News
Twilio's private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms
Cloud comms platform Twilio has confirmed its private GitHub repositories were cloned after it became the latest casualty of the compromised credential-stealing Codecov script.…
What not to expect when you're expecting: Fertility apps may be selling intimate health secrets
Hundreds of millions of women turn to fertility apps to conceive or prevent pregnancy, and according to a new study those apps may leak very personal information including miscarriages, abortions, sexual history, potential infertility and pregnancy.…
'Millions' of Dell PCs will grant malware, rogue users admin-level access if asked nicely
Dell desktops, laptops, and tablets built since 2009 and running Windows can be exploited to grant rogue users and malware system-administrator-level access to the computers. We're told this amounts of hundreds of millions of machines that can be completely hijacked.…
Red Hat open-sources StackRox Kubernetes security product
Kubecon Europe As Kubecon Europe gets under way, Red Hat has pushed out StackRox, the Kubernetes security product it acquired earlier this year, as an open-source project which will be the upstream for its Advanced Cluster Security for OpenShift.…
Apple patches iOS, macOS, iPadOS, watchOS, kitchen-sinkOS bugs said to be exploited in the wild
In Brief Apple on Monday patched security flaws in its software said to have been exploited in the wild by miscreants to hijack gear.…
Bill to protect UK against harmful foreign investment becomes law
In a move akin to calling the fire brigade after your house has burned down, the UK government today announced the passage of a bill that would afford it powers to intervene in potentially hostile direct investment.…
Happy Friday? Darktrace gets 40 per cent boost on London IPO debut
British AI-powered security startup Darktrace has enjoyed a bumper IPO Friday as its shares climbed 40 per cent on its London Stock Exchange debut.…
Australia proposes teaching cyber-security to five-year-old kids
Australia has decided that six-year-old children need education on cyber-security, even as it removes other material from the national curriculum.…
Stealthy Linux backdoor malware spotted after three years of minding your business
Chinese security outfit Qihoo 360 Netlab on Wednesday said it has identified Linux backdoor malware that has remained undetected for a number of years.…
BadAlloc: Microsoft looked at memory allocation code in tons of devices and found this one common security flaw
Microsoft has taken a look at memory management code used in a wide range of equipment, from industrial control systems to healthcare gear, and found it can be potentially exploited to hijack devices.…
Vivaldi update unleashes the 'Cookie Crumbler' to simply block any services asking for consent (sites may break)
The latest release of Chromium-based browser Vivaldi has extended ad blocking to handle cookie warning dialogs and sent a shot across the bows of Google's ad technology, FLoC.…
Billions in data protection lawsuits rides on Google's last-ditch UK Supreme Court defence for Safari Workaround sueball
Google has urged the UK's Supreme Court to throw out a £3bn lawsuit brought by an ex-Which director over secretly planted tracking cookies on devices running Safari, on the grounds that local law doesn’t allow for opt-out class action lawsuits.…
48 ways you can avoid file-scrambling, data-stealing miscreants – or so says the Ransomware Task Force
The Institute for Security and Technology's Ransomware Task Force (RTF) on Thursday published an 81-page report presenting policy makers with 48 recommendations to disrupt the ransomware business and mitigate the effect of such attacks.…
When you’re building a cybersecurity pro, you need to get the foundations right
Promo Cyber attackers are a diverse lot. They can strike from anywhere in the world, and may be motivated by greed, politics, status, or pure malevolence. And their techniques range from the dazzlingly sophisticated to the frankly crude, technically speaking.…
Digital Ocean springs a leak: Miscreant exploits hole to peep on unlucky customers' billing details for two weeks
Digital Ocean on Wednesday said someone was able to snoop on some of its cloud subscribers' billing information via a now-patched vulnerability.…
Ransomware crooks who broke into Merseyrail used director's email address to brag about it – report
Brit railway company Merseyrail is understood to have suffered a ransomware attack – and the crooks responsible reportedly pwned a director's Office 365 account to email employees and journalists about it.…
Brit MPs and campaigners come together to oppose COVID status certificates as 'divisive and discriminatory'
With Minister for the Cabinet Office Michael Gove expected to announce app-based "COVID status certificates", the UK's post-lockdown plan looks set to come under fierce attack.…
Here's what Russia's SVR spy agency does when it breaks into your network, says US CISA infosec agency
Following attribution of the SolarWinds supply chain attack to Russia's APT29, the US CISA infosec agency has published a list of the spies' known tactics – including a penchant for using a naughtily named email provider.…
Washington DC police force confirms data breach after ransomware upstart Babuk posts trophies to Tor blog
Ransomware criminals have posted trophy pictures on their Tor blog after attacking the police force for US capital Washington DC.…
Patched Exchange to head off Hafnium? You might only be halfway to safety
Promo If you’re running Microsoft Exchange anywhere in your organisation and you’re not extremely concerned about the threat from Hafnium, you haven’t been paying attention this year.…
Pages
