News
Time to limber up in the battle against cybercriminals
Sponsored Ask anyone in IT what it is that keeps them awake at night and most will probably reply “security”. Drill down into what specifically worries them and you’ll probably discover that it’s not the technology part but, rather, how to get the workforce to take security more seriously.…
Alleged Vault 7 leaker trial finale: Want to know the CIA's password for its top-secret hacking tools? 123ABCdef
Analysis The fate of the man accused of leaking top-secret CIA hacking tools – software that gave the American spy agency access to targets' phones and computer across the world – is now in the hands of a jury. And, friend, do they have their work cut out for them.…
Download this update from mybrowser.microsoft.com. Oh, sorry, that was malware on a hijacked sub-domain. Oops
If you saw a link to mybrowser.microsoft.com, would you have trusted it? Downloaded and installed an Edge update from it? How about identityhelp.microsoft.com to change your password?…
If Tesco was breached, your data could be being flogged for just £2.70 – research
Data stolen from Tesco clubcards could be resold for just £2.70 a pop, reckons a price comparison website that appears to have strayed into the dark web.…
It has been 15 years, and we're still reporting homograph attacks – web domains that stealthily use non-Latin characters to appear legit
What's old is new again as infosec bods are sounding the alarm over a fresh wave of homoglyph characters being used to lure victims to malicious fake websites.…
UK data watchdog slaps a £500,000 fine on Cathay Pacific for 2018 9.4m customer data leak
The Information Commissioner's Office has fined Cathay Pacific Airways £500,000 for leaky security that exposed the personal data of 9.4 million passengers - 111,578 of whom were from the UK.…
Fancy that: Hacking airliner systems doesn't make them magically fall out of the sky
Airline pilots faced with hacked or spoofed safety systems tend to ignore them – but could cost their airlines big sums of money, an infosec study has found.…
Let's Encrypt? Let's revoke 3 million HTTPS certificates on Wednesday, more like: Check code loop blunder strikes
On Wednesday, March 4, Let's Encrypt – the free, automated digital certificate authority supported by the Internet Security Research Group (ISRG) – will briefly become Let's Revoke, to undo the issuance of more than three million flawed HTTPS certs.…
GCHQ's infosec arm has 3 simple tips to secure those insecure smart home gadgets
Britain's National Cyber Security Centre (NCSC) wants owners of baby monitors and smart CCTV cameras to take some basic security precautions.…
Have I Been S0ld? No, trusted security website HIBP off the table, will remain independent
The popular security website Have I Been Pwned (HIBP) will remain independent – despite owner Troy Hunt's decision last year to put the business up for sale.…
Maersk prepares to lay off the Maidenhead staffers who rescued it from NotPetya super-pwnage
Exclusive Maersk is preparing to make 150 job cuts at its UK command-and-control centre (CCC) in Maidenhead – the one that rebuilt the global shipping company's IT infrastructure after the infamous 2017 NotPetya ransomware attack.…
Wi-Fi kit spilling data with bad crypto – Huawei, eh? No, it's Cisco. US giant patches Krook spy-hole bug in network gear
Roundup Here's El Reg's fresh slice of all the infosec news – beyond what we've already covered – that you'll need to know as you start your week. Ready? Here we go.…
Delicious irony: Credit rating builder Loqbox lets customer details and card numbers slip after 'sophisticated attack'
Fintech startup Loqbox has fessed up to suffering an "attack" which potentially revealed its customers' names, postal addresses, dates of birth, email addresses and phone numbers.…
Southern Water not such a phisherman's phriend, hauls itself offline to tackle email lure
British utility biz Southern Water was the victim of a phishing attack on Wednesday, resulting in a hurried shutdown of some of the company's systems.…
Your phone wakes up. Its assistant starts reading out your text messages. To everyone around. You panic. How? Ultrasonic waves
Video Voice commands encoded in ultrasonic waves can, best case scenario, silently activate a phone's digital assistant, and order it to do stuff like read out text messages and make phone calls, we're told.…
Cyber-wrath of Iran for top general's assassination hasn't progressed beyond snooping and nicking logins... yet
The Iranian cybercrime group that was expected to spearhead the rogue Middle East nation's revenge for the US assassination of General Qasem Soleimani has quite the arsenal at its digital fingertips.…
Sophos was gearing up for a private life – then someone remembered the bike scheme
Today was meant to be Brit security biz Sophos's last day on the London Stock Exchange following its £3bn purchase by a US venture capital company.…
If you're serious about browser privacy, you should probably pass on Edge or Yandex, claims Dublin professor
Microsoft Edge and Yandex are "much more worrisome" compared to Brave, Chrome, Firefox and Safari, according to a paper on browser privacy (PDF) published this week.…
Wi-Fi of more than a billion PCs, phones, gadgets can be snooped on. But you're using HTTPS, SSH, VPNs... right?
A billion-plus computers, phones, and other devices are said to suffer a chip-level security vulnerability that can be exploited by nearby miscreants to snoop on victims' encrypted Wi-Fi traffic.…
After blowing $100m to snoop on Americans' phone call logs for four years, what did the NSA get? Just one lead
The controversial surveillance program that gave the NSA access to the phone call records of millions of Americans has cost US taxpayers $100m – and resulted in just one useful lead over four years.…
Pages
