CSO News • The Register

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

'It's not our job to find the culprits – That's what we're paying you for' lawmaker scolds Brad Smith

CSO14 Jun 2024 | 57

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

Interview Scott Small tells us gang's 'intent and capability' should get the attention of CSOs

Malware Month09 Jun 2024 | 3

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

Interview Lessons learned from the infosec chief convicted and punished for covering up theft of data from taxi app maker

CSO08 Jun 2024 | 33

FCC takes some action against notorious BGP

How's your RPKI-based security plan coming along? Feds want to know

Networks07 Jun 2024 | 9

Microsoft Research chief scientist has no issue with Windows Recall

As tool emerges to probe OS feature's SQLite-based store of user activities

OSes06 Jun 2024 | 114

Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn't need a fix, just better documentation

Let customers interfere with other tenants? That's our cloud working by design, Redmond seems to say

CSO05 Jun 2024 | 9

Command senior chief busted for secretly setting up Wi-Fi on US Navy combat ship

In the Navy, no, you cannot have an unauthorized WLAN. In the Navy, no, that's not a good plan

CSO04 Jun 2024 | 91

Pentagon 'doubling down' on Microsoft despite 'massive hack,' senators complain

Meanwhile Mr Smith goes to Washington to testify before Congress

Public Sector04 Jun 2024 | 5

Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

Analysis Cloud storage giant lawyers up against infosec house

Cyber-crime04 Jun 2024 | 18

NIST turns to IT consultants to clear National Vulnerability Database backlog

Aims to get CVE logjam cleared by the end of FY 24

CSO03 Jun 2024 | 5

US senator claims UnitedHealth's CEO, board appointed 'unqualified' CISO

CSO31 May 2024 | 26

OpenAI is very smug after thwarting five ineffective AI covert influence ops

That said, use of generative ML to sway public opinion may not always be weak sauce

AI + ML30 May 2024 | 11

IBM spin-off Kyndryl accused of discriminating on basis of age, race, disability

Exclusive Five current and former employees file formal charges with US employment watchdog

CSO30 May 2024 | 18

2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist

Theft happened in October, only now are details coming to light

Cyber-crime28 May 2024 | 8

How's Uncle Sam getting on with Biden's AI exec order? Pretty good, we're told

Interview Former Pentagon deputy CIO Rob Carey tells us guardrails should steer Feds away from bad ML

Public Sector27 May 2024 | 7

Three-year-old Apache Flink flaw under active attack

We know IT admins have busy schedules but c'mon

Patches24 May 2024 | 11

70% of CISOs worry their org is at risk of a material cyber attack

Wait, why do you want this job again?

CSO23 May 2024 | 7

Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam

Why should we get its paperwork?

CSO22 May 2024 | 8

Confused by the SEC's IT security breach reporting rules? Read this

'Clarification' weighs in on material vs voluntary disclosures

CSO22 May 2024 | 2

Telegram CEO calls out rival Signal, claiming it has ties to US government

Drama between two of the leading secure messaging services

Applications14 May 2024 | 25

AI red-teaming tools helped X-Force break into a major tech manufacturer 'in 8 hours'

RSAC Hint: It's the 'the largest' maker of a key computer component

Spotlight on RSA13 May 2024 | 7

Ransomware negotiator weighs in on the extortion payment debate with El Reg

Interview As gang tactics get nastier while attacks hit all-time highs

Cyber-crime12 May 2024 | 43

Critical infrastructure security will stay poor until everyone pulls together

Interview Claroty CEO Yaniv Vardi tells us what's needed to defend vital networks

Public Sector11 May 2024 | 12

Ex-White House election threat hunter weighs in on what to expect in November

Interview Spoiler alert: We're gonna talk about AI

Public Sector09 May 2024 | 36

Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight

Interview On the plus side, infosec's a good bet for a long, stable career

Malware Month08 May 2024 | 24

From infosec to skunks, RSA Conference SVP spills the tea

Interview Keynotes, physical security, playlists … the buck stops with Linda Gray Martin

Spotlight on RSA08 May 2024 |

UnitedHealth's 'egregious negligence' led to Change Healthcare ransomware infection

