Security News • The Register

CISA boss: Makers of insecure software must stop enabling today's cyber villains

Write better code, urges Jen Easterly. And while you're at it, give crime gangs horrible names like 'Evil Ferret'

Software20 Sep 2024 | 93

Valencia Ransomware explodes on the scene, claims California city, fashion giant, more as victims

Boasts 'appear to be credible' experts tell El Reg

Cyber-crime19 Sep 2024 | 7

No way? Big Tech's 'lucrative surveillance' of everyone is terrible for privacy, freedom

Says Lina Khan in latest push to rein in Meta, Google, Amazon and pals

Personal Tech19 Sep 2024 | 26

Iran's cyber-goons emailed stolen Trump info to Team Biden – which ignored them

To be fair, Joe was probably taking a nap

Cyber-crime19 Sep 2024 | 50

1 in 10 orgs dumping their security vendors after CrowdStrike outage

Many left reeling from July's IT meltdown, but not to worry, it was all unavoidable

Security19 Sep 2024 | 8

Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations

Updated Better check your widgets, people

Research19 Sep 2024 | 7

Lebanon now hit with deadly walkie-talkie blasts as Israel declares ‘new phase’ of war

Updated Second wave of exploding gear kills at least 14 today

Security18 Sep 2024 | 185

Chinese spies spent months inside aerospace engineering firm's network via legacy IT

Exclusive Getting sloppy, Xi

CSO18 Sep 2024 | 32

Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform

Italian mafia mobsters and Irish crime families scuppered by international cops

Cyber-crime18 Sep 2024 | 18

Despite Russia warnings, Western critical infrastructure remains unprepared

Feature 'Lives will be lost' as Moscow ramps up offensive cyber military units

Cyber-crime18 Sep 2024 | 29

Australian Police conducted supply chain attack on criminal collaborationware

Sting led to cuffing of alleged operator behind Ghost – an app for drug trafficking, money laundering, and violence-as-a-service

Cyber-crime18 Sep 2024 | 9

WhatsApp still working on making View Once chats actually disappear for all

Updated So far it's more like View Forever

Patches18 Sep 2024 | 16

VMware patches remote make-me-root holes in vCenter Server, Cloud Foundation

Bug reports made in China

Virtualization17 Sep 2024 | 1

Google Cloud Document AI flaw (still) allows data theft despite bounty payout

Updated Chocolate Factory downgrades risk, citing the need for attacker access

Security17 Sep 2024 |

Lebanon: At least nine dead, thousands hurt after Hezbollah pagers explode

Eight-year-old among those slain, Israel blamed, Iran's Lebanese ambassador wounded, it's said

Security17 Sep 2024 | 184

Rhysida ransomware gang ships off Port of Seattle data for $6M

Auction acts as payback after authority publicly refuses to pay up

Cyber-crime17 Sep 2024 | 2

Secure your organization

Ransomware resilience in a multi-cloud world: attend this exclusive event in Boston, MA

Predator spyware kingpins added to US sanctions list

Designations come as new infrastructure spins up in Africa

Security17 Sep 2024 | 2

China claims Starlink signals can reveal stealth aircraft – and what that really means

If this really was that useful, they wouldn't be telling us

Security17 Sep 2024 | 98

Chinese national accused by Feds of spear-phishing for NASA, military source code

May have reeled in blueprints related to weapons development

Cyber-crime17 Sep 2024 | 6

Microsoft confirms IE bug squashed in Patch Tuesday was exploited zero-day

Analysis The C in these CVEs stands for Confusing

Security17 Sep 2024 | 8

The empire of C++ strikes back with Safe C++ blueprint

You pipsqueaks want memory safety? We'll show you memory safety! We'll borrow that borrow checker

Applications16 Sep 2024 | 112

Snowflake slams 'more MFA' button again – months after Ticketmaster, Santander breaches

Now it's the default for all new accounts

Security16 Sep 2024 | 2

Germany’s CDU still struggling to restore data months after June cyberattack

Putting a spanner in work for plans of opposition party to launch a comeback during next year's elections

Cyber-crime16 Sep 2024 | 1

Prison just got rougher as band of heinously violent cybercrims sentenced to lengthy stints

Orchestrators of abductions, torture, crypto thefts, and more get their comeuppance

Cyber-crime16 Sep 2024 | 20

China’s quantum* crypto tech may be unhackable, but it's hardly a secret

Opinion * Quite Unlikely A New Technology’s Useful, Man

Security16 Sep 2024 | 52

23andMe settles class-action breach lawsuit for $30 million

Infosec In Brief Also: Apple to end NSO Group lawsuit; Malicious Python dev job offers; Dark web kingpins busted; and more

