No in-the-wild exploits … yet Cisco has pushed a patch for a critical, 9.9-rated vulnerability in its Meeting Management tool that could allow a remote, authenticated attacker with low privileges to escalate to administrator on affected devices.… This article has…
Tag: The Register – Security
SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix
Big organizations and governments are main users of these gateways SonicWall is warning customers of a critical vulnerability that was potentially already exploited as a zero-day.… This article has been indexed from The Register – Security Read the original article:…
Meta’s pay-or-consent model under fire from EU consumer group
Company ‘strongly disagrees’ with law infringement allegations Meta has again come under fire for its pay-or-consent model in the EU.… This article has been indexed from The Register – Security Read the original article: Meta’s pay-or-consent model under fire from…
FortiGate config leaks: Victims’ email addresses published online
Experts warn not to take leaks lightly as years-long compromises could remain undetected Thousands of email addresses included in the Belsen Group’s dump of FortiGate configs last week are now available online, revealing which organizations may have been impacted by…
Who is DDoSing you? Rivals, probably, or cheesed-off users
Plus: ‘Largest-ever’ duff traffic tsunami clocks in at 5.6 Tbps In addition to Chinese spies invading organizations’ networks and ransomware crews locking up sensitive files, botnets blasting distributed denial of service (DDoS) attacks can still cause a world of hurt…
Biz tax rises, inflation and high interest. Why fewer UK tech firms started in 2024
And the government thinks that AI and taking shackles off big tech will help? God help Britain For the first time since the start of the pandemic, the number of tech firms incorporated in the UK has declined, with a…
Asus lets processor security fix slip out early, AMD confirms patch in progress
Answers on a postcard to what ‘Microcode Signature Verification Vulnerability’ might mean AMD has confirmed at least some of its microprocessors suffer a microcode-related security vulnerability, the existence of which accidentally emerged this month after a fix for the flaw…
Oracle emits 603 patches, names one it wants you to worry about soon
Old flaws that keep causing trouble haunt Big Red Oracle has delivered its regular quarterly collection of patches: 603 in total, 318 for its own products, and another 285 for Linux code it ships.… This article has been indexed from…
Trump ‘waved a white flag to Chinese hackers’ as Homeland Security axed cyber advisory boards
And: America ‘has never been less secure,’ retired rear admiral tells Congress The Trump administration gutted key cybersecurity advisory boards in its first days, as expert witnesses warned Congress about dire risks posed by cyberattacks inbound from China.… This article…
Trump ‘waved a white flag to Chinese hackers’ as DHS axed cyber advisory boards
‘The homeland has never been less secure,’ retired Rear Admiral tells Congress The Trump Administration gutted key cyber advisory boards in its first days, as expert witnesses warned Congress about dire risks posed by cyberattacks rooted in China.… This article…
Supply chain attack hits Chrome extensions, could expose millions
Threat actor exploited phishing and OAuth abuse to inject malicious code Cybersecurity outfit Sekoia is warning Chrome users of a supply chain attack targeting browser extension developers that has potentially impacted hundreds of thousands of individuals already.… This article has…
Give users confidence in your digital infrastructure
Why Digital Trust and crypto-agility are essential to authentication and data security Sponsored Post Research firm IDC estimates that over 53 percent of organizations are now mostly or completely digital native.… This article has been indexed from The Register –…
Microsoft issues out-of-band fix for Windows Server 2022 NUMA glitch
Update addresses boot failures on multi-node systems Microsoft is releasing an out-of-band patch to deal with a problem that prevented some Windows Server 2022 machines from booting.… This article has been indexed from The Register – Security Read the original…
Silk Road’s Dread Pirate Roberts walks free as Trump pardons dark web kingpin
Ross Ulbricht’s family are now appealing for donations to support his reintegration into society Silk Road founder Ross Ulbricht is now a free man after US President Donald Trump made good on his promise to issue a federal pardon upon…
Infosec was literally the last item in Trump’s policy plan, yet major changes are likely on his watch
Everyone agrees defense matters. How to do it is up for debate Feature The Trump administration came to office this week without a detailed information security policy, but analysis of cabinet nominees’ public remarks and expert comments suggest it will…
Ransomware scum make it personal for Reg readers by impersonating tech support
That invitation to a Teams call on which IT promises to mop up a spamstorm may not be what it seems Two ransomware campaigns are abusing Microsoft Teams to infect organizations and steal data, and the crooks may have ties…
PowerSchool theft latest: Decades of Canadian student records, data from 40-plus US states feared stolen
Lawsuits pile up after database accessed by miscreants Canada’s largest school board has revealed that student records dating back to 1985 may have been accessed by miscreants who compromised software provider PowerSchool.… This article has been indexed from The Register…
PowerSchool thieves net decades of Canadian students’ records, hit 40-plus US states
Lawsuits pile up after database accessed by miscreants Canada’s largest school board has revealed that student records dating back to 1985 may have been accessed by miscreants who compromised software provider PowerSchool.… This article has been indexed from The Register…
Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day
Seven days after disclosure and little action taken, data shows Fortinet customers need to get with the program and apply the latest updates as nearly 50,000 management interfaces are still vulnerable to the latest zero-day exploit.… This article has been…
HPE probes IntelBroker’s bold data theft boasts
Incident response protocols engaged following claims of source code burglary Hewlett Packard Enterprise (HPE) is probing assertions made by prolific Big Tech intruder IntelBroker that they broke into the US corporation’s systems and accessed source code, among other things.… This…