Comment
UK tells UN that nation-states should retaliate against cyber badness with no warning
Even nuclear missile attacks came with a 4-minute heads-up
11 Jun 16:44 | 24
Security
Security
EA Games looted by intruders: Publisher says 'no player data accessed' after reported theft of FIFA 21, Frostbite source
'Surprise stealing mechanics' made short work of network perimeter security
11 Jun 12:25 | 15
Security
Seven-year-old make-me-root bug in Linux service polkit patched
Error handling? Nah, let's just unlock everything and be done with it
11 Jun 06:28 | 45
Security
China arrests over 1000 for using cryptocurrency to help launder proceeds of phone scams
As local search engines stop providing results on crypto-keywords
11 Jun 05:58 | 3
Security
Student Loans Company splashes out on 20,000 cybersecurity training courses – for just 3,300 employees
FoI request details £76,800 in training fees, most of which went to staff security-specific departments
10 Jun 10:45 | 16
Security
South Korea’s data watchdog barks warnings at Microsoft and five local firms
Fines, fines, everywhere there's fines
10 Jun 06:28 | 1
Security
Ransomware-skewered meat producer JBS confesses to paying $11m for its freedom
Company also says large and well-funded IT department sorted recovery swiftly
10 Jun 05:57 | 20
Security
ALPACA gnaws through TLS protection to snarf cookies and steal data
Boffins find flaw in web security that enables certificate confusion
10 Jun 00:07 | 11
Security
Huawei flings open the doors of its third privacy and security transparency centre
The first based in China
09 Jun 23:03 | 3
Security
Risk and reward: Nefilim ransomware gang mainly targets fewer, richer companies and that strategy is paying off, warns Trend Micro
Criminal operators emerged from woodwork just as COVID hit the West
09 Jun 20:17 | 2
Security
PrivacyMic looks to keep your home smart without Google, Alexa, Siri and pals listening in
Raspberry Pi-powered prototype proves 95% accurate, 100% private, claim boffins
09 Jun 18:03 | 35
Security
'I put the interests of the country first': Colonial Pipeline CEO on why oil biz paid off ransomware crooks
Mandiant investigation says crims gained access through legacy VPN
09 Jun 16:28 | 23
Security
Mysterious Gelsemium APT was behind February compromise of NoxPlayer, says ESET
Malicious crew targets ME and Asia but also tries evading Chinese AV suites
09 Jun 15:43 |
Security
Intel's latest patch set plugs some serious holes in CPU, Bluetooth, server, and – ironically – security lines
Reports through Chipzilla's bug bounty scheme growing, but still in the minority
09 Jun 12:15 | 5
Security
Security researcher says attacks on Russian government have Chinese fingerprints – and typos, too
Malware was too loose to have come from a Western nation, according to Sentinel Labs
09 Jun 06:30 | 13
Patch Tuesday
Extra urgency in June's Patch Tuesday: Microsoft warns six more bugs are being exploited
Adobe, Intel, SAP, Android emit vulnerability fixes, too
09 Jun 00:21 | 1
Security
FBI paid renegade developer $180k for backdoored AN0M chat app that brought down drug underworld
From hidden master keys to pineapples stuffed with Bolivian marching powder — this story has it all
08 Jun 22:58 | 133
Security
Cryptography whizz Phil Zimmermann looks back at 30 years of Pretty Good Privacy
The highs, the lows, the acquisitions, the resignations, and more
08 Jun 17:01 | 25
Security
Siloscape malware targets Windows containers, breaks through to the underlying Kubernetes cluster
Using techniques Microsoft had previously considered 'not a vulnerability'
08 Jun 15:30 | 2
Security
DoS vulns in 3 open-source MQTT message brokers could leave users literally locked out of their homes or offices
If your IoT kit employs RabbitMQ, EMQ X or VerneMQ, it's time to get patching
08 Jun 13:05 | 27
Popular
On Call
We don't know why it's there, we don't know what it does – all we know is that the button makes everything OK again
It must be working, look at the LED
Legal
Amazon exec's husband jailed for two years for insider trading. Yes, with Amazon stock
Couple now definitely past their Prime
Updated
AWS Frankfurt experiences major breakdown that staff couldn’t fix for hours due to ‘environmental conditions’ on data centre floor
Cloud colossus says aircon fail caused kit to shut down, networks dropped out and EC2 instances went dark
OSes
Linus Torvalds tells kernel list poster to 'SHUT THE HELL UP' for saying COVID-19 vaccines create 'new humanoid race'
'Any Linux discussion list isn't going to have your idiotic drivel pass uncontested from me'
Security
Seven-year-old make-me-root bug in Linux service polkit patched
Error handling? Nah, let's just unlock everything and be done with it
Networks
BT promises firmware update for Mini Whole Home Wi-Fi discs to prevent obsessive Big Tech DNS lookups
Meanwhile users complain their IPs are being flagged for suspicious traffic
AI + ML
McDonald's AI drive-thru bot accused of breaking biometrics privacy law
Would you like a lawsuit with that?
