Android VPNs to get audit badges in Google Play Store if they aren't comically crap No promises it's actually secure, just that it doesn't do anything obviously dumb Applications04 Nov 2023 | 26
81K people's sensitive info feared stolen from Hilb after email inboxes ransacked Credit card numbers, security codes, SSNs, passwords, PINs? Yikes! Cyber-crime03 Nov 2023 | 3
Google bins integrity API that looked more than a bit like horrible DRM for websites Chocolate Factory to focus on more limited attestation for Android WebViews Applications02 Nov 2023 | 29
Theora video codec to be coded out from Chrome and Firefox Usage barely measurable so ax will swing on compression dinosaur Software02 Nov 2023 | 25
Okta tells 5,000 of its own staff that their data was accessed in third-party breach Updated The hits keep on coming for troubled ID management biz Cyber-crime02 Nov 2023 | 28
FBI boss: Taking away our Section 702 spying powers could be 'devastating' Of course, he would say that, wouldn't he? Security02 Nov 2023 | 48
Mozi botnet murder mystery: China or criminal operators behind the kill switch? Middle Kingdom or self-immolation - there are a couple of theories Security01 Nov 2023 | 3
US officials close to persuading allies to not pay off ransomware crooks 'We're still in the final throes of getting every last member to sign' Cyber-crime31 Oct 2023 | 21
'Mass exploitation' of Citrix Bleed underway as ransomware crews pile in At least two extortion gangs abusing CVE-2023-4966, we're told Cyber-crime31 Oct 2023 | 3
Now Russians accused of pwning JFK taxi system to sell top spots to cabbies Big Apple unlikely to get a bite out of them at this rate, though Cyber-crime31 Oct 2023 | 6
To prevent 'lost' nukes, scientists suggest storing them in a hall of mirrors Radio bouncing off multiple reflectors is a hard-to-defeat method of monitoring a weapons cache Science31 Oct 2023 | 22
SolarWinds charged after SEC says biz knew IT was leaky ahead of SUNBURST attack Developer labels action 'unfounded' after company and CISO slapped with suit for misleading investors Cybersecurity Month31 Oct 2023 | 9
Help, Android 14 ate my Pixel! Bug causes endless reboots, loss of storage access Fix on the way but for those trapped in boot loop hell, data recovery isn't certain OSes30 Oct 2023 | 11
Florida man jailed after draining $1M from victims in crypto SIM swap attacks Not old enough to legally rent a car, old enough for a 30-month term Cyber-crime30 Oct 2023 | 16
Unpatched NGINX ingress controller bugs can be abused to steal Kubernetes cluster secrets Just tricks, no treats with these 3 vulns Security30 Oct 2023 | 5
King Charles III signs off on UK Online Safety Act, with unenforceable spying clause It's now up to Ofcom to sort out this messy legislation Security27 Oct 2023 | 153
Bug bounty hunters load up to stalk AI and fancy bagging big bucks Google offers AI-specific rewards, HackerOne sees more specializations Cybersecurity Month27 Oct 2023 | 1
Apple drops urgent patch against obtuse TriangleDB iPhone malware Kaspersky first found this software nasty on its own phones Patches26 Oct 2023 | 9
Forget the outside hacker, the bigger threat is inside by the coffee machine Kettle After a week of incidents, Register vultures pick over the innards Security26 Oct 2023 | 20
Telcos should compensate phished subscribers, suggests Singapore Regulator reckons letting scam texts through is a culpable act Cybersecurity Month26 Oct 2023 | 6
Canada goosed as attackers shutter hospitals and China deepfakes its politicians Eh? Canucks cracked by cyber crims Cyber-crime25 Oct 2023 | 11
Spanish phisherfolk caught in cops' net in multi-million-euro catch Crooks swindled about €3 million from victims Cybersecurity Month25 Oct 2023 | 1
VMware reveals critical vCenter vuln that you may have patched already without knowing it Takes rare step of issuing patches for end-of-life versions, as some staff report end-of-career letters Patches25 Oct 2023 | 4
Hot fuzz: Cascade finds dozens of RISC-V chip bugs using random data storm Video ETH Zurich boffins say they've devised a better CPU fuzzer to find flaws Security24 Oct 2023 | 5
Citrix urges 'immediate' patch for critical NetScaler bug as exploit code made public At this point, just assume your kit is compromised Security24 Oct 2023 | 1
Cisco fixes critical IOS XE bug but malware crew way ahead of them Initial fall in infected devices indicates evolution, not extinction, of attack code Security23 Oct 2023 | 2
Google - yes, that Google - testing proxy scheme to hide IP addresses for privacy Plan for Chrome echoes Apple iCloud Private Relay Software23 Oct 2023 | 26
DC elections agency warns entire voting roll may have been stolen Home of the Republic seemingly hit by Sony/NTT Docomo ransomware crew Cyber-crime23 Oct 2023 | 13
International Criminal Court blames spies for 'targeted and sophisticated attack' Tell us it's Russia without telling us it's Russia Cybersecurity Month21 Oct 2023 | 13
Admin behind E-Root stolen creds souk extradited to US There was a young man from Moldova, who the Feds just want to roll over, but with 20 inside, and nowhere to hide, he just wants it all to be over Cyber-crime20 Oct 2023 | 9
US government's Login.gov turns frown upside down, now smiles on facial recognition Authentication portal to match snaps on existing IDs with user-provided snaps Personal Tech19 Oct 2023 | 23
