Security News • The Register

China has utterly pwned 'thousands and thousands' of devices at US telcos

Senate Intelligence Committee chair says his 'hair is on fire' as execs front the White House

Cyber-crime25 Nov 2024 | 51

Google blocked 1,000-plus pro-China fake news websites from its search results

Beijing's propaganda buddies aren't just using social media

Security25 Nov 2024 | 14

Imagine a land in which Big Tech can't send you down online rabbit holes or use algorithms to overcharge you

China is trying to become that land, with a government crackdown on the things that make the internet no fun

Security25 Nov 2024 | 69

Russian spies may have moved in next door to target your network

Infosec in brief Plus: Microsoft seizes phishing domains; Helldown finds new targets; Illegal streaming with Jupyter, and more

Security25 Nov 2024 | 22

Volunteer DEF CON hackers dive into America's leaky water infrastructure

Six sites targeted for security clean-up, just 49,994 to go

Security24 Nov 2024 | 13

Trump taps border hawk to head DHS. Will Noem's 'enthusiasm' extend to digital domain?

Analysis Meanwhile, CISA chief Jen Easterly will step down prior to inauguration

Public Sector23 Nov 2024 | 51

Andrew Tate's site ransacked, subscriber data stolen

He'll just have to take this one on the chin

Cyber-crime22 Nov 2024 | 106

1,000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

Updated PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more

CSO22 Nov 2024 | 22

How to master endpoint security

Get some advice from this discussion with a Kaseya expert

Webinar

SafePay ransomware gang claims Microlise attack that disrupted prison van tracking

Fledgling band of crooks says it stole 1.2 TB of data

Cyber-crime22 Nov 2024 | 3

Helpline for Yakuza victims fears it leaked their personal info

Organized crime types tend not to be kind to those who go against them, so this is nasty

Security22 Nov 2024 | 21

Here's what happens if you don't layer network security – or remove unused web shells

TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated

Security22 Nov 2024 | 4

Now Online Safety Act is law, UK has 'priorities' – but still won't explain 'spy clause'

Draft doc struggles to describe how theoretically encryption-busting powers might be used

Cyber-crime21 Nov 2024 | 59

Put your usernames and passwords in your will, advises Japan's government

Digital end of life planning saves your loved ones from a little extra anguish

Software21 Nov 2024 | 77

Five Scattered Spider suspects indicted for phishing spree and crypto heists

DoJ also shutters allleged crimeware and credit card mart PopeyeTools

Cyber-crime21 Nov 2024 | 3

Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator

Meet Liminal Panda, which prowls telecom networks in South Asia and Africa

CSO20 Nov 2024 | 32

Mega US healthcare payments network restores system 9 months after ransomware attack

Change Healthcare’s $2 billion recovery is still a work in progress

Cyber-crime20 Nov 2024 | 5

Google's AI bug hunters sniff out two dozen-plus code gremlins that humans missed

OSS-Fuzz is making a strong argument for LLMs in security research

AI + ML20 Nov 2024 | 9

D-Link tells users to trash old VPN routers over bug too dangerous to identify

Vendor offers 20% discount on new model, but not patches

CSO20 Nov 2024 | 59

Data is the new uranium – incredibly powerful and amazingly dangerous

Column CISOs are quietly wishing they had less data, because the cost of management sometimes exceeds its value

CSO20 Nov 2024 | 46

Healthcare org Equinox notifies 21K patients and staff of data theft

Ransomware scum LockBit claims it did the dirty deed

Cyber-crime20 Nov 2024 | 1

China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer

No word on when or if the issue will be fixed

Security19 Nov 2024 | 2

Russian suspected Phobos ransomware admin extradited to US over $16M extortion

This malware is FREE for EVERY crook ($300 decryption keys sold separately)

Cyber-crime19 Nov 2024 | 5

America's drinking water systems have a hard-to-swallow cybersecurity problem

More than 100M rely on gear rife with vulnerabilities, says EPA OIG

Public Sector19 Nov 2024 | 20

Palo Alto Networks tackles firewall-busting zero-days with critical patches

Amazing that these two bugs got into a production appliance, say researchers

Patches19 Nov 2024 | 4

Crook breaks into AI biz, points $250K wire payment at their own account

Fastidious attacker then tidied up email trail behind them

Cyber-crime19 Nov 2024 | 12

Join in the festive cybersecurity fun

Get hands-on cybersecurity training with this seasonal challenge

iOS 18 added secret and smart security feature that reboots iThings after three days

