Major energy contractor reports 'limited' access to IT after ransomware locks files
ENGlobal customers include the Pentagon as well as major oil and gas producers
Security03 Dec 2024 | 8
Jessica is The Register's cybersecurity editor, leading our coverage of topics ranging from government IT to best practices for defenders. She also hosts video interviews with CxO-level veterans and other subject-matter experts on the challenges facing the IT industry. Jessica has more than 20 years of experience in publishing, with roles ranging from news editor to managing editor.
Data on 760K workers from Xerox, Nokia, BofA, Morgan Stanley and more dumped online
Yet another result of the MOVEit mess
Cyber-crime03 Dec 2024 | 3
AWS unveils cloud security IR service for a mere $7K a month
Re:Invent Tap into the infinite scalability... of pricing
Security03 Dec 2024 | 5
The only thing worse than being fired is scammers fooling you into thinking you're fired
Scumbags play on victims' worst fears in phishing campaign referencing UK Employment Tribunal
Cyber-crime28 Nov 2024 | 48
Salt Typhoon's surge extends far beyond US telcos
Plus, a brand-new backdoor, GhostSpider, is linked to the cyber spy crew's operations
Security27 Nov 2024 | 7
T-Mobile US takes a victory lap after stopping cyberattacks: 'Other providers may be seeing different outcomes'
Funny what putting more effort and resources into IT security can do
CSO27 Nov 2024 | 9
Data broker leaves 600K+ sensitive files exposed online
Exclusive Researcher spotted open database before criminals … we hope
Research27 Nov 2024 | 22
US senators propose law to require bare minimum security standards
In case anyone forgot about Change Healthcare
Security26 Nov 2024 | 15
Trump taps border hawk to head DHS. Will Noem's 'enthusiasm' extend to digital domain?
Analysis Meanwhile, CISA chief Jen Easterly will step down prior to inauguration
Public Sector23 Nov 2024 | 51
1,000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole
Updated PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more
CSO22 Nov 2024 | 22
Here's what happens if you don't layer network security – or remove unused web shells
TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated
Security22 Nov 2024 | 4
Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator
Meet Liminal Panda, which prowls telecom networks in South Asia and Africa
CSO20 Nov 2024 | 32
Healthcare org Equinox notifies 21K patients and staff of data theft
Ransomware scum LockBit claims it did the dirty deed
Cyber-crime20 Nov 2024 | 1
China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer
No word on when or if the issue will be fixed
Security19 Nov 2024 | 2
Ford 'actively investigating' after employee data allegedly parked on leak site
Updated Plus: Maxar Space Systems confirms employee info stolen in digital intrusion
Security18 Nov 2024 | 3
Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble
If you didn't fix this a month ago, your to-do list probably needs a reshuffle
Virtualization18 Nov 2024 | 4
T-Mobile US 'monitoring' China's 'industry-wide attack' amid fresh security breach fears
updated Un-carrier said to be among those hit by Salt Typhoon, including AT&T, Verizon
Networks18 Nov 2024 | 2
Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit
Yank access to management interface, stat
CSO15 Nov 2024 | 28
Microsoft Power Pages misconfigurations exposing sensitive data
NHS supplier that leaked employee info fell victim to fiddly access controls that can leave databases dangling online
Security15 Nov 2024 | 6
Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost
Plus a bonus hard-coded local API key
Patches14 Nov 2024 |
Reminder: China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign'
Updated Feds don't name Salt Typhoon, but describe Beijing band's alleged deeds
Research14 Nov 2024 | 5
ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue
Plus: CISA's ScubaGear dives deep to fix M365 misconfigs
CSO14 Nov 2024 | 3
Data broker amasses 100M+ records on people – then someone snatches, sells it
We call this lead degeneration
Cyber-crime13 Nov 2024 | 18
China's Volt Typhoon crew and its botnet surge back with a vengeance
Ohm, for flux sake
Public Sector13 Nov 2024 | 4
Here's what we know about the suspected Snowflake data extortionists
A Canadian and an American living in Turkey 'walk into' cloud storage environments…
Cyber-crime12 Nov 2024 | 5
Scattered Spider, BlackCat claw their way back from criminal underground
We all know by now that monsters never die, right?
Cyber-crime08 Nov 2024 | 1
Canada closes TikTok's offices but leaves using the app a matter of 'personal choice'
Govt order destroys 'hundreds of well-paying local jobs', eh
Personal Tech08 Nov 2024 | 29
Winos4.0 abuses gaming apps to infect, control Windows machines
'Multiple' malware samples likely targeting education orgs
Security08 Nov 2024 | 6
China's Volt Typhoon reportedly breached Singtel in 'test-run' for US telecom attacks
updated Alleged intrusion spotted in June
Security06 Nov 2024 | 5
Schneider Electric ransomware crew demands $125k paid in baguettes
Hellcat crew claimed to have gained access via the company's Atlassian Jira system
Cyber-crime05 Nov 2024 | 46
Ongoing typosquatting campaign impersonates hundreds of popular npm packages
Puppeteer or Pupeter? One of them will snoop around on your machine and steal your credentials
Research05 Nov 2024 | 11
Google claims Big Sleep 'first' AI to spot freshly committed security bug that fuzzing missed
You snooze, you lose, er, win
AI + ML05 Nov 2024 | 19
Hack Nintendo's alarm clock to show cat pics? Let's-a-go!
