Roundup
Cisco hacked: Six backend servers used by customer VIRL-PE deployments compromised via SaltStack
Plus other news from infosec land this week
31 May 09:32 | 5
Security
Security
Remember when Republicans said Dems hacked voting systems to rig Georgia's election? There were no hacks
'No evidence of damage to network or computers, no evidence of theft, damage, or loss of data'
29 May 23:32 | 67
Security
Great news. Patch load drops 20% for the first time in 10 years. Bad news: Well, you've heard about coronavirus?
Fix the crits, sort out the rest later
29 May 10:45 | 10
Security
It's not every day the NSA publicly warns of attacks by Kremlin hackers – so take this critical Exim flaw seriously
GRU crew actively exploit hole – but you patched it months ago, right?
29 May 06:08 | 10
Security
NTT warns its Singapore cloud was hacked, Japanese customer data compromised
Early May attack hit 600-plus hosting and cloud customers
29 May 01:36 |
Security
Got $50k spare? Then you can crack SHA-1 – so OpenSSH is deprecating flawed hashing algo in a 'near-future release'
UpdatedThe price will only go down
28 May 21:03 | 24
Security
Cybercrooks tend to prefer Google-branded phishing to Microsoft-flavoured lures
So says Barracuda Networks, anyway
28 May 18:59 | 1
Security
You, Apple Mac fan. Put down the homemade oat-milk latte, you need to patch a load of security bugs, too
Patch Thursday is for you, Patch Tuesday is for everyone else
28 May 15:45 | 6
Sponsored
Why zero trust security needs strong hardware foundations
Intel vPro platform provides hardware level of trust
28 May 06:00 |
Security
26 million logins believed to be stolen from LiveJournal in 2017 pop up on hacker forum
Best change any recycled credentials from your blogging days
27 May 18:30 | 3
Security
Oh cool, tech service prices are plummeting. And by tech services, we mean botnet rentals and stolen credit cards
Supply and demand in action
27 May 11:02 | 2
Security
Microsoft blocks Trend Micro code at center of driver 'cheatware' storm from Windows 10, rootkit detector product pulled from site
UpdatedTwist in drivergate scandal
27 May 07:14 | 44
Security
Mulled Chrome API shines light on long-neglected privacy gap: Sites can snoop on your find-in-page searches
UpdatedNaughty JS can watch you hit control+F, start typing, see what's on your mind
27 May 05:04 | 17
Security
India said its coronavirus contact-tracing app is perfect... adds bug bounty and open-sources it anyway
As the legalese changes to extend data retention period
27 May 02:59 | 1
Security
US lawmakers get a second shot at forcing FBI agents to obtain a warrant before they leaf through web histories
Bi-partisan amendment aims to take away easy access to your online life
26 May 23:25 | 15
Security
If someone could stop hackers pwning medical systems right now, that would be cool, say Red Cross and friends
The rules of war that protect hospitals should extend into cyberspace
26 May 19:51 | 29
Security
Airline-chasing lawyers leap on Easyjet for £18bn after 9m folks' data, itineraries nicked
No win, no fee. But if they win it's an up to £5.4bn fee
26 May 16:22 | 17
Security
Unmanned drones to slash NHS delivery times to one-fifth of road 'n' rail transport
Scottish trial will courier PPE and COVID-19 tests to remote hospital
26 May 14:41 | 31
Security
eBay users spot the online auction house port-scanning their PCs. Um... is that OK?
UpdatedFraud is a big issue for etailer, but there are privacy and consent concerns too
26 May 12:39 | 99
Security
Galaxy S20 security is already old hat as Samsung launches new safety silicon
Passport-grade chippery to help mobile devices prove their identity
26 May 10:32 | 14
Popular
Personal Tech
Linus Torvalds drops Intel and adopts 32-core AMD Ryzen Threadripper on personal PC
‘My 'allmodconfig' test builds are now three times faster than they used to be’ says Linux overlord
Software
Software bug in Bombardier airliner made planes turn the wrong way
Cold weather missed approaches went left instead of right - and vice versa
Software
'I wrote Task Manager': Ex-Microsoft programmer Dave Plummer spills the beans
'There should be nothing that TaskMgr can't kill' – sadly no longer the case
Security
Microsoft blocks Trend Micro code at center of driver 'cheatware' storm from Windows 10, rootkit detector product pulled from site
UpdatedTwist in drivergate scandal
Software
Man responsible for least popular iteration of Windows UI uses iPad Pro as a desktop*
UpdatedPlus: Getting over the Build hangover with new Windows 10 preview, UK Azure services, and more
Cloud
Photostopped: Adobe Cloud evaporates in mass outage. Hope none of you are on a deadline, eh?