Security researcher's reverse engineering effort reveals undocumented reboot timer that will make life harder for attackers

Security19 Nov 2024 | 43

Ford 'actively investigating' after employee data allegedly parked on leak site

Updated Plus: Maxar Space Systems confirms employee info stolen in digital intrusion

Security18 Nov 2024 | 3

Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble

If you didn't fix this a month ago, your to-do list probably needs a reshuffle

Virtualization18 Nov 2024 | 4

T-Mobile US 'monitoring' China's 'industry-wide attack' amid fresh security breach fears

updated Un-carrier said to be among those hit by Salt Typhoon, including AT&T, Verizon

Networks18 Nov 2024 | 2

Sweden's 'Doomsday Prep for Dummies' guide hits mailboxes today

First in six years is nearly three times the size of the older, pre-NATO version

Security18 Nov 2024 | 40

Teen serial swatter-for-hire busted, pleads guilty, could face 20 years

Infosec in brief PLUS: Cost of Halliburton hack disclosed; Time to dump old D-Link NAS; More UN cybercrime convention concerns; and more

Security18 Nov 2024 | 23

Will passkeys ever replace passwords? Can they?

Systems Approach Here's why they really should

Security17 Nov 2024 | 126

Rust haters, unite! Fil-C aims to Make C Great Again

It's memory-safe, with a few caveats

Software16 Nov 2024 | 104

Swiss cheesed off as postal service used to spread malware

QR codes arrive via an age-old delivery system

Bootnotes16 Nov 2024 | 39

Bloke behind Helix Bitcoin launderette jailed for three years, hands over $400M

Digital money laundering pays, until it doesn't

Cyber-crime16 Nov 2024 | 7

Letting chatbots run robots ends as badly as you'd expect

LLM-controlled droids easily jailbroken to perform mayhem, researchers warn

AI + ML16 Nov 2024 | 44

Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

Yank access to management interface, stat

CSO15 Nov 2024 | 28

Keyboard robbers steal 171K customers' data from AnnieMac mortgage house

Names and social security numbers of folks looking for the biggest loan of their lives exposed

Cyber-crime15 Nov 2024 | 6

Bitfinex burglar bags 5 years behind bars for Bitcoin heist

A nervous wait for rapper wife who also faces a stint in the clink

Cyber-crime15 Nov 2024 | 4

Microsoft Power Pages misconfigurations exposing sensitive data

NHS supplier that leaked employee info fell victim to fiddly access controls that can leave databases dangling online

Security15 Nov 2024 | 6

Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost

Plus a bonus hard-coded local API key

Patches14 Nov 2024 |

Cybercriminal devoid of boundaries gets 10-year prison sentence

Serial extortionist of medical facilities stooped to cavernous lows in search of small payouts

Cyber-crime14 Nov 2024 | 6

Kids' shoemaker Start-Rite trips over security again, spilling customer card info

Updated Full details exposed, putting shoppers at serious risk of fraud

Cyber-crime14 Nov 2024 | 14

NatWest blocks bevy of apps in clampdown on unmonitorable comms

From guidance to firm action... no more WhatsApp, Meta's Messenger, Signal, Telegram and more

Security14 Nov 2024 | 25

Asda security chief replaced, retailer sheds jobs during Walmart tech divorce

British grocer's workers called back to office as clock ticks for contractors

On-Prem14 Nov 2024 | 18

Five Eyes infosec agencies list 2023's most exploited software flaws

Slack patching remains a problem – which is worrying as crooks increasingly target zero-day vulns

CSO14 Nov 2024 | 28

Reminder: China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign'

Updated Feds don't name Salt Typhoon, but describe Beijing band's alleged deeds

Research14 Nov 2024 | 5

ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue

Plus: CISA's ScubaGear dives deep to fix M365 misconfigs

CSO14 Nov 2024 | 3

Data broker amasses 100M+ records on people – then someone snatches, sells it

We call this lead degeneration

Cyber-crime13 Nov 2024 | 18

Ransomware fiends boast they've stolen 1.4TB from US pharmacy network

American Associated Pharmacies yet to officially confirm infection

Cyber-crime13 Nov 2024 | 1

Microsoft slips Task Manager and processor count fixes into Patch Tuesday

Sore about cores no more

Patches13 Nov 2024 | 7

Admins can give thanks this November for dollops of Microsoft patches

Patch Tuesday Don't be a turkey – get these fixed

Patches13 Nov 2024 | 21

China's Volt Typhoon crew and its botnet surge back with a vengeance

Ohm, for flux sake

Public Sector13 Nov 2024 | 4

Air National Guardsman gets 15 years after splashing classified docs on Discord

22-year-old talked of 'culling the weak minded' – hmm!

