Security
Barclays Bank appeared to be using the Wayback Machine as a 'CDN' for some Javascript
Tight-lipped bank has fixed the weirdness - but not said why it happened
03 Jul 17:30 | 59
Security
Sponsored
Fighting BEC and EAC: Why whack-a-mole won’t work
No organisation is immune: Nearly nine in ten experienced these attacks last year
03 Jul 06:00 |
Security
F5 emits fixes for critical flaws in BIG-IP gear: Hopefully yours aren't internet-facing while you ready a patch
Not to worry, there are only *searches* several thousand devices apparently exposed online
03 Jul 00:36 | 9
Security
Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions
Best get updating pronto, folks
02 Jul 22:05 | 5
Security
Euro police forces infiltrated encrypted phone biz – and now 'criminal' EncroChat users are being rounded up
Continental capers lead to 750 UK arrests
02 Jul 20:56 | 112
Security
Hold off that rush into the July 4 weekend – you may need this: Microsoft patches pwn-by-picture pitfalls in Win 10
Redmond also praised for blocking malware control systems on its clouds
02 Jul 19:59 | 4
Sponsored
Users who don't understand how to encrypt their emails won't do it
Focus on usability to avoid buyer’s remorse, Echoworx advises
02 Jul 18:00 |
Security
Cisco SMB kit harbors cross-site scripting bug: One wrong link click... and that's your router pwned remotely
VPN gear vulnerable to remote hijackings
02 Jul 13:00 | 4
Security
Details of Beijing's new Hong Kong security law signal end to more than two decades of autonomy
Legislation to root out subversion, terrorism and collusion with foreign forces following year of civil unrest
01 Jul 12:00 | 80
Webcast
Tune in and watch live right here this week – it's your email encryption wake-up call
Make a secure digital transformation possible
01 Jul 06:00 |
Security
Things that happen every four years: Olympic Games, Presidential elections, and now new Mac ransomware
EvilQuest targets Mac pirates, poses as legit network security and music tools
01 Jul 04:28 | 16
Security
After six months of stonewalling by Apple, app dev goes public with macOS privacy protection bypass
So much for preventing malicious software from peeking at sensitive files
01 Jul 02:32 | 20
Security
It’s happened again: AT&T sued for allegedly transferring victim's number to thieves in $1.9m cryptocoin heist
Man claims life savings lost in theft aided by telco staff
01 Jul 01:26 | 22
Security
Living on a prayer? Netgear not quite halfway there with patches for 28 out of 79 vulnerable router models
It's been 6 months since researchers spotted RCE flaws
30 Jun 18:28 | 7
Security
NEC insists its face-recog training dataset isn't biased, but refuses to share details of Neoface system with UK court
Magical Black Box of Suspects to Arrest is updated annually, says firm
30 Jun 15:51 | 12
Security
DDoS and dingoes: Australia to bolster cyber-defences with 500 hackers amid China spat
AU$1.35bn fund follows revelations that country was hit by state-run attack
30 Jun 13:49 | 8
Security
Remember when we warned in February Apple will crack down on long-life HTTPS certs? It's happening: Chrome, Firefox ready to join in, too
From Sept 1, new TLS certificates valid for more than 398 days will be snubbed
30 Jun 03:57 | 61
Security
University of California San Francisco pays ransomware gang $1.14m as BBC publishes 'dark web negotiations'
Publicity-hungry crims find new way of pressuring victims
29 Jun 16:29 | 28
Security
Yes, Prime Minister, rewrite the Computer Misuse Act: Brit infosec outfits urge reform
Out-of-date law prevents Britain from fully developing its cybersecurity industry, say campaigners
29 Jun 11:30 | 27
In Brief
CyberX, CyberX, does whatever a CyberX does. Locks IoT, machines too, Microsoft got it, so will you
Plus: DDoS'er jailed, and more
29 Jun 05:04 | 3
Popular
Security
Barclays Bank appeared to be using the Wayback Machine as a 'CDN' for some Javascript
Tight-lipped bank has fixed the weirdness - but not said why it happened
Special report
'Google cannot stop it, control it or curtail it...' Inside the murky world of fake addiction treatment center search spam
Is that listed phone number going direct to a professional or a call center?