Interview 'I'm blown away by the fact that they weren't using MFA'

Spotlight on RSA08 May 2024 | 25

CISA says 'no more' to decades-old directory traversal bugs

Recent attacks on healthcare thrust infosec agency into alert mode

CSO06 May 2024 | 13

It may take decade to shore up software supply chain security, says infosec CEO

interview Sure, we're waking to the risk, but we gotta get outta bed, warns Endor Labs founder Varun Badhwar

CSO03 May 2024 | 27

Qantas app glitch sees boarding passes fly to other accounts

Issue now resolved and isn't thought to be the work of criminals

CSO01 May 2024 | 8

UnitedHealth CEO: 'Decision to pay ransom was mine'

Updated Congress to hear how Citrix MFA snafu led to massive data theft, $870M+ loss

Malware Month30 Apr 2024 | 28

London Drugs closes all of its pharmacies following 'cybersecurity incident'

Updated Canadian stores shuttered 'until further notice'

CSO29 Apr 2024 | 20

UK lays down fresh legislation banning crummy default device passwords

New laws mean vendors need to make clear how long you'll get updates too

CSO29 Apr 2024 | 77

Kaiser Permanente handed over 13.4M people's data to Microsoft, Google, others

Ouch!

CSO26 Apr 2024 | 8

Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets

The firm 'fessed up to staff misconduct and avoided criminal liability

CSO24 Apr 2024 | 10

Ransomware feared as IT 'issues' force Octapharma Plasma to close 150+ centers

Updated Source blames BlackSuit infection – as separately ISP Frontier confirms cyberattack

Cyber-crime18 Apr 2024 | 9

Kremlin's Sandworm blamed for cyberattacks on US, European water utilities

Water tank overflowed during one system malfunction, says Mandiant

Research17 Apr 2024 | 10

MGM says FTC can't possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time

What a twist!

Cyber-crime16 Apr 2024 | 19

X fixes URL blunder that could enable convincing social media phishing campaigns

Poorly implemented rule allowed miscreants to deceive users with trusted URLs

CSO10 Apr 2024 | 27

Nearly 1M medical records feared stolen from City of Hope cancer centers

Is there no cure for this cyber-plague?

Cyber-crime03 Apr 2024 | 7

Malicious xz backdoor reveals fragility of open source

Analysis This time, we got lucky. It mostly affected bleeding-edge distros. But that's not a defense strategy

Devops01 Apr 2024 | 98

Malicious SSH backdoor sneaks into xz, Linux world's data compression library

STOP USAGE OF FEDORA RAWHIDE, says Red Hat while Debian Unstable and others also affected

CSO29 Mar 2024 | 123

These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb

One might say this is a wurst case scenario

Patches28 Mar 2024 | 44

'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw

Anyscale claims issue is 'long-standing design decision' – as users are raided by intruders

CSO27 Mar 2024 | 14

Row breaks out over true severity of two DNSSEC flaws

Updated Some of us would be happy being rated 7.5 out of 10, just sayin'

CSO26 Mar 2024 | 11

Don't be like these 900+ websites and expose millions of passwords via Firebase

Warning: Poorly configured Google Cloud databases spill billing info, plaintext credentials

CSO18 Mar 2024 | 11

Meta sues ex infra VP for allegedly stealing top-secret datacenter blueprints

Exec accused of using own work PC to swipe confidential AI and staffing docs for stealth cloud startup

PaaS + IaaS12 Mar 2024 | 4

Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

Plus: CISA pulls plug on couple of systems feared compromised

Cyber-crime08 Mar 2024 | 2

Securing open source software: Whose job is it, anyway?

