News
Hacker House shoved under UK Parliament's spotlight following Boris Johnson funding allegs
Infosec training biz Hacker House has been catapulted to Parliamentary prominence after reports that co-founder Jennifer Arcuri secured government funding because of her personal relationship with now-Prime Minister Boris Johnson.…
Hot patches for ColdFusion: Adobe drops trio of fixes for three serious flaws
Adobe has released an update to clean up a trio of vulnerabilities in ColdFusion, its long-running web application platform.…
Google takes sole stand on privacy, rejects new rules for fear of 'authoritarian' review
Google has blocked a proposed revision of the charter of the Privacy Interest Group (PING), a part of the W3C web standards body, over concerns that establishing an unchecked "authoritarian review group" will create "significant unnecessary chaos in the development of the web platform."…
We finally got one! Russian 'fesses up to cracking bank servers, netting big bucks
On Monday, Andrei Tyurin, a 35-year-old Russian national, pleaded guilty in New York to charges of computer intrusion, bank and wire fraud, and online gambling in connection with a sustained hacking campaign targeting US financial institutions.…
This vBulletin vBug is vBad: Zero-day exploit lets miscreants hijack vulnerable web forums
An anonymous bug hunter has publicly disclosed a zero-day flaw in the version 5 of the popular vBulletin forum software than can be exploited over the internet to hijack servers. No patch is known to be available.…
DoH! Mozilla assures UK minister that DNS-over-HTTPS won't be default in Firefox for Britons
Firebox builder Mozilla has confirmed to UK Culture Secretary Nicky Morgan that Britons won't be getting DNS-over-HTTPS (DoH) by default once the feature is included in the next run of browser updates.…
Can you code a way to foil online terrorist vids? The Home Office might just have £600K for you
UK prime minister (at time of writing) Boris Johnson announced to the UN Security Council today a plan to block the sharing of violent videos on social media after terrorist attacks.…
Why do cloud leaks keep happening? Because no one has a clue how their instances are configured
The ongoing rash of data leaks caused by misconfigured clouds is the result of companies having virtually no visibility into how their cloud instances are configured, and very little ability to audit and manage them.…
Nine words to ruin your Monday: Emergency Internet Explorer patch amid in-the-wild attacks
Microsoft today issued a rare emergency security update for Internet Explorer to address a critical flaw in the browser that's being exploited right now in the wild.…
Several months after the fact, CafePress finally acknowledges huge data theft to its customers
T-shirt flogger CafePress has finally informed its customers about a serious data loss dating back to February and first reported last month.…
HMRC's HTTPS howler: Childcare payments site cert expired at 1am on Sunday, down for hours
Furious parents have lashed out at Her Majesty's Revenue and Customs after the UK tax authority let a key HTTPS certificate expire on its childcare tax credit portal.…
Pizza prankster's prisoner plea plot perturbs police, Norks invading and Uber woes
Security roundup Here are a handful of security happenings in the past week that are worth noting - aside from what The Reg has already covered.…
Disgraced ex-Kaspersky guy made me do it, says bloke in Russian court on hacking charges
An accused Russian hacker has claimed Kaspersky's former head of investigations blackmailed him into stealing approximately £150,000 from local banks.…
Bulgarian phishing gang member who lived with his parents jailed for part in £40m fraud ring
A Bulgarian phishing criminal who created fake versions of legitimate companies' websites as part of a £40m fraud has been jailed.…
Supply chain actors agree that everyone's a security risk – except themselves, of course
Security surveys tend to confirm what we already knew a few months ago and the 2019 Global Cyber Risk Perception Survey (PDF) from Marsh and Microsoft does not disappoint.…
Nice work if you can grift it: Two blokes accused of swindling $10m from the elderly with bogus virus infection alerts
Two Americans used bogus virus-infection alerts to bilk $10m out of PC owners, it is alleged.…
If you're using Harbor as your container registry, bear in mind it can be hijacked with has_admin_role = True
Video IT departments using the Harbor container registry will want to update the software ASAP, following Thursday's disclosure of a bug that can be exploited by users to gain administrator privileges.…
FedEx execs: We had no idea cyberattack would be so bad. Investors: Is that why you sold $40m+ of your own shares?
FedEx execs not only hid the impact of the NotPetya ransomware on their business but personally profited by selling off tens of millions of dollars of their own shares before the truth came out, a lawsuit filed by the delivery business’ own shareholders claims.…
Chinese students in UK ripe target for scammers exploiting visa concerns
Scammers are exploiting Chinese students' Brexit fears by targeting them with phishing emails claiming their visas could be revoked, threat intel researchers say.…
Belgian F-16 pilot rescued from power line after emergency ejection
A Belgian F-16 fighter jet pilot has been rescued from a power line after getting into difficulties and ejecting from his stricken aircraft.…
Pages
