names among thousands infected by payment-card-stealing CosmicSting crooks
Gangs hit 5% of all Adobe Commerce, Magento-powered stores, Sansec says Ray-Ban, National Geographic, Whirlpool, and Segway are among thousands of brands whose web stores were reportedly compromised by criminals exploiting the CosmicSting flaw in hope of stealing shoppers’ payment…
Average North American CISO pay now $565K, mainly thanks to one weird trick
Best way to boost your package is to leave, or pretend to A survey of nearly 700 CISOs in the US and Canada has found their pay has risen over the past year to an average of $565,000 and a…
DOJ, Microsoft seize 107 domains used in Russia’s Star Blizzard phishing attacks
Winter is coming The US Department of Justice and Microsoft have seized 107 websites used by Russian cyberspies in a phishing campaign to steal sensitive information from US government agencies, think tanks, and other victims.… This article has been indexed…