CISA announces more help, and calls on app makers to step up

CSO08 Mar 2024 | 21

Chinese chap charged with stealing Google’s AI datacenter secrets

Moonlighted for PRC companies after side-stepping Big G's security, allegedly

On-Prem07 Mar 2024 | 13

FBI: Critical infrastructure suffers spike in ransomware attacks

Jump in overall cybercrime reports, $60M-plus reportedly lost to extortionists alone, Feds reckon

CSO06 Mar 2024 | 4

IP address X-posure now a feature on Musk's social media thing

Just a little FYI

Personal Tech05 Mar 2024 | 33

Sandvine put on America's export no-fly list after Egypt used network tech for spying

Canadian network box maker floats in denial

CSO27 Feb 2024 | 11

Security is hard because it has to be right all the time? Yeah, like everything else

Systems Approach It takes only one bottleneck or single point of failure to ruin your week

CSO25 Feb 2024 | 28

Google open sources file-identifying Magika AI for malware hunters and others

Cool, but it's 2024 – needs more hype, hand wringing, and flashy staged demos to be proper ML

CSO17 Feb 2024 | 10

Quest Diagnostics pays $5M after mixing patient medical data with hazardous waste

Will cough up less than two days of annual profit in settlement – and California calls this a win

CSO16 Feb 2024 | 12

Topics

Special Features

Vendor Voice

Resources

CSO

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

Ransomware crew may have exploited Windows make-me-admin bug as a zero-day

White House report dishes deets on all 11 major government breaches from 2023

Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

FCC takes some action against notorious BGP

Microsoft Research chief scientist has no issue with Windows Recall

Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn't need a fix, just better documentation

Command senior chief busted for secretly setting up Wi-Fi on US Navy combat ship

Pentagon 'doubling down' on Microsoft despite 'massive hack,' senators complain

Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

NIST turns to IT consultants to clear National Vulnerability Database backlog

US senator claims UnitedHealth's CEO, board appointed 'unqualified' CISO

OpenAI is very smug after thwarting five ineffective AI covert influence ops

IBM spin-off Kyndryl accused of discriminating on basis of age, race, disability

2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist

How's Uncle Sam getting on with Biden's AI exec order? Pretty good, we're told

Three-year-old Apache Flink flaw under active attack

70% of CISOs worry their org is at risk of a material cyber attack

Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam

Confused by the SEC's IT security breach reporting rules? Read this

Telegram CEO calls out rival Signal, claiming it has ties to US government

AI red-teaming tools helped X-Force break into a major tech manufacturer 'in 8 hours'

Ransomware negotiator weighs in on the extortion payment debate with El Reg

Critical infrastructure security will stay poor until everyone pulls together

Ex-White House election threat hunter weighs in on what to expect in November

Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight

From infosec to skunks, RSA Conference SVP spills the tea

UnitedHealth's 'egregious negligence' led to Change Healthcare ransomware infection

CISA says 'no more' to decades-old directory traversal bugs

It may take decade to shore up software supply chain security, says infosec CEO

Qantas app glitch sees boarding passes fly to other accounts

UnitedHealth CEO: 'Decision to pay ransom was mine'

London Drugs closes all of its pharmacies following 'cybersecurity incident'

UK lays down fresh legislation banning crummy default device passwords

Kaiser Permanente handed over 13.4M people's data to Microsoft, Google, others

Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets

Ransomware feared as IT 'issues' force Octapharma Plasma to close 150+ centers

Kremlin's Sandworm blamed for cyberattacks on US, European water utilities

MGM says FTC can't possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time

X fixes URL blunder that could enable convincing social media phishing campaigns

Nearly 1M medical records feared stolen from City of Hope cancer centers

Malicious xz backdoor reveals fragility of open source

Malicious SSH backdoor sneaks into xz, Linux world's data compression library

These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb

'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw

Row breaks out over true severity of two DNSSEC flaws

Don't be like these 900+ websites and expose millions of passwords via Firebase

Meta sues ex infra VP for allegedly stealing top-secret datacenter blueprints

Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

Securing open source software: Whose job is it, anyway?

Chinese chap charged with stealing Google’s AI datacenter secrets

FBI: Critical infrastructure suffers spike in ransomware attacks

IP address X-posure now a feature on Musk's social media thing

Sandvine put on America's export no-fly list after Egypt used network tech for spying

Security is hard because it has to be right all the time? Yeah, like everything else

Google open sources file-identifying Magika AI for malware hunters and others

Quest Diagnostics pays $5M after mixing patient medical data with hazardous waste

About Us

Our Websites

Your Privacy