The Register
Microsoft called out as big malware hoster – thanks to OneDrive and Office 365 abuse
Microsoft has been branded as "the world's best malware hoster for about a decade," thanks to abuse of the Office 365 and Live platform, as well as its slow response to reports by security researchers.…
Chinese tech minister says he's 'dealt with' 73,000 websites that breached the law
China's Minister of Industry and Information Technology, Xiao Yaqing, has given a rare interview in which he signalled the nation's crackdown on the internet and predatory companies will continue.…
Whatever sort of disaster we’re talking about, if your backups are fried, you’re not going to recover
Sponsored When you’re putting your enterprise security and data management strategy in place, should you worry more about ransomware or natural disasters?…
US gov claims ransomware 'earned' $590m in the first half of 2021 alone – mostly in Bitcoin
Ransomware extracted at least $590 million for the miscreants who create and distribute it in the first half of 2021 alone – more than the $416 million tracked in all of 2020, according to the US government’s Financial Crimes Enforcement Network (FinCEN). Total ransomware-related financial activity may have reached $5.2 billion.…
NFTs not annoying enough? Now they come with wallet-emptying malware
In brief Whether or not non-fungible tokens are a flash in the pan or forever, malware operators have been keen to weaponise the technology.…
Amazon textbook rental service scammed for $1.5m
A 36-year-old man from Portage, Michigan, was arrested on Thursday for allegedly renting thousands of textbooks from Amazon and selling them rather than returning them.…
When it comes to ransomware, your fightback should start long before you’re attacked
Sponsored You wouldn’t want to learn to box just as Tyson Fury steps out of the opposing corner. Likewise, the time to learn how to recover from ransomware is long before your systems come under attack.…
White House ransomware summit calls for virtual asset crackdown, without mentioning cryptocurrency
The 30-nation gabfest convened under the auspices of the US National Security Council’s Counter-Ransomware Initiative has ended with agreement that increased regulation of virtual assets is required to curb the digital coins' allure to criminals.…
Client-side content scanning as an unworkable, insecure disaster for democracy
Fourteen of the world's leading computer security and cryptography experts have released a paper arguing against the use of client-side scanning because it creates security and privacy risks.…
WhatsApp's got your back(ups) with encryption for stored messages
Facebook's WhatsApp on Thursday began a global rollout of end-to-end (E2E) encryption for message backups, which offers Android and iOS users with the ability to protect WhatsApp messages stored in Google Drive and Apple iCloud.…
Google's VirusTotal reports that 95% of ransomware spotted targets Windows
Google's VirusTotal service showing that 95 per cent of ransomware malware identified by its systems targets Windows.…
3D printing site Thingiverse suffers breach of 228,000 email addresses amid sluggish disclosure
Thingiverse, a site that hosts free-to-use 3D printer designs, has suffered a data breach – and at least 228,000 unlucky users' email addresses have been circulating on black-hat crime forums.…
US invites friends to multilateral cybersecurity meetings – Russia and China strangely absent
The United States has kicked off meetings attended by representatives of nations that all hope to address the scourge of ransomware – without Russia or China in the room.…
Ad-blocking browser extension actually adds ads, say Imperva researchers
Security vendor Imperva’s research labs have found a browser extension that claims to block ads, but actually injects them into Chrome or Opera.…
Ex-camera biz Olympus investigating 'suspicious' network activity again a month after ransomware hit
Olympus, the Japanese company once known for making cameras, is investigating "suspicious" activity on its networks again – a month after those same networks were ravaged by ransomware.…
Microsoft says Azure fended off what might just be the world's biggest-ever DDoS attack
Microsoft claims its Azure cloud has fended off the largest DDOS attack it's detected, which clocked in at 2.4Tbit/sec.…
Microsoft Patch Tuesday bug harvest festival comes to town
Microsoft's October Patch Tuesday has arrived with fixes for 71 new CVEs, two patch revisions to address bugs from previous months that just won't die, and three CVEs tied to OpenSSL flaws. That's in addition to eight Edge-Chromium CVEs dealt with earlier this month.…
User locked out of Microsoft account by MFA bug, complains of customer-hostile support
Interview Konstantin Gizdov, an IT professional, was locked out of his Microsoft account by a bug in the company's Multi-Factor Authentication (MFA), but says support refused to acknowledge the bug or recover his account.…
Apple patches 'actively exploited' iPhone zero-day with iOS 15.0.2 update
If you're using an iPhone, install the iOS 15.0.2 update immediately: Apple has warned that the latest OS upgrade patches an "actively exploited" zero-day.…
Schools email marketing company told us to go away when we told them of exposed database creds, say infoseccers
An email marketing company claiming to hold details on a million UK teachers and school admin personnel was potentially exposing those to the public internet thanks to a misconfigured error page on its website.…