Cyber-crime13 Nov 2024 | 93

Here's what we know about the suspected Snowflake data extortionists

A Canadian and an American living in Turkey 'walk into' cloud storage environments…

Cyber-crime12 Nov 2024 | 5

Topics

Special Features

Vendor Voice

Resources

Security

China has utterly pwned 'thousands and thousands' of devices at US telcos

Google blocked 1,000-plus pro-China fake news websites from its search results

Imagine a land in which Big Tech can't send you down online rabbit holes or use algorithms to overcharge you

Russian spies may have moved in next door to target your network

Volunteer DEF CON hackers dive into America's leaky water infrastructure

Trump taps border hawk to head DHS. Will Noem's 'enthusiasm' extend to digital domain?

Andrew Tate's site ransacked, subscriber data stolen

1,000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

How to master endpoint security

SafePay ransomware gang claims Microlise attack that disrupted prison van tracking

Helpline for Yakuza victims fears it leaked their personal info

Here's what happens if you don't layer network security – or remove unused web shells

DARPA-backed voting system for soldiers abroad savaged

Chinese ship casts shadow over Baltic subsea cable snipfest

'Alarming' security bugs lay low in Linux's needrestart utility for 10 years

Now Online Safety Act is law, UK has 'priorities' – but still won't explain 'spy clause'

Put your usernames and passwords in your will, advises Japan's government

Five Scattered Spider suspects indicted for phishing spree and crypto heists

Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator

Mega US healthcare payments network restores system 9 months after ransomware attack

Google's AI bug hunters sniff out two dozen-plus code gremlins that humans missed

D-Link tells users to trash old VPN routers over bug too dangerous to identify

Data is the new uranium – incredibly powerful and amazingly dangerous

Healthcare org Equinox notifies 21K patients and staff of data theft

China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer

Russian suspected Phobos ransomware admin extradited to US over $16M extortion

America's drinking water systems have a hard-to-swallow cybersecurity problem

Palo Alto Networks tackles firewall-busting zero-days with critical patches

Crook breaks into AI biz, points $250K wire payment at their own account

Join in the festive cybersecurity fun

iOS 18 added secret and smart security feature that reboots iThings after three days

Ford 'actively investigating' after employee data allegedly parked on leak site

Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble

T-Mobile US 'monitoring' China's 'industry-wide attack' amid fresh security breach fears

Sweden's 'Doomsday Prep for Dummies' guide hits mailboxes today

Teen serial swatter-for-hire busted, pleads guilty, could face 20 years

Will passkeys ever replace passwords? Can they?

Rust haters, unite! Fil-C aims to Make C Great Again

Swiss cheesed off as postal service used to spread malware

Bloke behind Helix Bitcoin launderette jailed for three years, hands over $400M

Letting chatbots run robots ends as badly as you'd expect

Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

Keyboard robbers steal 171K customers' data from AnnieMac mortgage house

Bitfinex burglar bags 5 years behind bars for Bitcoin heist

Microsoft Power Pages misconfigurations exposing sensitive data

Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost

Cybercriminal devoid of boundaries gets 10-year prison sentence

Kids' shoemaker Start-Rite trips over security again, spilling customer card info

NatWest blocks bevy of apps in clampdown on unmonitorable comms

Asda security chief replaced, retailer sheds jobs during Walmart tech divorce

Five Eyes infosec agencies list 2023's most exploited software flaws

Reminder: China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign'

ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue

Data broker amasses 100M+ records on people – then someone snatches, sells it

Ransomware fiends boast they've stolen 1.4TB from US pharmacy network

Microsoft slips Task Manager and processor count fixes into Patch Tuesday

Admins can give thanks this November for dollops of Microsoft patches

China's Volt Typhoon crew and its botnet surge back with a vengeance

Air National Guardsman gets 15 years after splashing classified docs on Discord

Here's what we know about the suspected Snowflake data extortionists

About Us

Our Websites

Your Privacy