The Register
Denial of service kingpin hit with 13 months denial of freedom and a massive bill to pay
A US court has sentenced the operator of a massive DDoS service to 13 months in prison.…
1Password hopes to cross some items off its todo list with help from $200m in venture capital
Some 14 years after it was founded and with no external funding taken in during that time, 1Password has finally succumbed to the charms - and $200m in cash - of venture cap biz Accel.…
Try as they might, ransomware crooks can't hide their tells when playing hands
Common behaviors shared across all families of ransomware are helping security vendors better spot and isolate attacks.…
What a pair of Massholes! New England duo cuffed over SIM-swapping cryptocoin charges
Two men from Massachusetts have been arrested and charged with 11 criminal counts stemming from a string of account takeovers and cryptocurrency thefts.…
Infosec boffins pour cold water on claims Home Office Brexit app can be easily hacked
Reports that the Home Office's Brexit app contains "serious vulnerabilities" that could expose the phone numbers, addresses and passport details of EU citizens are overblown, say security experts.…
UK Info Commish quietly urged court to swat away 100k Morrisons data breach sueball
The UK's Information Commissioner urged the Court of Appeal to side with Morrisons in the supermarket’s battle to avoid liability for the theft and leaking of nearly 100,000 employees’ payroll details – despite not having read the employees’ legal arguments.…
Londoner accused of accessing National Lottery users' accounts
A man will appear at Crown court in December to answer charges that he used hacking program Sentry MBA to access and take money from online UK National Lottery gambling accounts.…
Russian bloke charged in US with running $20 million stolen card-as-a-service online souk
A Russian man was detained at Dulles airport in Washington DC on Monday and charged with running a stolen card trading ring that was responsible for $20m worth of fraud.…
Shock! US border cops need 'reasonable suspicion' of a crime before searching your phone, laptop
The seizure and search of phones and laptops at the US border is unconstitutional, a judge said Tuesday in a landmark ruling.…
This November, give thanks for only having one exploited Microsoft flaw for Patch Tues. And four Hyper-V escapes
Patch Tuesday The November edition of Patch Tuesday has landed with scheduled updates from Microsoft, Adobe, and SAP, along with the debut of a new update calendar from Intel.…
Don't trust the Trusted Platform Module – it may leak your VPN server's private key (depending on your configuration)
Trusted Platform Modules, specialized processors or firmware that protect the cryptographic keys used to secure operating systems, are not entirely trustworthy.…
True to its name, Intel ZombieLoad processor attack comes crawling back with new variant
Intel is once again moving to patch its CPU microcode following the revelation of yet another data-leaking side-channel vulnerability.…
Don't miss this patch: Bad Intel drivers give hackers a backdoor to the Windows kernel
Nearly three months after infosec biz Eclypsium highlighted widespread security weaknesses in third-party Windows hardware drivers, you can now add Intel to the list of vendors leaving holes in their all-powerful low-level code.…
From AV to oy-vey: McAfee antivirus has security hole of its own
Three of McAfee's anti-malware tools have been found to contain a vulnerability that could potentially allow an attacker to bypass its security protections and take control of a PC.…
'Sophisticated' cyber attack on UK Labour Party platforms was probably just a DDoS, says official
The UK's Labour Party says its campaign site has been the target of "sophisticated and large-scale cyber-attack" and has informed GCHQ's National Cyber Security Centre.…
150 infosec bods now know who they're up against thanks to BT Security cc/bcc snafu
BT Security managed to commit the most basic blunder of all after emailing around 150 infosec professionals who attended a jobs fair – using the "cc" field instead of "bcc".…
BlueKeep freakout had little to no impact on patching, say experts
The flurry of reports in recent weeks of in-the-wild exploits for the Windows RDP 'BlueKeep' security flaw had little impact among those responsible for patching, it seems.…
Back-2-school hacking: Kaspersky blames pesky script kiddies for rash of DDoS cyber hooliganism
Kasperksy researchers have blamed pesky schoolkids for the big September spike in denial-of-service attacks.…
If it sounds too good to be true, it most likely is: Nobody can decrypt the Dharma ransomware
A data recovery company is dubiously claiming it has cracked decryption of Dharma ransomware – despite there being no known method of unscrambling its files.…
Hate hub hacked, Cisco bugs squished, Bluekeep attacks begin, and much, much, more
Roundup Time for a look at some of the other security stories making the rounds in the past week.…