Emergent Tech
If you wanna make your own open-source chip, just Google it. Literally. Web giant says it'll fab them for free
Plus: IBM emits BlueGene/Q CPU blueprints – and 'fastest' open-source RISC-V core emerges
Security
F5 emits fixes for critical flaws in BIG-IP gear: Hopefully yours aren't internet-facing while you ready a patch
Not to worry, there are only *searches* several thousand devices apparently exposed online
Security
Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions
Best get updating pronto, folks
On Call
Cool IT support drones never look at explosions: Time to resolution for misbehaving mouse? Three seconds
Thinking in binary, dreaming in hexadecimal, and this is what they'll remember you for
Exclusive
Capita Consulting ditching more than a quarter of its workforce 45 days after consultations with consultants
100 people have lost their jobs, COVID-19 blamed
Networks
Analogue radio given 10-year stay of execution as the UK U-turns on DAB digital future
Great problem of our time solved: Classic FM won't have to rebrand as Classic DAB
Cloud
AWS attempts to woo devs with new tool aimed at porting .NET applications to Linux
Bezos' bunch beats Microsoft to the punch, though it has limited use for now
DevOps
Languishing lodash library loophole finally fitted for a fix: It's only taken since October to address security bug
It's only downloaded 26.5m times a week, NBD
STORIES
WWDC
Macs, iPhones, iPads to get encrypted DNS – how'd you like them Apples?
Cupertino idiot-tax corp is fashionably late to the party
27 Jun 00:55 | 45
Security
Let's roll the 3d6 dice on today's security drama: Ah, 15, that's LG allegedly hacked, source code stolen by Maze ransomware gang
Crooks threaten to leak swiped software blueprints
26 Jun 21:00 | 22
Security
Brit police's use of facial-recognition tech is lawful, no need to question us, cops' lawyer tells Court of Appeal
Plus: Home Office urges judges to leave lax legal framework as is
26 Jun 15:00 | 55
Security
When one open-source package riddled with vulns pulls in dozens of others, what's a dev to do?
Snyk survey puts cross-site scripting top of the list for security holes – but watch out for prototype pollution too
26 Jun 09:25 | 48
Security
Talk about the fox guarding the hen house. Comcast to handle DNS-over-HTTPS for Firefox-using subscribers
Last November: These ISPs know too much! June: God bless the ISPs
26 Jun 01:07 | 28
Security
US govt: Julian Assange tried to recruit hacker to steal hush-hush dirt and we should know – the hacker was an informant
WikiLeaker accused of tapping up LulzSec's Sabu as a source
25 Jun 22:59 | 47
Security
Honeypot behind sold-off IP subnet shows Cyberbunker biz hosted all kinds of filth, says SANS Institute
Botnet C2, denial-of-service, phishing – and that's after filtering
25 Jun 15:52 | 8
Security
There are DDoS attacks, then there's this 809 million packet-per-second tsunami Akamai says it just caught
Bank on the receiving end of massive 418Gbps traffic barrage
25 Jun 10:03 | 50
Security
After huffing and puffing for years, US senators unveil law to blow the encryption house down with police backdoors
Lawmakers will attempt to bend the laws of mathematics to their will
24 Jun 22:48 | 159
Security
Ransomware crims to sell off 'scandalous' files swiped from Mariah Carey, Nicki Minaj, Puff Daddy's legal eagles
$600k starting bid, say public extortionists, or $42m to keep schtum
24 Jun 21:18 | 9
Security
Laws on police facial recognition aren't tough enough, UK data watchdog barrister tells Court of Appeal
Top judge replies: Don't understand what you're on about
24 Jun 17:47 | 45
Security
Former UK Labour deputy leader wants to know how the NHS's contact-tracing app will ensure user privacy
This is the Apple-Google API one, not the 'world-beating' one
24 Jun 16:15 | 52
Security
Maze ransomware gang threatens to publish sensitive stolen data after US aerospace biz sensibly refuses to pay
Bungling cybercrooks throw toys out of the pram as negotiations shut down
24 Jun 12:30 | 43
Security
Carbon-based vuln hunters will always be better at infosec than AI, insist puny humans
No intelligent pentesting systems were available to comment on this assertion
24 Jun 10:00 | 2
Security
Three words you do not want to hear regarding a 'secure browser' called SafePay... Remote. Code. Execution
How Bitdefender's security software was caught napping by ad-block bod
24 Jun 07:51 | 7
Security
The state of OpenPGP key servers: Kristian, can you renew my certificate? A month later: Kristian? Ten days later: Too late, it’s expired
Sorry, I was busy, came the reply
24 Jun 00:05 | 24
Security
Here's a headline we never thought we'd write 20 years ago: Microsoft readies antivirus for Linux, Android
Redmond knows a thing or two about tackling malware – amirite, Windows fans?!
23 Jun 22:55 | 38
Security
None shall pass: Yet another layer to protect hapless users, employers from dodgy docs added to Microsoft 365
Clicking through Protected View is why we can't have nice things, so here's 'Safe Documents'
23 Jun 18:32 | 6
Security
UK police's face recognition tech breaks human rights laws. Outlaw it, civil rights group urges Court of Appeal
Appeal starts over Cardiff creepycam deployment
23 Jun 16:30 | 38
