Hate 'contact us' forms? This PHPmailer zero day will drop shell in sender
Borked patch opens remote code execution on web servers
Security03 Jan 2017 | 29
Top-Secret-cleared SOCOM medics hit in 11GB govt database leak
Dismissed hacker calls buddy to nix exposed database
Security03 Jan 2017 | 21
Privacy Commissioner, infosec boffins, call for reform of anti-hack Bill
Argument that security is improved by prohibiting testing challenged
Legal18 Dec 2016 | 5
German infosec agency urges security review after Yahoo! flensing
Local companies take security seriously, says BSI head, but give 'em fake phone numbers and addresses anyway
Security16 Dec 2016 | 5
Ransomware scum face unified white hat army
BitDefender, Trend Micro, Check Point, Emisoft, others, join No More Ransom project
Security16 Dec 2016 | 18
Security! experts! slam! Yahoo! management! for! using! old! crypto!
Analysis Suits should have done more to protect users, rather than user numbers
Security15 Dec 2016 | 50
Bluetooth-enabled safe lock popped after attackers win PINs
If you use one, stop now. If you write heist movies, write safe-crackers out of your script
Security15 Dec 2016 | 53
Yahoo! says! hackers! stole! ONE! BEELLION! user! accounts!
Purple Palace plundered in new breach unrelated to previous p0wnage
Security14 Dec 2016 | 44
Persistent ad and dialler trojans found on 28 Android phones
Mostly landfill Androids from odd places, but Lenovo makes the list too
Security14 Dec 2016 | 26
A single typo may have tipped US election Trump's way
DNC figure John Podesta told to follow phishing link, instead of link to enable 2FA
Security14 Dec 2016 | 124
Pre-rolled stripped, hardened Copperhead Androids hit Oz, NZ
Flash for free or pick up a Nexus that's ready to roll
Security13 Dec 2016 |
HPE 3PAR storage SNAFU takes Australian Tax Office offline
Sources tell of 10-hour data wiping disaster recovery plan after unique collapse
Storage13 Dec 2016 | 30
P0wnographer finds remote code exec bug in McAfee enterprise
This one ticks all the boxes: Runs as
root ✔ Claims security ✔ Unpopular product with few updates ✔
Security13 Dec 2016 | 11
Microsoft Edge's malware alerts can be faked, researcher says
Fiddle with a URL and you can pop up and tell users to do anything
Security12 Dec 2016 | 3
Melbourne hacker adds padding oracle to free popular hacker course
PentesterLab chomps crypto
Security12 Dec 2016 | 1
Germany warns Moscow will splash cash on pre-election propaganda and misinformation spree
Top security agency issues warning ahead of 2017 poll
Security12 Dec 2016 | 88
Ransomware scum offer free decryption if you infect two mates
Friends don't infect friends with ransomware ... until it saves them $770
Security11 Dec 2016 | 76
Moscow says writing infrastructure attack code is a thought crime
Bill suggests sending malware authors to the gulag archipelago
Legal09 Dec 2016 | 29
Stealing, scamming, bluffing: El Reg rides along with pen-testing 'red team hackers'
Feature Broad smiles, good suits and fake IDs test security in new dimensions
Security08 Dec 2016 | 41
Silver screen script hacker and dox douche gets 5 years in US cooler
Hello [celebrity], please reset your password
Security08 Dec 2016 | 10
Need Xmas ideas? Try CVE-2015-7645, a Flash gift that keeps on giving
Who the hell needs zero days?
Security08 Dec 2016 | 5
Masterful malvertisers pwn Channel 9, Sky, MSN in stealth attacks
Same group compromised a million users A DAY.
Security08 Dec 2016 | 13
Crims using anti-virus exclusion lists to send malware to where it can do most damage
When vendors tell you what to whitelist, crims are reading too
Security07 Dec 2016 | 23
Standards body warned SMS 2FA is insecure and nobody listened
Duo Security says NIST's advice to deprecate out-of-band passwords has been ignored
Security06 Dec 2016 | 32
Guessing valid credit card numbers in six seconds? Priceless
Brit researchers find a way to figure out VISA card numbers just by going shopping
Security05 Dec 2016 | 54
Microsoft's 'Samaritan' refuses help to hackers doing Win 10 recon
'SAMRi10' script hides the creds hackers crave, making box-to-box jumps harder
Security02 Dec 2016 | 11
Hackers waste Xbox One, PS4, MacBook, Pixel, with USB zapper
VIDS What would happen if someone sticks this USBBQ into an airplane seat socket?