Security16 Sep 2024 | 20

Feeld dating app's security too open-minded as private data swings into public view

No love for months-long wait to fix this, either

Research13 Sep 2024 | 7

Cambodian senator sanctioned by US over alleged forced labor cyber-scam camps

Do not go on holiday to the O Smach Resort

Cyber-crime13 Sep 2024 | 8

Australia’s government spent the week boxing Big Tech

With social media age limits, anti-scam laws, privacy tweaks, and misinformation rules Elon Musk labelled 'fascist'

Public Sector13 Sep 2024 | 41

Feds pull plug on domains linked to import of Chinese gun conversion devices

Illegal goods allegedly shipped to the US labeled as toys or jewels

Cyber-crime13 Sep 2024 | 30

Fortinet admits miscreant got hold of customer data in the cloud

That would explain this 440GB leak, then

Cyber-crime13 Sep 2024 | 5

'Hadooken' Linux malware targets Oracle WebLogic servers

Nastyware seeks creds, mines crypto, and plants ransomware that isnt deployed - for now?

Security13 Sep 2024 | 3

I stole 20 GB of data from Capgemini – and now I'm leaking it, says cybercrook

Updated Allegedly pilfered database has source code, private keys, staff info, T-Mobile VM logs, more

Cyber-crime12 Sep 2024 | 20

Mastercard splurges $2.65B on another big cyber purchase – Recorded Future

Oh, turns out there are some things money can buy

Security12 Sep 2024 | 4

Adobe fixed Acrobat bug, neglected to mention whole zero-day exploit thing

SaaS seller sets severity to 'critical'

Patches12 Sep 2024 | 4

Google Chrome gets a mind of its own for some security fixes

Browser becomes more proactive about trimming unneeded permissions and deceptive notifications

Security12 Sep 2024 | 11

Transport for London confirms 5,000 users' bank data exposed, pulls large chunks of IT infra offline

NCA confirms arrest of 17-year-old 'on suspicion of Computer Misuse Act offences' – now bailed

Cyber-crime12 Sep 2024 | 66

EU kicks off an inquiry into Google's AI model

Privacy regulator taking a closer look at data privacy and PaLM 2

Security12 Sep 2024 | 8

About that Windows Installer 'make me admin' security hole. Here's how it's exploited

What kind of OS can be hijacked by clicking a link at just the right time? Microsoft's

Patches12 Sep 2024 | 23

Mind your header! There's nothing refreshing about phishers' latest tactic

It could lead to a costly BEC situation

Research12 Sep 2024 | 2

If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM

Academically interesting technique for poking holes in paywalled tech specs

Research12 Sep 2024 | 36

Pokémon GO was an intelligence tool, claims Belarus military official

Augmented reality meets warped reality

Personal Tech12 Sep 2024 | 36

Healthcare giant to pay $65M settlement after crooks stole and leaked nude patient pics

Would paying a ransom – or better security – have been cheaper and safer?

Security12 Sep 2024 | 22

Cyber crooks shut down UK, US schools, thousands of kids affected

No class: Black Suit ransomware gang boasts of 200GB haul from one raid

Cyber-crime11 Sep 2024 | 45

Major sales and ops overhaul leads to much more activity ... for Meow ransomware gang

You hate to see it

Cyber-crime11 Sep 2024 | 1

Hunters International cyber-gang extorts Chinese mega-bank's London HQ

Allegedly swiped more than 5.2M files and threatens to publish the lot

Cyber-crime11 Sep 2024 | 7

So you paid a ransom demand … and now the decryptor doesn't work

A really big oh sh*t moment, for sure

Cyber-crime11 Sep 2024 | 69

How $20 and a lapsed domain allowed security pros to undermine internet integrity

What happens at Black Hat…

Research11 Sep 2024 | 19

Mind the talent gap: Infosec vacancies abound, but hiring is flat

ISC2 argues security training needs to steer toward what hiring managers want

Security11 Sep 2024 | 8

India to train 5,000 'Cyber Commandos'

Minister reckons dedicated cops necessary to protect digital transactions

Security11 Sep 2024 | 3

Microsoft says it broke some Windows 10 patching – as it fixes flaws under attack

Patch Tuesday CISA wants you to leap on Citrix, Ivanti issues. Adobe, Intel, SAP vie for priority