Casio keyed up after data loss hits customers in 149 countries Crooks broke into the ClassPad server and swiped online learning database Cyber-crime19 Oct 2023 | 12
Winklevoss twins back in hot water after NY AG sues over $1B cryptocurrency fraud Updated SBF comes up like a bad penny Legal19 Oct 2023 | 21
Critical Citrix bug exploited by data thieves weeks before being patched Updated Time to close those active sessions Cybersecurity Month18 Oct 2023 |
Five Eyes intel chiefs warn China's IP theft program now at 'unprecedented' levels Spies come in from the cold for their first public chinwag Cybersecurity Month18 Oct 2023 | 31
Cisco's critical zero-day bug gets even worse – 'thousands' of IOS XE devices pwned Good news: There's a free scanner to check your kit. Bad news: Still no fix Cybersecurity Month17 Oct 2023 | 15
Cisco zero-day bug allows router hijacking and is being actively exploited We'd say 'Hurry up and patch' but it hasn't written one yet. While you wait, disable HTTP Cybersecurity Month16 Oct 2023 | 12
Signal shoots down zero-day rumors, finds 'no evidence' of device takeover Looks to be related to critical libwebp bug found — and fixed — last month Cybersecurity Month16 Oct 2023 | 5
EPA flushes water supply cybersecurity rule after losing legal fight with industry, states What could possibly go wrong? Cybersecurity Month13 Oct 2023 | 38
530K people's info feared stolen from cloud PC gaming biz Shadow Will players press start to continue with this outfit? Cyber-crime13 Oct 2023 | 10
Squid games: 35 security holes still unpatched in proxy after 2 years, now public We'd like to say don't panic … but maybe? Research13 Oct 2023 | 10
Europe mulls open sourcing TETRA emergency services' encryption algorithms Turns out secrecy doesn't breed security Cybersecurity Month12 Oct 2023 | 26
US construction giant unearths concrete evidence of cyberattack Simpson Manufacturing yanks systems offline, warns of ongoing disruption Cyber-crime12 Oct 2023 | 11
AI safety guardrails easily thwarted, security study finds OpenAI GPT-3.5 Turbo chatbot defenses dissolve with '20 cents' of API tickling AI + ML12 Oct 2023 | 28
Casino giant Caesars tells thousands: Yup, ransomware crooks stole your data House always wins, er, wait ... Cybersecurity Month12 Oct 2023 | 13
US Navy sailor admits selling secret military blueprints to China for $15K Worth it for 20 years behind bars? Cyber-crime11 Oct 2023 | 26
CISOs' salary growth slows – with pay gap widening We still doubt any infosec leaders will be going without heating this winter Cybersecurity Month11 Oct 2023 | 2
From chaos to cadence: Celebrating two decades of Microsoft's Patch Tuesday Feature IT folks look back on 20 years of what is now infosec tradition Cybersecurity Month11 Oct 2023 | 17
Go ahead, let the unknowable security risks of Windows Copilot onto your PC fleet Column Or maybe don't let Microsoft's desire to defeat Google dictate your defensive strategy AI + ML11 Oct 2023 | 71
It's 2023 and Microsoft WordPad can be exploited to hijack vulnerable systems Patch Tuesday Happy Halloween! Security bugs under attack squashed, more flaws fixed Patches10 Oct 2023 | 18
SBF on trial: The Python code that allegedly let Alameda hedge fund spend people's FTX deposits And Caroline Ellison says she was told by Bankman-Fried to take $10B from customer accounts Cyber-crime10 Oct 2023 | 22
Fresh curl tomorrow will patch 'worst' security flaw in ages Updated It’s bad, folks. Pair of CVEs incoming on October 11 Patches10 Oct 2023 | 11
Vietnam accused of Predator spyware attack on EU and US politicians Awkward, seeing as the US and Vietnam just announced a refreshed relationship Cybersecurity Month10 Oct 2023 | 1
Forcing Apple to allow third-party app stores isn't enough Opinion You're excited about Meta offering iOS apps via Facebook ads? Really? Applications09 Oct 2023 | 75
FTC: Please stop falling for social media scams, you've given crooks at least $650M so far this year Internet considered harmful Cybersecurity Month07 Oct 2023 | 68
Online tracking is alive and well in link decoration Analysis The pending death of third-party cookies won't do much for other privacy intrusions Cybersecurity Month06 Oct 2023 | 17
China uses Alibaba's Euro logistic hub to spy on stuff, Belgian intelligence fears Cloud and e-commerce giant mussels up, says allegations are waffle Cybersecurity Month06 Oct 2023 | 12
GoldDigger Android trojan targets Vietnamese banking apps, code contains hints of wider targets More malware scum using acessibility features to steal personal info Security06 Oct 2023 |
Cisco warns of critical flaw in Emergency Responder code Hard-coded credentials strike again Security05 Oct 2023 | 11
Another security update, Apple? You're really keeping up with your tech rivals Zero day? More like every day, amirite? Patches05 Oct 2023 | 3
BlackBerry to split into two companies, foraging for tastier fare for shareholders Hopes to float IoT biz and keep infosec ops, then make a second pressing CxO05 Oct 2023 | 16
Microsoft delays debut of IoT security offer due to 'unexpected system challenges' Updated Software giant tells partners not to sell it but also happy to take your cash now Channel05 Oct 2023 | 11