Fourth time’s the harm? Gravy Analytics has been sued yet again for allegedly failing to safeguard its vast stores of personal data, which are now feared stolen. And by personal data we mean information including the locations of tens of…
Tag: The Register – Security
Federal judge tightens DOGE leash over critical Treasury payment system access
Lawsuit: ‘Scale of intrusion into individuals’ privacy is massive and unprecedented’ Elon Musk’s Department of Government Efficiency has had its access to US Treasury payment systems restricted – at least temporarily – following a lawsuit from advocacy groups and unions.……
Dems want answers on national security risks posed by hiring freeze, DOGE probes
Are cybersecurity roles included? Are Elon’s enforcers vetted? Inquiring minds want to know Elected officials are demanding answers as to whether the Trump administration and Elon Musk’s Department of Government Efficiency (DOGE) are hamstringing US national security.… This article has…
Dems want answers on national security risks posed by hiring freeze, DOGE
Are cybersecurity roles included? Are Elon’s enforcers vetted? Inquiring minds want to know Elected officials are demanding answers as to whether the Trump administration and Elon Musk’s Department of Government Efficiency (DOGE) are hamstringing US national security.… This article has…
Robocallers who phoned the FCC pretending to be from the FCC land telco in trouble
Don’t laugh: The $4.5m fine proposed for carrier Telnyx shows how the Trump administration will run its comms regulator In its first enforcement action of the Trump presidency, the FCC has voted to propose fining Telnyx $4,492,500 – after scammers…
Democrats demand to know WTF is up with that DOGE server on OPM’s network
Are you trying to make this easy for China and Russia? Who bought it, who installed it, and what’s happening with the data on it.… This article has been indexed from The Register – Security Read the original article: Democrats…
Robocallers who called the FCC pretending to be from the FCC land telco in trouble
Don’t laugh: The $4.5m fine proposed for carrier Telnyx shows how the Trump administration will run its comms regulator In its first enforcement action of the Trump presidency, the FCC has voted to propose fining Telnyx $4,492,500 – after scammers…
Mixing Rust and C in Linux likened to cancer by kernel maintainer
Some worry multi-lang codebase makes it harder to maintain open source uber-project, others disagree Developers trying to add Rust code to the Linux kernel continue to face opposition from kernel maintainers who believe using multiple languages is an unwelcome and…
DOGE latest: Citrix supremo has ‘read-only’ access to US Treasury payment system
CEO of Cloud Software a ‘special government employee’ probing through IT for Elon Musk’s DOGE The US Treasury Department has revealed Tom Krause – the chief exec of Citrix and Netscaler owner Cloud Software Group – has “read-only” access to…
Musky minion granted ‘read-only’ access to federal payment systems
Nothing to see here, just a ‘special government employee’ doing his job The US Treasury Department has assured Congress that a “special government employee” associated with Elon Musk’s Department of Government Efficiency (DOGE) has just “read-only” access to vital federal…
Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge
International security squads all focus on stopping baddies busting in through routers, IoT kit etc Netgear is advising customers to upgrade their firmware after it patched two critical vulnerabilities affecting multiple routers.… This article has been indexed from The Register…
US cranks up espionage charges against ex-Googler accused of trade secrets heist
Mountain View clocked onto the scheme with days to spare A Chinese national faces a substantial stint in prison and heavy fines if found guilty of several additional charges related to economic espionage and theft of trade secrets at Google.……
Google: How to make any AMD Zen CPU always generate 4 as a random number
Malicious microcode vulnerability discovered, fixes rolling out for Epycs at least Googlers have not only figured out how to break AMD’s security – allowing them to load unofficial microcode into its processors to modify the silicon’s behavior as they wish…
Poisoned Go programming language package lay undetected for 3 years
Researcher says ecosystem’s auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.… This article has been…
Grubhub serves up security incident with a side of needing to change your password
Contact info and partial payment details may be compromised US food and grocery delivery platform Grubhub says a security incident at a third-party service provider is to blame after user data was compromised.… This article has been indexed from The…
US accuses Canadian math prodigy of $65M crypto scheme
Suspect, still at large, said to back concept that ‘code is law’ New York feds today unsealed a five-count criminal indictment charging a 22-year-old Canadian math prodigy with exploiting vulnerabilities in two decentralized finance protocols, allegedly using them to fraudulently…
Cyberattack on NHS causes hospitals to miss cancer care targets
Healthcare chiefs say impact will persist for months NHS execs admit that last year’s cyberattack on hospitals in Wirral, northwest England, continues to “significantly” impact waiting times for cancer treatments, and suspect this will last for “months.”… This article has…
Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look ‘insignificant’
When cloud customers don’t clean up after themselves, part 97 Abandoned AWS S3 buckets could be reused to hijack the global software supply chain in an attack that would make Russia’s “SolarWinds adventures look amateurish and insignificant,” watchTowr Labs security…
UK govt must learn fast and let failing projects die young
Tackle longstanding issues around productivity, cyber resilience and public sector culture, advises spending watchdog The UK’s government spending watchdog has called on the current administration to make better use of technology to kickstart the misfiring economy and ensure better delivery…
Google patches odd Android kernel security bug amid signs of targeted exploitation
Also, Netgear fixes critical router, access point vulnerabilities Google has released its February Android security updates, including a fix for a high-severity kernel-level vulnerability, which is suspected to be in use by targeted exploits.… This article has been indexed from…