Security
REvil ransomware gang publishes 'Elexon staff's passports' after UK electrical middleman shrugs off attack
Cybercrooks take revenge after planned heist failed
01 Jun 15:59 | 2
Security
Security
UK.gov dangles £400k over makers of IoT Things: Go on, let's see how you'd make a security cert scheme
And if you win, we'll make it into a kitemark
01 Jun 09:16 | 9
Webcast
The inevitable coronavirus-inspired cyber-attacks are stepping up. Are you ready?
They’re not very sophisticated, but they’re working: Watch and learn how to fight back
01 Jun 06:00 |
Roundup
Cisco hacked: Six backend servers used by customer VIRL-PE deployments compromised via SaltStack
Plus other news from infosec land this week
31 May 09:32 | 6
Security
Remember when Republicans said Dems hacked voting systems to rig Georgia's election? There were no hacks
'No evidence of damage to network or computers, no evidence of theft, damage, or loss of data'
29 May 23:32 | 87
Security
Great news. Patch load drops 20% for the first time in 10 years. Bad news: Well, you've heard about coronavirus?
Fix the crits, sort out the rest later
29 May 10:45 | 10
Security
It's not every day the NSA publicly warns of attacks by Kremlin hackers – so take this critical Exim flaw seriously
GRU crew actively exploit hole – but you patched it months ago, right?
29 May 06:08 | 10
Security
NTT warns its Singapore cloud was hacked, Japanese customer data compromised
Early May attack hit 600-plus hosting and cloud customers
29 May 01:36 |
Security
Got $50k spare? Then you can crack SHA-1 – so OpenSSH is deprecating flawed hashing algo in a 'near-future release'
UpdatedThe price will only go down
28 May 21:03 | 26
Security
Cybercrooks tend to prefer Google-branded phishing to Microsoft-flavoured lures
So says Barracuda Networks, anyway
28 May 18:59 | 2
Security
You, Apple Mac fan. Put down the homemade oat-milk latte, you need to patch a load of security bugs, too
Patch Thursday is for you, Patch Tuesday is for everyone else
28 May 15:45 | 6
Sponsored
Why zero trust security needs strong hardware foundations
Intel vPro platform provides hardware level of trust
28 May 06:00 |
Security
26 million logins believed to be stolen from LiveJournal in 2017 pop up on hacker forum
Best change any recycled credentials from your blogging days
27 May 18:30 | 3
Security
Oh cool, tech service prices are plummeting. And by tech services, we mean botnet rentals and stolen credit cards
Supply and demand in action
27 May 11:02 | 2
Security
Microsoft blocks Trend Micro code at center of driver 'cheatware' storm from Windows 10, rootkit detector product pulled from site
UpdatedTwist in drivergate scandal
27 May 07:14 | 44
Security
Mulled Chrome API shines light on long-neglected privacy gap: Sites can snoop on your find-in-page searches
UpdatedNaughty JS can watch you hit control+F, start typing, see what's on your mind
27 May 05:04 | 17
Security
India said its coronavirus contact-tracing app is perfect... adds bug bounty and open-sources it anyway
As the legalese changes to extend data retention period
27 May 02:59 | 1
Security
US lawmakers get a second shot at forcing FBI agents to obtain a warrant before they leaf through web histories
Bi-partisan amendment aims to take away easy access to your online life
26 May 23:25 | 15
Security
If someone could stop hackers pwning medical systems right now, that would be cool, say Red Cross and friends
The rules of war that protect hospitals should extend into cyberspace
26 May 19:51 | 29
Security
Airline-chasing lawyers leap on Easyjet for £18bn after 9m folks' data, itineraries nicked
No win, no fee. But if they win it's an up to £5.4bn fee
26 May 16:22 | 17
Popular
Software
80-characters-per-line limits should be terminal, says Linux kernel chief Linus Torvalds
As he gives us version 5.7 with support for Apple power tech and better exFAT
Science
They've only gone and bloody done it! NASA, SpaceX send two fellas off to the International Space Station
VideoBob and Doug are first humans launched into orbit by Elon's Muskteers
Security
Cisco hacked: Six backend servers used by customer VIRL-PE deployments compromised via SaltStack
RoundupPlus other news from infosec land this week
Software
Bite me? It's 'byte', and that acronym is Binary Interface Transfer Code Handler
Who, Me?Beware the forgotten bit of test text lurking in the application
Bootnotes
Building society caught in middle of high street sharing a little too much on TeamViewer
Bork!Bork!Bork!You say fintech, they say findom, let's call the whole thing BOFH
Policy
Australia to refund $720m in 'debts' determined by dodgy algorithm
May well have been killer algorithm, too
Virtualization
Microsoft and VMware end ancient grudge with new VM privilege workaround
Workstation has one job: running VMs. And now it can do it on Windows with Hyper-V enabled
Science
SpaceX Crew Dragon docks at International Space Station
Even the aircon worked in the Muskmobile
Software
After all the excitement of Windows 10 2004, Insider builds go back to square one
RoundupAlso: Multi-window Teams, Skype does the Blankety Blank dance, and more
Personal Tech
75 million smartphone sales up in smoke in Q1: Let's drill down into which brands took the most pain
There are perks to starting out as online-only, says Gartner
STORIES
Security
Unmanned drones to slash NHS delivery times to one-fifth of road 'n' rail transport
Scottish trial will courier PPE and COVID-19 tests to remote hospital
26 May 14:41 | 31
Security
eBay users spot the online auction house port-scanning their PCs. Um... is that OK?