More than dozen services down, customers left unable to work
Security
Remember when Republicans said Dems hacked voting systems to rig Georgia's election? There were no hacks
'No evidence of damage to network or computers, no evidence of theft, damage, or loss of data'
Security
eBay users spot the online auction house port-scanning their PCs. Um... is that OK?
UpdatedFraud is a big issue for etailer, but there are privacy and consent concerns too
Science
After 30 years of searching, astroboffins finally detect the universe's 'missing matter' – using fast radio bursts
'We couldn't find half of what should be there. It was a bit of an embarrassment'
Software
cmd.exe is dead, long live PowerShell: Microsoft leads aged command-line interpreter out into 'maintenance mode'
'It should not be used for interactive shell work' – Windows Terminal chief
STORIES
Security
Contact-tracing app may become a permanent fixture in major Chinese city
Hangzhou wants a 'health and immunity firewall'
26 May 06:02 | 14
Security
Pre-authentication, remote root hole in call-center software? Thanks, Cisco. Just what a long weekend needs
RoundupThis and more bits and bytes from infosec world
25 May 09:31 | 4
Security
It wasn't just a few credit cards: Entire travel itineraries were stolen by hackers, Easyjet now tells victims
Unsurpisingly budget airline goes cheap: No payout or credit monitoring
22 May 18:06 | 72
Security
Forget BYOD, this is BYOVM: Ransomware tries to evade antivirus by hiding in a virtual machine on infected systems
Like Inception, but expensive and disappointing. So... just like Inception
22 May 16:00 | 36
Security
To test its security mid-pandemic, GitLab tried phishing its own work-from-home staff. 1 in 5 fell for it
Welp, at least that's better than industry averages, says code-hosting biz
21 May 20:51 | 60
Security
Campaign groups warn GCHQ can re-identify UK's phones from COVID-19 contact-tracing app data
UpdatedYes, the app that's not quite working yet
21 May 15:15 | 66
Security
Far-right leader walks free from court after conviction for refusing to hand his phone passcode over to police
British border search law strikes again
21 May 13:43 | 158
Security
DNS this week stands for Drowning Needed Services: Design flaw in name server system can be exploited to flood machines offline
Microsoft, BIND, Google, Cloudflare, Amazon, others fix up software or offer workarounds
21 May 10:52 | 19
Security
Zoom continues its catch-up security sprint with new training, bug bounty tweaks and promise of crypto playbook
Sigh. How many users did it have before it started this stuff?
21 May 06:02 | 6
Security
Remember when Securus was sued for recording 14,000 calls between prison inmates and lawyers? It just settled
It was a software bug, insists telco, as attorneys walk with most of the money
21 May 00:19 | 7
Security
UK's Ministry of Defence: We'll harvest and anonymise private COVID-19 apps' tracing data by handing it to 'behavioural science' arm
AnalysisPlus: Serco plays email fail game by mass-mailing human contact tracers; NCSC gives feedback on feedback about beta app
20 May 16:45 | 50
Webcast
Ransomware has gone nuclear: To avoid any fallout yourself, tune in online this month to hear from KnowBe4
How to defend your organization from attack
20 May 16:00 |
Security
Houseparty denied it had been hacked... while miscreants were abusing its dot-com domain name infrastructure
Subdomain takeover possible, infosec bod points out
20 May 15:00 | 3
Security
Tech's Volkswagen moment? Trend Micro accused of cheating Microsoft driver QA by detecting test suite
UpdatedAV maker denies allegation, says researcher is 'looking for attention'
20 May 10:30 | 46
Security
Former Labour deputy leader Harriet Harman calls on UK govt to legally protect data from contact-tracing apps
'We don't want the system to rely on the individual integrity of any minister, ministerial team, or government'
20 May 08:26 | 68
Security
You know this Land of the Free thing, yeah? Well then, why allow the FBI to trawl through America's browsing history without a warrant?
50-plus advocacy groups call on US House of Reps to slap limits on surveillance law
20 May 00:16 | 37
Security
Rogue ADT tech spied on hundreds of customers in their homes via CCTV – including me, says teen girl
Lawsuits filed after alarm biz admits worker snooped on victims
19 May 20:36 | 71
Security
Beer rating app reveals homes and identities of spies and military bods, warns Bellingcat
We tested it and found a naval officer's partner and kids - they're not kidding
19 May 20:01 | 80
Security
Easyjet hacked: 9 million people's data accessed plus 2,200 folks' credit card details grabbed
UpdatedAll together now: The hackers were 'highly sophisticated'
19 May 12:32 | 125
