Trump taps border hawk to head DHS. Will Noem's 'enthusiasm' extend to digital domain?
Analysis Meanwhile, CISA chief Jen Easterly will step down prior to inauguration
Public Sector23 Nov 2024 | 43
Jessica is The Register's cybersecurity editor, leading our coverage of topics ranging from government IT to best practices for defenders. She also hosts video interviews with CxO-level veterans and other subject-matter experts on the challenges facing the IT industry. Jessica has more than 20 years of experience in publishing, with roles ranging from news editor to managing editor.
1,000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole
Updated PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more
CSO22 Nov 2024 | 22
Here's what happens if you don't layer network security – or remove unused web shells
TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated
Security22 Nov 2024 | 4
Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator
Meet Liminal Panda, which prowls telecom networks in South Asia and Africa
CSO20 Nov 2024 | 32
Healthcare org Equinox notifies 21K patients and staff of data theft
Ransomware scum LockBit claims it did the dirty deed
Cyber-crime20 Nov 2024 | 1
China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer
No word on when or if the issue will be fixed
Security19 Nov 2024 | 2
Ford 'actively investigating' after employee data allegedly parked on leak site
Updated Plus: Maxar Space Systems confirms employee info stolen in digital intrusion
Security18 Nov 2024 | 3
Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble
If you didn't fix this a month ago, your to-do list probably needs a reshuffle
Virtualization18 Nov 2024 | 4
T-Mobile US 'monitoring' China's 'industry-wide attack' amid fresh security breach fears
updated Un-carrier said to be among those hit by Salt Typhoon, including AT&T, Verizon
Networks18 Nov 2024 | 2
Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit
Yank access to management interface, stat
CSO15 Nov 2024 | 28
Microsoft Power Pages misconfigurations exposing sensitive data
NHS supplier that leaked employee info fell victim to fiddly access controls that can leave databases dangling online
Security15 Nov 2024 | 6
Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost
Plus a bonus hard-coded local API key
Patches14 Nov 2024 |
Reminder: China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign'
Updated Feds don't name Salt Typhoon, but describe Beijing band's alleged deeds
Research14 Nov 2024 | 5
ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue
Plus: CISA's ScubaGear dives deep to fix M365 misconfigs
CSO14 Nov 2024 | 3
Data broker amasses 100M+ records on people – then someone snatches, sells it
We call this lead degeneration
Cyber-crime13 Nov 2024 | 18
China's Volt Typhoon crew and its botnet surge back with a vengeance
Ohm, for flux sake
Public Sector13 Nov 2024 | 4
Here's what we know about the suspected Snowflake data extortionists
A Canadian and an American living in Turkey 'walk into' cloud storage environments…
Cyber-crime12 Nov 2024 | 5
Scattered Spider, BlackCat claw their way back from criminal underground
We all know by now that monsters never die, right?
Cyber-crime08 Nov 2024 | 1
Canada closes TikTok's offices but leaves using the app a matter of 'personal choice'
Govt order destroys 'hundreds of well-paying local jobs', eh
Personal Tech08 Nov 2024 | 29
Winos4.0 abuses gaming apps to infect, control Windows machines
'Multiple' malware samples likely targeting education orgs
Security08 Nov 2024 | 6
China's Volt Typhoon reportedly breached Singtel in 'test-run' for US telecom attacks
updated Alleged intrusion spotted in June
Security06 Nov 2024 | 5
Schneider Electric ransomware crew demands $125k paid in baguettes
Hellcat crew claimed to have gained access via the company's Atlassian Jira system
Cyber-crime05 Nov 2024 | 46
Ongoing typosquatting campaign impersonates hundreds of popular npm packages
Puppeteer or Pupeter? One of them will snoop around on your machine and steal your credentials
Research05 Nov 2024 | 11
Google claims Big Sleep 'first' AI to spot freshly committed security bug that fuzzing missed
You snooze, you lose, er, win
AI + ML05 Nov 2024 | 19
Hack Nintendo's alarm clock to show cat pics? Let's-a-go!
How 'Gary' defeated Bowser broke into the interactive alarm clock
Security01 Nov 2024 | 34
Gang gobbles 15K credentials from cloud and email providers' garbage Git configs
Emeraldwhale looked sharp – until it made a common S3 bucket mistake
Research31 Oct 2024 | 2
Windows Themes zero-day bug exposes users to NTLM credential theft
Plus a free micropatch until Redmond fixes the flaw
Security30 Oct 2024 | 7
Uncle Sam outs a Russian accused of developing Redline infostealing malware
Or: why using the same iCloud account for malware development and gaming is a bad idea
Cyber-crime29 Oct 2024 | 4
Cast a hex on ChatGPT to trick the AI into writing exploit code
'It was like watching a robot going rogue' says researcher
Cybersecurity Month29 Oct 2024 | 29
JPMorgan Chase sues scammers following viral 'infinite money glitch'
ATMs paid customers thousands ... and now the bank wants its money back
Security28 Oct 2024 | 47
Feds investigate China's Salt Typhoon amid campaign phone hacks
'They're taunting us,' investigator says and it looks like it's working
Security28 Oct 2024 | 7
Brazen crims selling stolen credit cards on Meta's Threads
Exclusive The platform 'continues to take action' against illegal posts, we're told
Cyber-crime28 Oct 2024 | 20
Putin's pro-Trump trolls accuse Harris of poaching rhinos
Plus: Iran's IRGC probes election-related websites in swing states
Security25 Oct 2024 | 85
AWS Cloud Development Kit flaw exposed accounts to full takeover
Remember Bucket Monopoly? Yeah, it gets worse
Cybersecurity Month24 Oct 2024 | 13
Emergency patch: Cisco fixes bug under exploit in brute-force attacks
Who doesn't love abusing buggy appliances, really?
