News

White House floats round two of regulations

It sounds like the start of a bad joke: Digital trespassers from China, Russia, and Iran break into US water systems.…

Not so much when trying to convert coding veterans

Google recently rewrote the firmware for protected virtual machines in its Android Virtualization Framework using the Rust programming language and wants you to do the same, assuming you deal with firmware.…

The 'security issue' was caused by a 9.8-rated Magento flaw Adobe patched back in June

Bad news for anyone who purchased a Cisco hoodie earlier this month: Suspected Russia-based attackers injected data-stealing JavaScript into the networking giant's online store selling Cisco-branded merch.…

When maintenance windows are hard to open, a little lubrication helps

On Call  The Register understands consuming alcohol is quite a popular way to wind down from the working week, but each Friday we get the party started early with a new and sober instalment of On Call, the reader contributed column in which you share stories about the emotional hangovers you've earned delivering tech support.…

Supply chains, 13M jobs and $649B a year at risk, so Uncle Sam is fighting back - with a request for info

The US Department of Homeland Security is seeking help to assess the security of tech at maritime ports, to safeguard the 13 million jobs and $649 billion of economic activity generated by the nation’s docks.…

Now do your patriotic duty and fill one of those 500k open roles, please?

The White House has unveiled a new strategy to fill some of the hundreds of thousands of critical cybersecurity vacancies across the US: Pitch cyber as a national service.…

Feds post $10 million bounty for each of the six's whereabouts

The US today charged five Russian military intelligence officers and one civilian for their involvement with the data-wiping WhisperGate campaign conducted against Ukraine in January 2022 before the ground invasion began.…

Two critical holes including hardcoded admin credential

If you're running Cisco's supposedly Smart Licensing Utility, there are two flaws you ought to patch right now.…

Are you prepared for the day that quantum computing breaks today’s encryption?

Sponsored Feature  The internet is all about transparency and openness - connecting people and information, shoppers and vendors, or businesses. But it's also all about security and trust.…

Good news? Security is still getting a growing part of IT budget

It looks like security budgets are coming up against belt-tightening policies, with chief security officers reporting budgets rising more slowly than ever and over a third saying their spending this year will be flat or even reduced.…

Network admins take a ride on the Fright Bus

The Transport for London (TfL) "cyber incident" is heading into its third day amid claims that a popular appliance might have been the gateway for criminals to gain access to the organization's network.…

Allowed access to 150k cameras, some in sensitive spots, but has been done for spamming

Physical security biz Verkada has agreed to cough up $2.95 million following an investigation by the US Federal Trade Commission (FTC) – but the payment won’t make good its past security failings, including a blunder that led to CCTV footage of Tesla, Cloudflare, and others being snooped on. Instead, the fine is about spam.…

Russia has seemingly decided who it wants Putin the Oval Office

The Biden administration on Wednesday seized 32 websites and charged two employees of a state-owned media outlet connected to a $10 million scheme to distribute pro-Kremlin propaganda, and claimed the actions were necessary to counter Russia’s attempts to influence the upcoming US presidential election.…

Feds warn of 'highly tailored, difficult-to-detect social engineering campaigns'

The FBI has warned that North Korean operatives are plotting "complex and elaborate" social engineering attacks against employees of decentralized finance (DeFi) organizations, as part of ongoing efforts to steal cryptocurrency.…

Big Blue also shift to Prisma SASE to secure its 250,000 workforce

Palo Alto Networks has completed its purchase of IBM's QRadar SaaS service, spending $500 million to buy up customer share for PAN's next-gen AI security Cortex platform.…

Loads of governance issues to worry about, and the chance it might spout utter garbage

Microsoft has published a Transparency Note for Copilot for Microsoft 365, warning enterprises to ensure user access rights are correctly managed before rolling out the technology.…

93GB of info feared pilfered in Montana by heartless crooks

Planned Parenthood of Montana's chief exec says the org is responding to a cyber-attack on its systems, and has drafted in federal law enforcement and infosec professionals to help investigate and rebuild its IT environment.…

Researchers find many similarities, and nasty new customizations such as embedded compromised user credentials

The Cicada3301 ransomware, which has claimed at least 20 victims since it was spotted in June, shares "striking similarities" with the notorious BlackCat ransomware, according to security researchers at Israeli outfit endpoint security outfit Morphisec.…

Unclear if this is a sign controversial service is cleaning up its act everywhere

Controversial social network Telegram has co-operated with South Korean authorities and taken down 25 videos depicting sex crimes.…

Bagging two posh properties, three luxury cars on a govt salary a bit of a giveaway – allegedly

The US Department of Justice has accused a now-former senior official of the New York State government of illegally advancing the interests of the Chinese government and communist party.…