Patches11 Sep 2024 | 24

Crypto scams rake in $5.6B a year for cyberscum lowlifes, FBI says

Elderly people report the greatest losses

Cyber-crime10 Sep 2024 | 7

Thanks, Edward Snowden: You propelled China to quantum networking leadership

Beijing aimed research at immediate needs – like blocking leaks – while the US sought abstract knowledge

Networks10 Sep 2024 | 52

WhatsApp's 'View Once' could be 'View Whenever' due to a flaw

Video It promised vanishing messages, but now 'it's privacy theater'

Security09 Sep 2024 | 8

Topics

Special Features

Vendor Voice

Resources

Security

CISA boss: Makers of insecure software must stop enabling today's cyber villains

Valencia Ransomware explodes on the scene, claims California city, fashion giant, more as victims

No way? Big Tech's 'lucrative surveillance' of everyone is terrible for privacy, freedom

Iran's cyber-goons emailed stolen Trump info to Team Biden – which ignored them

1 in 10 orgs dumping their security vendors after CrowdStrike outage

Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations

UK activists targeted with Pegasus spyware ask police to charge NSO Group

Tor insists its network is safe after German cops convict CSAM dark-web admin

FBI boss says China 'burned down' 260,000-device botnet when confronted by Feds

Deja blues... LockBit boasts once again of ransoming IRS-authorized eFile.com

Putin really wants Trump back in the White House

Lebanon now hit with deadly walkie-talkie blasts as Israel declares ‘new phase’ of war

Chinese spies spent months inside aerospace engineering firm's network via legacy IT

Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform

Despite Russia warnings, Western critical infrastructure remains unprepared

Australian Police conducted supply chain attack on criminal collaborationware

WhatsApp still working on making View Once chats actually disappear for all

VMware patches remote make-me-root holes in vCenter Server, Cloud Foundation

Google Cloud Document AI flaw (still) allows data theft despite bounty payout

Lebanon: At least nine dead, thousands hurt after Hezbollah pagers explode

Rhysida ransomware gang ships off Port of Seattle data for $6M

Secure your organization

Predator spyware kingpins added to US sanctions list

China claims Starlink signals can reveal stealth aircraft – and what that really means

Chinese national accused by Feds of spear-phishing for NASA, military source code

Microsoft confirms IE bug squashed in Patch Tuesday was exploited zero-day

The empire of C++ strikes back with Safe C++ blueprint

Snowflake slams 'more MFA' button again – months after Ticketmaster, Santander breaches

Germany’s CDU still struggling to restore data months after June cyberattack

Prison just got rougher as band of heinously violent cybercrims sentenced to lengthy stints

China’s quantum* crypto tech may be unhackable, but it's hardly a secret

23andMe settles class-action breach lawsuit for $30 million

Feeld dating app's security too open-minded as private data swings into public view

Cambodian senator sanctioned by US over alleged forced labor cyber-scam camps

Australia’s government spent the week boxing Big Tech

Feds pull plug on domains linked to import of Chinese gun conversion devices

Fortinet admits miscreant got hold of customer data in the cloud

'Hadooken' Linux malware targets Oracle WebLogic servers

I stole 20 GB of data from Capgemini – and now I'm leaking it, says cybercrook

Mastercard splurges $2.65B on another big cyber purchase – Recorded Future

Adobe fixed Acrobat bug, neglected to mention whole zero-day exploit thing

Google Chrome gets a mind of its own for some security fixes

Transport for London confirms 5,000 users' bank data exposed, pulls large chunks of IT infra offline

EU kicks off an inquiry into Google's AI model

About that Windows Installer 'make me admin' security hole. Here's how it's exploited

Mind your header! There's nothing refreshing about phishers' latest tactic

If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM

Pokémon GO was an intelligence tool, claims Belarus military official

Healthcare giant to pay $65M settlement after crooks stole and leaked nude patient pics

Cyber crooks shut down UK, US schools, thousands of kids affected

Major sales and ops overhaul leads to much more activity ... for Meow ransomware gang

Hunters International cyber-gang extorts Chinese mega-bank's London HQ

So you paid a ransom demand … and now the decryptor doesn't work

How $20 and a lapsed domain allowed security pros to undermine internet integrity

Mind the talent gap: Infosec vacancies abound, but hiring is flat

India to train 5,000 'Cyber Commandos'

Microsoft says it broke some Windows 10 patching – as it fixes flaws under attack

Crypto scams rake in $5.6B a year for cyberscum lowlifes, FBI says

Thanks, Edward Snowden: You propelled China to quantum networking leadership

WhatsApp's 'View Once' could be 'View Whenever' due to a flaw

About Us

Our Websites

Your Privacy