How Androxgh0st rose from Mozi's ashes to become 'most prevalent malware'
Botnet's operators 'driven by similar interests as that of the Chinese state'
Cyber-crime24 Dec 2024 | 1
Jessica is The Register's cybersecurity editor, leading our coverage of topics ranging from government IT to best practices for defenders. She also hosts video interviews with CxO-level veterans and other subject-matter experts on the challenges facing the IT industry. Jessica has more than 20 years of experience in publishing, with roles ranging from news editor to managing editor.
Suspected LockBit dev, facing US extradition, 'did it for the money'
Dual Russian-Israeli national arrested in August
Cyber-crime23 Dec 2024 | 17
Don't fall for a mail asking for rapid Docusign action – it may be an Azure account hijack phish
Recent campaign targeted 20,000 folk across UK and Europe with this tactic, Unit 42 warns
Cyber-crime19 Dec 2024 | 17
US reportedly mulls TP-Link router ban over national security risk
updated It could end up like Huawei -Trump's gonna get ya, get ya, get ya
Security18 Dec 2024 | 55
Phishers cast wide net with spoofed Google Calendar invites
Not that you needed another reason to enable the 'known senders' setting
Cyber-crime18 Dec 2024 | 17
Critical security hole in Apache Struts under exploit
You applied the patch that could stop possible RCE attacks last week, right?
Patches17 Dec 2024 | 4
Ransomware scum blow holes in Cleo software patches, Cl0p (sort of) claims responsibility
But can you really take crims at their word?
Security16 Dec 2024 | 1
Iran-linked crew used custom 'cyberweapon' in US critical infrastructure attacks
IOCONTROL targets IoT and OT devices from a ton of makers, apparently
Research13 Dec 2024 | 15
Aliens, spy balloons, or drones? SUV-sized mystery objects spotted in US skies
No word from the FBI about where they are hiding aliens or UFOs
Offbeat12 Dec 2024 | 75
Blocking Chinese spies from intercepting calls? There ought to be a law
Sen. Wyden blasts FCC's 'failure' amid Salt Typhoon hacks
Security11 Dec 2024 | 17
China's Salt Typhoon recorded top American officials' calls, says White House
No word yet on who was snooped on. Any bets?
CSO09 Dec 2024 | 24
Crooks stole AWS credentials from misconfigured sites then kept them in open S3 bucket
Exclusive ShinyHunters-linked heist thought to have been ongoing since March
Research09 Dec 2024 | 9
Microsoft dangles $10K for hackers to hijack LLM email service
Outsmart an AI, win a little Christmas cash
CSO09 Dec 2024 | 12
How Chinese insiders are stealing data scooped up by President Xi's national surveillance system
Feature 'It's a double-edged sword,' security researchers tell The Reg
Public Sector08 Dec 2024 | 52
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files
updated Still unpatched 100+ days later, watchTowr says
Cyber-crime06 Dec 2024 | 4
Microsoft: Another Chinese cyberspy crew targeting US critical orgs 'as of yesterday'
Redmond threat intel maven talks explains this persistent pain to The Reg
Security06 Dec 2024 | 16
T-Mobile US CSO: Spies jumped from one telco to another in a way 'I've not seen in my career'
Interview Security chief talks to El Reg as Feds urge everyone to use encrypted chat
CSO05 Dec 2024 | 54
Major energy contractor reports 'limited' access to IT after ransomware locks files
ENGlobal customers include the Pentagon as well as major oil and gas producers
Security03 Dec 2024 | 11
Data on 760K workers from Xerox, Nokia, BofA, Morgan Stanley and more dumped online
Yet another result of the MOVEit mess
Cyber-crime03 Dec 2024 | 3
AWS unveils cloud security IR service for a mere $7K a month
Re:Invent Tap into the infinite scalability... of pricing
Security03 Dec 2024 | 5
The only thing worse than being fired is scammers fooling you into thinking you're fired
Scumbags play on victims' worst fears in phishing campaign referencing UK Employment Tribunal
Cyber-crime28 Nov 2024 | 50
Salt Typhoon's surge extends far beyond US telcos
Plus, a brand-new backdoor, GhostSpider, is linked to the cyber spy crew's operations
Security27 Nov 2024 | 7
T-Mobile US takes a victory lap after stopping cyberattacks: 'Other providers may be seeing different outcomes'
Funny what putting more effort and resources into IT security can do
CSO27 Nov 2024 | 9
Data broker leaves 600K+ sensitive files exposed online
Exclusive Researcher spotted open database before criminals … we hope
Research27 Nov 2024 | 22
US senators propose law to require bare minimum security standards
In case anyone forgot about Change Healthcare
Security26 Nov 2024 | 15
Trump taps border hawk to head DHS. Will Noem's 'enthusiasm' extend to digital domain?