How 'Gary' defeated Bowser broke into the interactive alarm clock
Security01 Nov 2024 | 34
Gang gobbles 15K credentials from cloud and email providers' garbage Git configs
Emeraldwhale looked sharp – until it made a common S3 bucket mistake
Research31 Oct 2024 | 2
Windows Themes zero-day bug exposes users to NTLM credential theft
Plus a free micropatch until Redmond fixes the flaw
Security30 Oct 2024 | 6
Uncle Sam outs a Russian accused of developing Redline infostealing malware
Or: why using the same iCloud account for malware development and gaming is a bad idea
Cyber-crime29 Oct 2024 | 4
Cast a hex on ChatGPT to trick the AI into writing exploit code
'It was like watching a robot going rogue' says researcher
Cybersecurity Month29 Oct 2024 | 28
JPMorgan Chase sues scammers following viral 'infinite money glitch'
ATMs paid customers thousands ... and now the bank wants its money back
Security28 Oct 2024 | 47
Feds investigate China's Salt Typhoon amid campaign phone hacks
'They're taunting us,' investigator says and it looks like it's working
Security28 Oct 2024 | 7
Brazen crims selling stolen credit cards on Meta's Threads
Exclusive The platform 'continues to take action' against illegal posts, we're told
Cyber-crime28 Oct 2024 | 20
Putin's pro-Trump trolls accuse Harris of poaching rhinos
Plus: Iran's IRGC probes election-related websites in swing states
Security25 Oct 2024 | 85
AWS Cloud Development Kit flaw exposed accounts to full takeover
Remember Bucket Monopoly? Yeah, it gets worse
Cybersecurity Month24 Oct 2024 | 13
Emergency patch: Cisco fixes bug under exploit in brute-force attacks
Who doesn't love abusing buggy appliances, really?
Software24 Oct 2024 | 3
Ransomware's ripple effect felt across ERs as patient care suffers
389 US healthcare orgs infected this year alone
Cybersecurity Month24 Oct 2024 | 1
Perfctl malware strikes again as crypto-crooks target Docker Remote API servers
Attacks on unprotected servers reach 'critical level'
Cybersecurity Month24 Oct 2024 | 1
Samsung phone users under attack, Google warns
Don't ignore this nasty zero day exploit says TAG
Cyber-crime24 Oct 2024 | 10
Microsoft SharePoint RCE flaw exploits in the wild – you've had 3 months to patch
Plus, a POC to make it extra easy for attackers
Security23 Oct 2024 |
VMware fixes critical RCE, make-me-root bugs in vCenter - for the second time
If the first patches don't work, try, try again
Patches22 Oct 2024 | 2
China’s Spamouflage cranks up trolling of US Senator Rubio as election day looms
Note to Xi: Marco and Ted Cruz aren't the same person
Security21 Oct 2024 | 8
Biz hired, and fired, a fake North Korean IT worker – then the ransom demands began
'My webcam isn't working today' is the new 'The dog ate my network'
Cybersecurity Month18 Oct 2024 | 41
Critical default credential in Kubernetes Image Builder allows SSH root access
It's called leaving the door wide open – especially in Proxmox
Security16 Oct 2024 | 12
Critical hardcoded SolarWinds credential now exploited in the wild
Another blow for IT software house and its customers
Security16 Oct 2024 | 23
China’s infosec leads accuse Intel of NSA backdoor, cite chip security flaws
Uncle Sam having a secret way into US tech? Say it ain't so
Systems16 Oct 2024 | 30
Cisco confirms 'ongoing investigation' after crims brag about selling tons of data
UPDATED Networking giant says 'no evidence' of impact on its systems but will tell customers if their info has been stolen
Cyber-crime15 Oct 2024 | 7
Sysadmins rage over Apple’s ‘nightmarish’ SSL/TLS cert lifespan cuts plot
Max validity down from 398 days to proposed 45 by 2027
Software15 Oct 2024 | 128
Would banning ransomware insurance stop the scourge?
White House official makes case for ending extortion reimbursements
Cybersecurity Month14 Oct 2024 | 87
Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between
Reading, writing, and cyber mayhem, amirite?
Cybersecurity Month13 Oct 2024 | 32
US lawmakers seek answers on alleged Salt Typhoon breach of telecom giants
Cyberspies abusing a backdoor? Groundbreaking
Cyber-crime11 Oct 2024 | 10
Crooks stole personal info of 77k Fidelity Investments customers
But hey, no worries, the firm claims no evidence of data misuse
Cyber-crime10 Oct 2024 | 3
Fore-get about privacy, golf tech biz leaves 32M data records on the fairway
Researcher spots 110 TB of sensitive info sitting in unprotected database
Cybersecurity Month10 Oct 2024 | 36
Biting the hand that feeds IT
