The Register
White-listing Azure cloud connections to grease your Office 365 wheels? About that...
Microsoft has been accused of ignoring an IT security risk that could be exploited to create legit-looking malware-laden webpages that sport seemingly trusted Azure and Office 365 domain names. Alternatively, the domains potentially could be used to stealthily leak stolen data from networks.…
Build the wall... around your DNS settings, US govt IT staff urged by Homeland Security amid domain hijackings
America's Homeland Security has urged US government departments and federal agencies to shore up their DNS control panels after hackers successfully stormed the barricades.…
Plug in your iPhone, iPad, iPod, fire up the App Store: You have new Apple patches to install
Apple has emitted a handful of software patches to address security vulnerabilities in iOS, macOS, and various peripherals.…
Wow, fancy that. Web ad giant Google to block ad-blockers in Chrome. For safety, apparently
Google engineers have proposed changes to the open-source Chromium browser that will break content-blocking extensions, including various ad blockers.…
Heads up: Debian's package manager is APT for root-level malware injection... Fix out now to thwart MITM hijacks
The Debian Project has patched a security flaw in its software manager Apt that can be exploited by network snoops to execute commands as root on victims' boxes as they update or install packages.…
En garde! 'Cyber-war has begun' – and France will hack first, its defence sec declares
FIC2019 France’s defence secretary Florence Parly today declared “Cyber war has begun.”…
French diplomat: Spies gonna spy – there aren't any magical cyberspace laws that can prevent it
FIC2019 A French diplomat has suggested that future global regulation of cyberspace could exempt spying from regulation "as long as some specific sectors are preserved".…
Looks like Uncle Sam has pulled its finger out and appointed a Privacy Shield ombudsperson
The US may have finally complied with the European Commission's repeated requests to name a permanent Privacy Shield ombudsperson, The Register understands.…
Stalk my pals on social media and you'll know that the next words out of my mouth will be banana hammock
The phenomenon of "prescient Facebook advertising", so beloved of conspiracy theorists who think social networks listen to your microphone, might instead simply be evidence of how good Facebook's algorithms have become.…
Get in the bin: Let's Encrypt gives admins until February 13 to switch off TLS-SNI
If you're still using TLS-SNI, stop: a year after a slip-up allowed miscreants to claim Let's Encrypt certificates for domains they didn't own, the free certificate authority has announced the final sunset of the protocol involved.…
DDoS sueball, felonious fonts, leaky Android file manager, blundering building security, etc etc
Roundup This week we wrangled with alleged Russian election meddling, hundreds of millions of username-password combos spilled online, Oracle mega-patches, and cliams of RICO swap-gangs.…
The Iceman cometh, his smartwatch told the cops: Hitman jailed after gizmo links him to Brit gangland slayings
Avid runner and hitman Mark Fellows was this week found guilty of murder after being grassed up by his Garmin watch.…
US midterms barely over when Russians came knocking on our servers (again), Democrats claim
Russian hackers attempted to infiltrate the Democratic National Committee (DNC) just after the US midterm elections last year, according to a new court filing.…
Microsoft partner portal 'exposes 'every' support request filed worldwide' today
Exclusive Alarmed Microsoft support partners can currently view support tickets submitted from all over the world, in what appears to be a very wide-ranging blunder by the Redmond-based biz.…
I used to be a dull John Doe. Thanks to Huawei, I'm now James Bond!
Something for the Weekend, Sir? The name's McLeod. Alessandro McLeod. I am a spy for the secret services.…
Microsoft blue biz bug bounty bonanza beckons
There's more money to be made from bug hunting in Microsoft code after Redmond announced its 10th active bug hunting reward scheme, the Azure DevOps Bounty Program.…
Old bugs, new bugs, red bugs … yes, it's Oracle mega-update day again
Oracle admins, here's your first critical patch advisory for 2019, and it's a doozy: a total of 284 vulnerabilities patched across Big Red's product range, and 33 of them are rated “critical”.…
Got a Drupal-powered website? You may want to get patching now...
Drupal has issued a pair of updates to address two security vulnerabilities in its online publishing platform. The vulns are a little esoteric, and will not affect most sites, but it's good to patch just in case you later add functionality that can be exploited.…
Twitter. Android. Private tweets. Pick two... Account bug unlocked padlocked accounts
Twitter has fessed up to a flaw in its Android app that, for more than four years, was making twits' private tweets public. The programming blunder has been fixed.…
Top GP: Medical app Your.MD's data security wasn't my remit
The founders of medical symptom-checker app Your.MD knew that a number of key medical information databases were "open to anyone who knows the URL", emails seen by a London tribunal have revealed.…