News
Stop us if you've heard this one: US government staff wildly oblivious to basic computer, info security safeguards
A US Senate probe has once again outlined the woeful state of computer and information security within Uncle Sam's civil service.…
McAfee sues ship-jumping sales staff over trade secret theft allegations
McAfee is suing former senior salespeople whom it alleges stole company trade secrets when they moved to a rival security vendor.…
Open-heart nerdery: Boffins suggest identifying and logging in people using ECGs
Biometric systems could use the unique patterns from a person's ECG reading for biometric sign-ons.…
Please stop regulating the dumb tubes, says Internet Society boss
Interview Andrew Sullivan, chief exec of the Internet Society, has condemned governments that "interfere in underlying technologies that people are allowed to build," as regulators increasingly target net infrastructure to enforce their visions of how the online world ought to be.…
What the cell...? Telcos around the world were so severely pwned, they didn't notice the hackers setting up VPN points
Hackers infiltrated the networks of at least ten cellular telcos around the world, and remained hidden for years, as part of a long-running tightly targeted surveillance operation, The Register has learned. This espionage campaign is still ongoing, it is claimed.…
Biz tells ransomware victims it can decrypt their files... by secretly paying off the crooks and banking a fat margin
A Scottish managed services provider is running a lucrative sideline in ransomware decryption – however, a sting operation by a security firm appears to show that “decryption” merely means paying off the malware's masterminds.…
Iran is doing to our networks what it did to our spy drone, claims Uncle Sam: Now they're bombing our hard drives
Hackers operating on behalf of the Iranian government have turned destructive, the US Department of Homeland Security has claimed.…
Cisco cleans up critical flaws, Florida city forks out $600k to ransomware scumbags, and more from infosec land
Roundup Here's a quick Monday summary of recent infosec news, beyond what we've already reported.…
Driving Xtreme Cuts: DXC Technology waves bye bye to 45% of Americas Security divison
DXC Technology is sending hundreds of security personnel from the America's division down the redundancy chute and offshoring some of those roles to low-cost centres, insiders are telling us.…
Good old British 'fair play' is the answer to vexed Huawei question, claims security minister
Solving the Huawei 5G security problem is a question of convincing the Chinese to embrace British "fair play", security minister Ben Wallace said yesterday without the slightest hint of irony.…
Millions of Windows Dell PCs need patching: Give-me-admin security gremlin found lurking in bundled support tool
Dell's troubleshooting software SupportAssist, bundled with the US tech titan's home and business computers, has a security flaw that can be exploited by malware and rogue logged-in users to gain administrator powers.…
Digi-dosh exchange Coinbase: Someone tried to pwn our staff via this week's Firefox zero-day security hole
The development and release of a critical Firefox security patch this week was, in part, triggered by an attempted cyber-heist of crypto-coin exchange Coinbase.…
Shut the barn door: UK data watchdog tells MPs mass slurping by firms is a huge risk to privacy
Regulators and campaign groups have warned a UK Parliamentary inquiry that the increasing collection, use and storage of data by corporations poses a serious risk to privacy and security.…
If Uncle Sam could quit using insecure .zip files to swap info across the 'net, that would be great, says Silicon Ron Wyden
Influential US Senator Ron Wyden (D-OR) is not happy about Uncle Sam's employees using insecure .zip files and other archive formats to electronically transfer information.…
Google takes the PIS out of advertising: New algo securely analyzes shared encrypted data sets without leaking contents
Google on Wednesday released source code for a project called Private Join and Compute that allows two parties to analyze and compare shared sets of data without revealing the contents of each set to the other party.…
Using Oracle WebLogic? Put down your coffee, drop out of Discord, grab this patch right now: Vuln under attack
Oracle has issued an emergency critical update to address a remote code execution vulnerability in its WebLogic Server component for Fusion Middleware – a flaw miscreants are exploiting in the wild to hijack systems.…
NASA's JPL may be able to reprogram a probe at the arse end of the solar system, but its security practices are a bit crap
NASA's Jet Propulsion Lab still has "multiple IT security control weaknesses" that expose "systems and data to exploitation by cyber criminals", despite cautions earlier this year.…
Spin the wheel and find today's leaky cloud DB... *clack clack... clack* A huge trove of medical malpractice complaints
In what has become a depressingly common occurrence, the personal information of hundreds of thousands of people may have fallen into the wrong hands because yet another organization did not secure a cloud-hosted database.…
Awoogah! Awoogah! Firefox fans urged to update and patch zero-day hole exploited in the wild by miscreants
Mozilla has released an emergency critical update for Firefox to squash a zero-day vulnerability that is under active attack.…
Delicious irony: Hacked medical debt collector AMCA files for bankruptcy protection from debt collectors
The healthcare debt collector ransacked by hackers, who gained access to millions of patients' personal information, has filed for bankruptcy protection.…
Pages
