The Register
Wherever your apps, users and data are heading, is your backup keeping up?
Webcast What’s your tech infrastructure going to look like in the next few months or years? You know, once we get past the current situation and find time to start innovating again. All of which may come sooner than you think.…
Malwarebytes says its Office 365, Azure tenancies have been breached, insists its tools are still safe to use
Security company Malwarebytes suspects a breach of its Office 365 and Azure tenancies is by the same attacker behind the SolarWinds hack, but reckons flaws in Azure Active Directory security are also to blame.…
Slack has entered the Matrix: Element builds a bridge to realm of encrypted, decentralised comms
Element Matrix Services is adding a bridge between hipster chat platform Slack and the open-source world of Matrix messaging.…
Open banking is the future, so let’s secure the APIs
Sponsored The future of banking is digital, of that there is no doubt. It may be at an early stage, but we can already see that future, as, all over the world, the banking community moves to embrace open banking.…
Dnsmasq, used in only a million or more internet-facing devices globally, patches not-so-secret seven spoofing, hijacking flaws
Seven vulnerabilities have been found in a popular DNS caching proxy and DHCP server known as dnsmasq, raising the possibility of widespread online attacks on networking devices.…
FireEye publishes details of SolarWinds hacking techniques, gives out free tool to detect signs of intrusion
Any organizations that used the backdoored SolarWinds network-monitoring software should take another look at their logs for signs of intrusion in light of new guidance and tooling.…
Labour Party urges UK data watchdog to update its Code of Employment Practices to tackle workplace snooping
The UK's Information Commissioner's Office needs to update its Code of Employment Practices to tackle workplace spying by bosses, the Prospect trade union and the Labour Party have said.…
AnyVan confirms digital break-in, says customer names, emails and hashed passwords exposed
Anyvan, the European online marketplace that lets users buy delivery, transport or removal services from a network of providers, has confirmed it was the victim of a digital burglary that involved the theft of customers' personal data.…
Scottish Environment Protection Agency refuses to pay ransomware crooks over 1.2GB of stolen data
Scotland's environmental watchdog has confirmed it is dealing with an "ongoing ransomware attack" likely masterminded by international "serious and organised" criminals during the last week of 2020.…
Bye bye, said Trump admin to Huawei: You give a cheque-ie to our techies, but there's no licence to ply
As parting gifts go, this one ranks pretty low. With less than three days until the inauguration of Joe Biden, the Trump Administration has reportedly revoked several licences that would allow Huawei to buy US-made tech, and plans to deny over 150 pending requests.…
Hallowed Buqtraq infosec list killed then resurrected over the weekend: We heard your feedback, says Accenture
In brief Last week ended with news that the venerable infosec mailing list Bugtraq was being shutdown at the end of the month.…
Signal boost: Secure chat app is wobbly at the moment. Not surprising after gaining 30m+ users in a week, though
Updated Signal is experiencing a partial outage as tens of millions of netizens flood the free secure messaging service.…
Coming in at number 5, it's a blast from the past! Tenable's 2020 security flaw chart show features hits of yesteryear
Out of the top five vulnerabilities for 2020 three dated back to 2019 or earlier, according to infosec firm Tenable's annual threat report.…
Ministry of Defence's cyber warfare drive is helping burn a hole through its budget, warns UK's National Audit Office
The Ministry of Defence's multibillion budget overrun has been caused in part because of its spending splurge on flashy new "cyber" capabilities, according to the National Audit Office.…
Is a remote workforce making your organisation less secure?
Webcast Last year your bosses embraced remote working because, let’s face it, none of us had a choice.…
World’s largest dark-web marketplace shuttered after Euro cybercops cuff Aussie
Europol cops have taken down dark-web souk DarkMarket, after arresting an Australian citizen living in Germany who they claim was operating the world's biggest online bazaar of its kind.…
Microsoft emits 83 security fixes in first Patch Tuesday of 2021 – and miscreants are already exploiting one of them
Patch Tuesday Microsoft on Tuesday released updates addressing 83 vulnerabilities in its software, which doesn't include the 13 flaws fixed in its Edge browser last week.…
SolarWinds malware was sneaked out of the firm's Orion build environment 6 months before anyone realised it was there – report
The malware that was utilised to hack SolarWinds checked to see whether software used to compile the firm's Orion product was running before deploying its payload, according to Crowdstrike.…
Microsoft's beefed-up take on Linux server security has hit general availability
After a few months in preview, Microsoft has made Defender Endpoint Detection and Response (EDR) generally available for Linux servers.…
In case you hadn't heard, SolarWinds was hacked by Moscow, says Kaspersky Lab
Kaspersky Lab reckons the SolarWinds hackers may have hailed from the Turla malware group, itself linked to Russia’s FSB security service.…