News
Transport biz Toll Group suffers second ransomware infection in just three months
Transport company Toll Group has been slugged by ransomware for the second time in three months.…
India acknowledges, but brushes aside, features-not-bugs in Aarogya Setyu virus contact-tracing app
The Indian government has acknowledged “potential security issues” in the Aarogya Setyu contact-tracing app which its opposition labels as a ‘surveillance system with no oversight,’ but says the code issues are not that big a deal.…
Surprise surprise! Hostile states are hacking coronavirus vaccine research, warn UK and USA intelligence
Foreign state hackers are trying to brute-force their way into pharmaceutical and medical research agencies hunting for a COVID-19 vaccine, British and American infosec agencies are warning.…
GoDaddy hack: Miscreant goes AWOL with 28,000 users' SSH login creds after vandalizing server-side file
Hosting biz GoDaddy has admitted a hacker tampered with an SSH file on its servers, leading to the theft of 28,000 users' SSH credentials.…
We beg, implore and beseech thee. Stop reusing the same damn password everywhere
Two-thirds of people recycle the same password or use variations on the same basic one, according to LogMeIn.…
It has been 20 years since cybercrims woke up to social engineering with an intriguing little email titled 'ILOVEYOU'
Twenty years have passed since cybercrooks demonstrated the role exploiting human psychology could play in spreading malware. Remember "ILOVEYOU"?…
More Salt in their wounds: DigiCert hit as hackers wriggle through (patched) holes in buggy config tool
DigiCert, slinger of SSL/TLS certificates, has warned that it too has suffered at the hands of Salty miscreants as a key used for Signed Certificate Timestamps (SCT) was potentially compromised.…
UK finds itself almost alone with centralized virus contact-tracing app that probably won't work well, asks for your location, may be illegal
Comment Britain is sleepwalking into another coronavirus disaster by failing to listen to global consensus and expert analysis with the release of the NHS COVID-19 contact-tracking app.…
Apple-Google COVID-19 virus contact-tracing API to bar location-tracking access
Apple and Google will ban location-tracking by apps using their new coronavirus contract-tracing API, newly renamed ExposureNotification.…
OK, so you've air-gapped that PC. Cut the speakers. Covered the LEDs. Disconnected the monitor. Now, about the data-leaking power supply unit...
Video Israeli cyber-security side-channel expert Mordechai Guri has devised a way to pilfer data from devices that have been air-gapped and silenced.…
Sweet TCAS! We can make airliners go up-diddly-up whenever we want, say infosec researchers
Not only can malicious people make airliners climb and dive without pilot input – they can also control where and when they do so, research from Pen Test Partners (PTP) has found.…
UK COVID-19 contact tracing app data may be kept for 'research' after crisis ends, MPs told
Britons will not be able to ask NHS admins to delete their COVID-19 tracking data from government servers, digital arm NHSX's chief exec Matthew Gould admitted to MPs this afternoon.…
AsSalt-ed at the weekend: Miscreants roast Ghost and LineageOS totters as Salt bug bites
If your kit is affected, don't wait: unpatched vulnerabilities in Salt claimed two high profile victims over the weekend in the form of popular Google-free Android-based LineageOS and online publisher Ghost.…
Xiaomi emits phone browser updates after almighty row over web activity it harvested even in incognito mode
Roundup Congratulations, everyone. We made it through April. Here's a handy mop-up of bits and bytes of security news beyond what we covered in The Reg.…
India makes contact-tracing app compulsory in viral hot zones despite most local phones not being smart
India has made use of a COVID-19 contact-tracing app compulsory in some parts of the nation.…
Singapore to require smartphone check-ins at all businesses and will log visitors' national identity numbers
Singapore will from May 12th require all businesses to adopt a system that logs visitors to their premises using their smartphones, in the name of tracking COVID-19 cases.…
Spyware slinger NSO to Facebook: Pretty funny you're suing us in California when we have no US presence and use no American IT services...
Israeli spyware maker NSO Group has rubbished Facebook's claim it can be sued in California because it allegedly uses American IT services and has a business presence in the US.…
Android trojan EventBot abuses accessibility services to clear out bank accounts – fortunately, it's 'in preview'
Researchers have analysed a new strain of Android malware that does not yet exist in the wild.…
What's worse than an annoying internet filter? How about one with a pre-auth remote-command execution hole and there's no patch?
Netsweeper's internet filter has a nasty security vulnerability that can be exploited to hijack the host server and tamper with lists of blocked websites. There are no known fixes right now.…
Quibi, JetBlue, Wish, others accused of leaking millions of email addresses to ad orgs via HTTP referer headers
Short-video biz Quibi, airline JetBlue, shopping site Wish, and several other companies leaked million of people's email addresses to ad-tracking and analytics firms through HTTP request headers, it is claimed.…
Pages