Software24 Oct 2024 | 3
Ransomware's ripple effect felt across ERs as patient care suffers
389 US healthcare orgs infected this year alone
Cybersecurity Month24 Oct 2024 | 1
Perfctl malware strikes again as crypto-crooks target Docker Remote API servers
Attacks on unprotected servers reach 'critical level'
Cybersecurity Month24 Oct 2024 | 1
Samsung phone users under attack, Google warns
Don't ignore this nasty zero day exploit says TAG
Cyber-crime24 Oct 2024 | 10
Microsoft SharePoint RCE flaw exploits in the wild – you've had 3 months to patch
Plus, a POC to make it extra easy for attackers
Security23 Oct 2024 |
VMware fixes critical RCE, make-me-root bugs in vCenter - for the second time
If the first patches don't work, try, try again
Patches22 Oct 2024 | 2
China’s Spamouflage cranks up trolling of US Senator Rubio as election day looms
Note to Xi: Marco and Ted Cruz aren't the same person
Security21 Oct 2024 | 8
Biz hired, and fired, a fake North Korean IT worker – then the ransom demands began
'My webcam isn't working today' is the new 'The dog ate my network'
Cybersecurity Month18 Oct 2024 | 41
Critical default credential in Kubernetes Image Builder allows SSH root access
It's called leaving the door wide open – especially in Proxmox
Security16 Oct 2024 | 12
Critical hardcoded SolarWinds credential now exploited in the wild
Another blow for IT software house and its customers
Security16 Oct 2024 | 23
China’s infosec leads accuse Intel of NSA backdoor, cite chip security flaws
Uncle Sam having a secret way into US tech? Say it ain't so
Systems16 Oct 2024 | 30
Cisco confirms 'ongoing investigation' after crims brag about selling tons of data
UPDATED Networking giant says 'no evidence' of impact on its systems but will tell customers if their info has been stolen
Cyber-crime15 Oct 2024 | 7
Sysadmins rage over Apple’s ‘nightmarish’ SSL/TLS cert lifespan cuts plot
Max validity down from 398 days to proposed 45 by 2027
Software15 Oct 2024 | 128
Would banning ransomware insurance stop the scourge?
White House official makes case for ending extortion reimbursements
Cybersecurity Month14 Oct 2024 | 87
Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between
Reading, writing, and cyber mayhem, amirite?
Cybersecurity Month13 Oct 2024 | 32
US lawmakers seek answers on alleged Salt Typhoon breach of telecom giants
Cyberspies abusing a backdoor? Groundbreaking
Cyber-crime11 Oct 2024 | 10
Crooks stole personal info of 77k Fidelity Investments customers
But hey, no worries, the firm claims no evidence of data misuse
Cyber-crime10 Oct 2024 | 3
Fore-get about privacy, golf tech biz leaves 32M data records on the fairway
Researcher spots 110 TB of sensitive info sitting in unprotected database
Cybersecurity Month10 Oct 2024 | 36
Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware
USB sticks help, but it's unclear how tools that suck malware from them are delivered
Cybersecurity Month09 Oct 2024 | 24
Marriott settles for a piddly $52M after series of breaches affecting millions
Intruders stayed for free on the network between 2014 and 2020
Cyber-crime09 Oct 2024 | 9
Ransomware gang Trinity joins pile of scumbags targeting healthcare
As if hospitals and clinics didn't have enough to worry about
Cybersecurity Month09 Oct 2024 | 6
Using iPhone Mirroring at work? You might have just overshared to your boss
What does IT glimpse but a dating app on your wee little screen
Software08 Oct 2024 | 27
Happy birthday, Putin – you've been pwned
Pro-Ukraine hackers claim credit for Russian state broadcasting shutdown
Security08 Oct 2024 | 82
Feds reach for sliver of crypto-cash nicked by North Korea's notorious Lazarus Group
A couple million will do for a start … but Kim's crews are suspected of stealing much more
Cybersecurity Month08 Oct 2024 | 2
Chinese cyberspies reportedly breached Verizon, AT&T, Lumen
Salt Typhoon may have accessed court-ordered wiretaps and US internet traffic
Security07 Oct 2024 | 6
UK's Sellafield nuke waste processing plant fined £333K for infosec blunders
Radioactive hazards and cyber failings ... what could possibly go wrong?
Cybersecurity Month05 Oct 2024 | 21
Biting the hand that feeds IT