Analysis Meanwhile, CISA chief Jen Easterly will step down prior to inauguration
Public Sector23 Nov 2024 | 51
1,000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole
Updated PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more
CSO22 Nov 2024 | 22
Here's what happens if you don't layer network security – or remove unused web shells
TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated
Security22 Nov 2024 | 4
Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator
Meet Liminal Panda, which prowls telecom networks in South Asia and Africa
CSO20 Nov 2024 | 32
Healthcare org Equinox notifies 21K patients and staff of data theft
Ransomware scum LockBit claims it did the dirty deed
Cyber-crime20 Nov 2024 | 1
China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer
No word on when or if the issue will be fixed
Security19 Nov 2024 | 2
Ford 'actively investigating' after employee data allegedly parked on leak site
Updated Plus: Maxar Space Systems confirms employee info stolen in digital intrusion
Security18 Nov 2024 | 3
Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble
If you didn't fix this a month ago, your to-do list probably needs a reshuffle
Virtualization18 Nov 2024 | 4
T-Mobile US 'monitoring' China's 'industry-wide attack' amid fresh security breach fears
updated Un-carrier said to be among those hit by Salt Typhoon, including AT&T, Verizon
Networks18 Nov 2024 | 2
Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit
Yank access to management interface, stat
CSO15 Nov 2024 | 28
Microsoft Power Pages misconfigurations exposing sensitive data
NHS supplier that leaked employee info fell victim to fiddly access controls that can leave databases dangling online
Security15 Nov 2024 | 6
Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost
Plus a bonus hard-coded local API key
Patches14 Nov 2024 |
Reminder: China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign'
Updated Feds don't name Salt Typhoon, but describe Beijing band's alleged deeds
Research14 Nov 2024 | 5
ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue
Plus: CISA's ScubaGear dives deep to fix M365 misconfigs
CSO14 Nov 2024 | 3
Data broker amasses 100M+ records on people – then someone snatches, sells it
We call this lead degeneration
Cyber-crime13 Nov 2024 | 18
China's Volt Typhoon crew and its botnet surge back with a vengeance
Ohm, for flux sake
Public Sector13 Nov 2024 | 4
Here's what we know about the suspected Snowflake data extortionists
A Canadian and an American living in Turkey 'walk into' cloud storage environments…
Cyber-crime12 Nov 2024 | 5
Scattered Spider, BlackCat claw their way back from criminal underground
We all know by now that monsters never die, right?
Cyber-crime08 Nov 2024 | 1
Canada closes TikTok's offices but leaves using the app a matter of 'personal choice'
Govt order destroys 'hundreds of well-paying local jobs', eh
Personal Tech08 Nov 2024 | 29
Winos4.0 abuses gaming apps to infect, control Windows machines
'Multiple' malware samples likely targeting education orgs
Security08 Nov 2024 | 6
China's Volt Typhoon reportedly breached Singtel in 'test-run' for US telecom attacks
updated Alleged intrusion spotted in June
Security06 Nov 2024 | 5
Schneider Electric ransomware crew demands $125k paid in baguettes
Hellcat crew claimed to have gained access via the company's Atlassian Jira system
Cyber-crime05 Nov 2024 | 46
Ongoing typosquatting campaign impersonates hundreds of popular npm packages
Puppeteer or Pupeter? One of them will snoop around on your machine and steal your credentials
Research05 Nov 2024 | 11
Google claims Big Sleep 'first' AI to spot freshly committed security bug that fuzzing missed
You snooze, you lose, er, win
AI + ML05 Nov 2024 | 19
Hack Nintendo's alarm clock to show cat pics? Let's-a-go!
How 'Gary' defeated Bowser broke into the interactive alarm clock
Security01 Nov 2024 | 34
Gang gobbles 15K credentials from cloud and email providers' garbage Git configs
Emeraldwhale looked sharp – until it made a common S3 bucket mistake
Research31 Oct 2024 | 2
Windows Themes zero-day bug exposes users to NTLM credential theft
Plus a free micropatch until Redmond fixes the flaw
Security30 Oct 2024 | 6
Uncle Sam outs a Russian accused of developing Redline infostealing malware
Or: why using the same iCloud account for malware development and gaming is a bad idea
Cyber-crime29 Oct 2024 | 4
Cast a hex on ChatGPT to trick the AI into writing exploit code
'It was like watching a robot going rogue' says researcher
Cybersecurity Month29 Oct 2024 | 28
JPMorgan Chase sues scammers following viral 'infinite money glitch'
ATMs paid customers thousands ... and now the bank wants its money back
Security28 Oct 2024 | 47
Feds investigate China's Salt Typhoon amid campaign phone hacks
'They're taunting us,' investigator says and it looks like it's working
Security28 Oct 2024 | 7
Brazen crims selling stolen credit cards on Meta's Threads
Exclusive The platform 'continues to take action' against illegal posts, we're told
Cyber-crime28 Oct 2024 | 20
Putin's pro-Trump trolls accuse Harris of poaching rhinos
Plus: Iran's IRGC probes election-related websites in swing states
Security25 Oct 2024 | 85
AWS Cloud Development Kit flaw exposed accounts to full takeover
Remember Bucket Monopoly? Yeah, it gets worse
Cybersecurity Month24 Oct 2024 | 13
Emergency patch: Cisco fixes bug under exploit in brute-force attacks
Who doesn't love abusing buggy appliances, really?
Software24 Oct 2024 | 3
Biting the hand that feeds IT