On-Prem
Intel made $2bn+ takeover offer for RISC-V chip darling SiFive – report
Someone's got to keep Altera company
Off-Prem
Cloudflare network outage disrupts Discord, Shopify
And its CAPTCHA alternative challenged by security researcher
Personal Tech
FTC approves $61.7m settlement with Amazon for pocketing driver tips
Delivery drives to get refund
STORIES
Feature
I think therefore IAM: It's not cool, it's not sexy, but it's one of the most important and difficult areas in modern IT
When I grow up, I want to be an Identity and Access Management specialist – said no one ever
08 Jun 08:30 | 23
Security
Uncle Sam recovers 63.7 of 75 Bitcoins Colonial Pipeline paid to ransomware crew
All thanks to FBI that somehow had wallet's private key
08 Jun 03:26 | 36
Security
Australian cops, FBI created backdoored chat app, told crims it was secure – then snooped on 9,000 users' plots
Hundreds of arrests already in Oz, details of European and US ops to be revealed soon
08 Jun 01:53 | 97
Security
FBI drops subpoena to identify readers of USA Today article about shootout with agents
Feds, facing pushback over constitutional concerns, say they no longer need the data after all
08 Jun 00:56 | 11
WWDC
Everything Apple announced: Tor-ish Safari anonymization. Cloaked iCloud addresses. Cloud CI/CD. And more
No new hardware though loads of bits and bytes for software makers
08 Jun 00:10 | 39
In brief
Google, Facebook, Chaos Computer Club join forces to oppose German state spyware
Plus: FBI boss says ransomware is terrorism 2.0, and more
07 Jun 22:49 | 10
Security
US House Rep on cyber committees tweets Gmail password, PIN in Capitol riot lawsuit outrage
Gonna need a little Mo security over here
07 Jun 20:38 | 39
Security
Remember Anonymous? It/they might be back, and it/they are angry with Elon Musk
Has the hacktivist group had enough of Musk's manipulative crypto-Tweets, or has someone just donned the mask to protest their crashed Bitcoin balance?
07 Jun 13:45 | 58
Security
We're right behind Computer Misuse Act reforms for busting ransomware gangs, says UK infosec industry
Plus: CyberUp campaign writes to Home Sec
07 Jun 11:30 | 3
Column
Military infosec SNAFUs: What WhatsApp and bears in the woods can teach us
One can’t spell shit without IT, but for Pete's sake it doesn't need to be in your endpoints
07 Jun 08:32 | 19
Security
Biden expands Chinese tech and military blocklist to 59 companies
US president calls China’s military-industrial complex 'a threat' and condemns surveillance technology for human rights abuse
04 Jun 19:24 | 30
Security
Good news for pentesters and network admins: US issues ransomware guidance asking biz to skill up security teams
New approach against malware pushers mirrors how American authorities handle terrorism cases
04 Jun 16:45 | 13
Security
Android banking malware sharply increased in the first chunk of 2021, reckons ESET
Claims Russia's FSB was poking around an Eastern European ministry
04 Jun 12:34 | 9
Feature
The policy of truth: As ransomware claims rise, what's a cyber insurer to do?
Never again is what you swore... the time before
04 Jun 09:41 | 38
Security
Brit retailer Furniture Village confirms 'cyber-attack' as systems outage rolls into Day 7
Sofa, not-so-good: Angry customers still can't access systems, phones, and deliveries delayed
04 Jun 08:15 | 23
Security
How to use Google's new dependency mapping tool to find security flaws buried in your projects
Millions of Rust, JavaScript, Go, Maven repositories scanned and visualized
04 Jun 02:59 | 15