Security02 Dec 2016 | 63
Shamoon malware returns to again wipe Saudi-owned computers
Iran suspected as likely source of re-vamped nastyware
Security02 Dec 2016 | 5
Fatal flaws in ten pacemakers make for Denial of Life attacks
Brit/Belgian research team decipher signals and devise wounding wireless attacks
Security01 Dec 2016 | 20
SHIFT + F10, Linux gets you Windows 10's cleartext BitLocker key
Don't panic, because this one's a bit esoteric. Do feel free to face-palm anyway
OSes01 Dec 2016 | 69
Drive-by web nasty unmasks Tor Browser users, Mozilla dashes to patch zero-day vuln
Updated JavaScript smuggles malicious payload into PCs
Security30 Nov 2016 | 8
Adblock again beats publishers' Adblock-blocking attempts
Hamburg court upholds individuals' right to block ads
Legal29 Nov 2016 | 77
Microsoft update servers left all Azure RHEL instances hackable
Patch proffered, pen-tester paid
Security28 Nov 2016 | 21
Uncanny hacks-men to attend special school in grand country home
Bletchley Park to house student codebreakers after £5m refurb
Legal25 Nov 2016 | 23
Poison .JPG spreading ransomware through Facebook Messenger
Cick-to-self-p0wn attack sneaks Locky ransomware past Zuck's security model
Security25 Nov 2016 | 34
Mozilla hackers audit cURL file transfer toolkit, give it a tick for security
Four remote code execution holes patched along the way
Security25 Nov 2016 | 7
Melbourne man arrested for broadcasting fake messages to pilots
Commerical kit, not hacking, all that's needed.
Security24 Nov 2016 | 13
CERT tells Microsoft to keep EMET alive because it's better than Win 10's own security
Vuln seeker says EMET has 13 protections Win 10 doesn't
Security24 Nov 2016 | 32
Twitter to crack down on spies wielding its APIs
Using location tracking to track protestors is possible, but now verboten under policy change
On-Prem24 Nov 2016 | 4
Attackers use ancient zero-day to pop Asian banks, govts
Flawed desktop publishing tool for readers of Urdu and Arabic phlayed with phishing
Security24 Nov 2016 | 5
Telegram API ransomware wrecked three weeks after launch
Crypto so bad that getting around it is shooting fish in a barrel
Security23 Nov 2016 | 13
Credit cards ripped from Madison Square Garden venues in year-long op
No word on number of cards stolen in physical breach.
Security23 Nov 2016 | 8
WordPress auto-update server had flaw allowing anyone to add anything to websites worldwide
About 27 per cent of the entire WWW at risk, we're told
Security23 Nov 2016 | 45
Boffins bake Crysis ransomware's keys into handy decryptor
Developers may have dropped keys to drop cops
Security22 Nov 2016 | 3
Free 'cyber hugs' for all is the plan at New Zealand's first CERT
Kiwicon Kiwis plan a CERT with heart, not just a shield for business
Security22 Nov 2016 | 2
Hackers electrocute selves in quest to turn secure doors inside out
Kiwicon 'Please dont tell my wife about this' says one, as arcs thrill Kiwi crowds
Security21 Nov 2016 | 76
Hacker dishes advanced phishing kit to hook clever staff in 10 mins
Kiwicon Everything you need to land a bigwig, with surprisingly little effort
Security21 Nov 2016 | 46
Hackers' modular worm builder hoses popular team web chat apps
KIWICON Open sourced 'Little Doctor' vaporises chat apps, but Rocket Chat, Ryver patched.
Security18 Nov 2016 | 2
Hacker's Mac pwning expedition: 'Help, I've got too many shells!'
Kiwicon Hacked hack's Mac yaps, Nest cam slapped
Security17 Nov 2016 | 16
Antivirus tools are a useless box-ticking exercise says Google security chap
Kiwicon Advocates whitelists and other tools that 'genuinely help' security
Security17 Nov 2016 | 122
Google Pixel pwned in 60 seconds
Power of Community Chinese teams kill Safari, laugh at four-second Flash hack
Security11 Nov 2016 | 72
Reg meets 'Lokihardt', quite possibly the world's best hacker
Power of Community Korean chap finds flaws in moments, scores $100k apiece for fun
Security11 Nov 2016 | 19
Hackers cook god-mode remote exploits against Edge, VMware in world-first
Power of Community PwnFest fells first tech giants – Google Pixel, Adobe next in line
Security10 Nov 2016 | 5
IoT worm can hack Philips Hue lightbulbs, spread across cities
Easy chain reaction hack would spread across Paris, boffins say
Security10 Nov 2016 | 81
'Trust it': Results of Signal's first formal crypto analysis are in
Crypto connoisseurs finds favourite chat app protocol up to scratch
Security08 Nov 2016 | 19
Add it to the tab: ICO fines another spammer as unpaid bills mount
Churn and burn marketing firms leave ICO fine factory £2.26 million in the red.
Legal08 Nov 2016 | 63
Google to patch Chrome mobile hole after bank trojan hits 318k users
Flaw allowing ads to offer dodgy apps won't be fixed for about three weeks
Security08 Nov 2016 | 16
Tech support scammers use denial of service bug to hang victims
Process pig keeps eyes glued on fraudsters' phone number.
Security07 Nov 2016 | 9
Cerber ransomware menace now targeting databases
Why try to extract pennies from kiddies when there's businesses to be bilked?
Security07 Nov 2016 | 9
Password reset warrior arrested for popping 1050 student accounts
And once he was in, this creep searched for sexy emails
Security07 Nov 2016 | 8
Biting the hand that feeds IT
