News

Bug-hunter details how his team slurped data… IN SPAAAAACE

DEF CON  FYI, if you didn't already know: readily available satellite TV electronics can be used to sniff and inspect satellite internet traffic.…

These are the class-action-suit-joining 'droids lawyers are looking for. (We'll get our coats)

Google "abuses Android OS to obtain a competitive advantage", according to a lawsuit filed this week alleging that the Alphabet offshoot "secretively monitored and collected users' sensitive personal data" to develop apps to compete with TikTok, Facebook, and Instagram.…

Demirkapi shows how drivers can be misused for deep pwnage

DEF CON  Writing a successful Windows rootkit is easier than you would think. All you need is do is learn assembly and C/C++ programming, plus exploit development, reverse engineering, and Windows internals, and then find and abuse a buggy driver, and inject and install your rootkit, and bam. Happy days.…

Not exactly the first time this has happened, by a very long chalk

Google's Chrome Web Store is once again under fire for poor policing of harmful extensions.…

On grounds that they can track users, conduct corporate espionage and oppress Chinese-Americans

United States president Donald Trump has issued two executive orders banning Chinese messaging service WeChat and made-in-China-but-only-operating-abroad social network TikTok, and labelling the two a “threat”.…

All that money must be wired to the US Treasury immediately

Capital One must pay a $80m fine for its shoddy public cloud security – yes, the US banking giant that was hacked last year by a miscreant who stole personal information on 106 million credit-card applicants in America and Canada.…

A misunderstanding about the vulnerability means defenses fall short

Some of the boffins who in 2018 disclosed the data-leaking speculative-execution flaws known as Spectre and Meltdown today contend that attempts to extinguish the Foreshadow variant have missed the mark.…

China can't hold a candle to GRU's shenanigans, says expert

Black Hat  While China is the bête noire du jour of the US government, Russia is the master of spreading disinformation, fostering conflict, and derailing discourse online, the Black Hat security conference was told today.…

Leaker only 'a bit concerned' about getting sued

Updated  Swiss IT consultant Tillie Kottmann on Thursday published a trove of purportedly confidential Intel technical material, code, and documents related to various processors and chipsets.…

Should your policy cover that? Well that's up to you

The National Cyber Security Centre has urged British businesses to think carefully when picking a cyber insurance policy – but won’t say whether insurance that covers ransomware payoffs is a bad thing or not.…

Bognor Regis man still faces 20 years in clink, though

The British teenager accused of being part of the gang that hacked Twitter and posted a cryptocurrency scam from various US celebrities' accounts has not yet been arrested.…

‘Clean Network’ initiative bans use of Chinese clouds, names Alibaba, Baidu, and Tencent as compromised

US secretary of state Mike Pompeo has announced a “Clean Network plan” he says offers a “comprehensive approach to guarding our citizens’ privacy and our companies’ most sensitive information from aggressive intrusions by malign actors, such as the Chinese Communist Party (CCP).”…

'We are investigating the situation'

Canon has had a double shot of bad luck lately. First, its brand-new photo-and-video-hosting cloud started losing files. Now it's reportedly fallen victim to ransomware.…

ES&S takes the bold step of not ignoring vulnerability reports

Black Hat  Just hours after Professor Matt Blaze today discussed the state of election system security in America, one of the largest US voting machine makers stepped forward to say it's trying to improve its vulnerability research program.…

Get. The. Terms. Of. The. Audit. In. Writing

Black Hat  The two penetration testers whose arrest and imprisonment made headlines last year are finally sharing their story, and it is a doozy.…

'We need to prepare for a number of scenarios that may not come to fruition' says Prof Blaze

Black Hat  Just as America was getting a grip on improving the security of its electronic ballot boxes, the coronavirus pandemic hit, throwing a potential surge in remote voting unexpectedly into the mix, the Black Hat hacking conference was told today.…

COVID-battered businesses win reprieve from Information Commissioner's Office

Updated  British Airways expects the fine for its 2018 credit card data leak to be just 10.8 per cent of the original £183m proposed by the UK data watchdog – while US hotel chain Marriott has both halved and kicked its own data protection fine into the long grass once again, The Register can reveal.…

It might be best not to ask how the NSA knows this and why it advises most mitigations don’t help

The United States National Security Agency has issued new advice on securing mobile devices that says location services create a security risk for staff who work in defence or national security.…

Accuses USA of working to destroy businesses it doesn't like

China has accused the US of abusing its national security laws to target Chinese companies after Washington threatened to ban video-sharing app TikTok from its shores last week.…

Threatening and insulting WeChat messages and worse earn time inside

A Beijing court has jailed eight debt collectors for cyber-bullying creditors.…