UpdatedFraud is a big issue for etailer, but there are privacy and consent concerns too
26 May 12:39 | 99
Security
Galaxy S20 security is already old hat as Samsung launches new safety silicon
Passport-grade chippery to help mobile devices prove their identity
26 May 10:32 | 15
Security
Contact-tracing app may become a permanent fixture in major Chinese city
Hangzhou wants a 'health and immunity firewall'
26 May 06:02 | 14
Security
Pre-authentication, remote root hole in call-center software? Thanks, Cisco. Just what a long weekend needs
RoundupThis and more bits and bytes from infosec world
25 May 09:31 | 4
Security
It wasn't just a few credit cards: Entire travel itineraries were stolen by hackers, Easyjet now tells victims
Unsurpisingly budget airline goes cheap: No payout or credit monitoring
22 May 18:06 | 72
Security
Forget BYOD, this is BYOVM: Ransomware tries to evade antivirus by hiding in a virtual machine on infected systems
Like Inception, but expensive and disappointing. So... just like Inception
22 May 16:00 | 36
Security
To test its security mid-pandemic, GitLab tried phishing its own work-from-home staff. 1 in 5 fell for it
Welp, at least that's better than industry averages, says code-hosting biz
21 May 20:51 | 60
Security
Campaign groups warn GCHQ can re-identify UK's phones from COVID-19 contact-tracing app data
UpdatedYes, the app that's not quite working yet
21 May 15:15 | 66
Security
Far-right leader walks free from court after conviction for refusing to hand his phone passcode over to police
British border search law strikes again
21 May 13:43 | 158
Security
DNS this week stands for Drowning Needed Services: Design flaw in name server system can be exploited to flood machines offline
Microsoft, BIND, Google, Cloudflare, Amazon, others fix up software or offer workarounds
21 May 10:52 | 19
Security
Zoom continues its catch-up security sprint with new training, bug bounty tweaks and promise of crypto playbook
Sigh. How many users did it have before it started this stuff?
21 May 06:02 | 6
Security
Remember when Securus was sued for recording 14,000 calls between prison inmates and lawyers? It just settled
It was a software bug, insists telco, as attorneys walk with most of the money
21 May 00:19 | 7
Security
UK's Ministry of Defence: We'll harvest and anonymise private COVID-19 apps' tracing data by handing it to 'behavioural science' arm
AnalysisPlus: Serco plays email fail game by mass-mailing human contact tracers; NCSC gives feedback on feedback about beta app
20 May 16:45 | 50
Webcast
Ransomware has gone nuclear: To avoid any fallout yourself, tune in online this month to hear from KnowBe4
How to defend your organization from attack
20 May 16:00 |
Security
Houseparty denied it had been hacked... while miscreants were abusing its dot-com domain name infrastructure
Subdomain takeover possible, infosec bod points out
20 May 15:00 | 3
Security
Tech's Volkswagen moment? Trend Micro accused of cheating Microsoft driver QA by detecting test suite
UpdatedAV maker denies allegation, says researcher is 'looking for attention'
20 May 10:30 | 46
Security
Former Labour deputy leader Harriet Harman calls on UK govt to legally protect data from contact-tracing apps
'We don't want the system to rely on the individual integrity of any minister, ministerial team, or government'
20 May 08:26 | 68
Security
You know this Land of the Free thing, yeah? Well then, why allow the FBI to trawl through America's browsing history without a warrant?
50-plus advocacy groups call on US House of Reps to slap limits on surveillance law
20 May 00:16 | 37
