We regret to inform you there's an RCE vuln in old version of WinRAR. Yes, the file decompression utility
Update to v6.02 – or don't, but on your head be it
21 Oct 2021 | 8
Gareth Corfield
Contact
Follow
Get alerts
Gareth is based in the UK, and covers information security, court cases, and more for The Register.
Informatica UKI veep was rightfully sacked over Highways England $5k golf jolly, says tribunal
Underling took customer on bucket list trip - and VP signed it off without checking
21 Oct 2021 | 18
Research finds consumer-grade IoT devices showing up... on corporate networks
Considering the slack security of such kit, it's a perfect storm
21 Oct 2021 | 23
Ancient with a dash of modern: We joined the Royal Navy to find there's little new in naval navigation
Boatnotes II Following the Fleet Navigating Officers' course
20 Oct 2021 | 44
BlackMatter ransomware gang will target agriculture for its next harvest – Uncle Sam
What was that about hackable tractors?
19 Oct 2021 | 3
Email phishing crapcannon operators TA505 are back from the dead, researchers warn
And they're packing a new dirty RAT as well
19 Oct 2021 | 8
EasyJet flight loadsheet snafu caused by software 'code errors' says UK safety agency
System 'operating outside of the original design specification' said AAIB
18 Oct 2021 | 84
Missouri governor demands prosecution of reporter for 'decoding HTML source code' and reporting a data breach
Salus populi suprema lex esto ... or perhaps not
15 Oct 2021 | 103
Boeing 737 Max chief technical pilot charged with deceiving US aviation regulators over MCAS
He hasn't got $2.5bn to hand to the DoJ, unlike his bosses
15 Oct 2021 | 147
German Pirate Party member claims EU plans for a GDPR-compliant Whois v2 will lead to 'doxxing and death lists'
ICANN also dislikes it but web infrastructure firms don't really mind
15 Oct 2021 | 47
3D printing site Thingiverse suffers breach of 228,000 email addresses amid sluggish disclosure
Updated So says Have I Been Pwned's maintainer - but site claims breach only impacted 'handful of users'
14 Oct 2021 | 7
LAN traffic can be wirelessly sniffed from cables with $30 setup, says researcher
What's a long length of electrical wire? A transmitter, of course
14 Oct 2021 | 126
Judge in UK rules Amazon Ring doorbell audio recordings breach data protection laws
Relax, this isn't a binding precedent - but it puts down a marker
13 Oct 2021 | 36
Ex-camera biz Olympus investigating 'suspicious' network activity again a month after ransomware hit
Plus: Extortionist gang threatens victims who talk to the press
13 Oct 2021 | 1
Twitch increases bug bounty payouts after source code leak by... wait, is that it?
Reg reader sighs at 'Orwellian gig economy' sums
12 Oct 2021 | 33
Apple patches 'actively exploited' iPhone zero-day with iOS 15.0.2 update
Tech breakdown and proof-of-concept code is already out there
12 Oct 2021 | 16
Schools email marketing company told us to go away when we told them of exposed database creds, say infoseccers
Usernames and passwords could be read (and abused) by anyone in since fixed flaw
12 Oct 2021 | 64
Russia-based criminals are still the UK's number 1 cyber-foe, NSO Group's wares a 'red flag' says NCSC chief
Chatham House speech targets non-state baddies as well as grey zone and nation states
11 Oct 2021 | 19
US nuclear submarine bumps into unidentified underwater object in South China Sea
Definitely not another sub, oh no sir
08 Oct 2021 | 101
Never mind Russia: Turkey and Vietnam are Microsoft's new state-backed hacker threats du jour
It isn't just the big dogs preparing to bite, warns Redmond
08 Oct 2021 | 10
UK's VoIP Unlimited hit by DDoSes again, weeks after ransom-linked attacks KO'd it
Outage prompts customer ire, again
08 Oct 2021 | 4
Russian spies reportedly used SolarWinds hack to steal US counterintelligence details
Jackpot moment for SVR operatives
07 Oct 2021 | 16
NSO Group's Pegasus malware was used to spy on Dubai princess's lawyers during child custody dispute
Updated Firm apparently terminated UAE's contract when it realised
07 Oct 2021 | 32
Telegraph newspaper bares 10TB of subscriber data and server logs to world+dog
Updated Poor securing of Elasticsearch cluster strikes again
05 Oct 2021 | 51
