The Register
Uncle Sam blames best pal China as Taidoor crew's dirty RAT takes aim at Western orgs, but others are less sure
A Chinese state-backed hacking crew named Taidoor is deploying a custom remote access trojan (RAT) against Western organisations, according to US authorities.…
Doctor, doctor, got some sad news, there's been a bad case of hacking you: UK govt investigates email fail
Former UK trade minister and current Conservative MP Dr. Liam Fox has been named as the source of hacked trade documents released during last year's British elections.…
Leaky S3 buckets have gotten so common that they're being found by the thousands now, with lots of buried secrets
The massive amounts of exposed data on misconfigured AWS S3 storage buckets is a catastrophic network breach just waiting to happen, say experts.…
Days after Trump suggests pausing election over security, US House passes $500m for states to do just that
The US House of Representatives has passed a spending bill which includes a $500m election security provision.…
UK Defence Committee chair muses treating TikTok like Huawei: So eyeball its code then ban it from the country?
The chairman of UK Parliament's Defence Committee has suggested making popular app TikTok subject to Huawei-style code reviews by GCHQ, if its reported move to a new London HQ comes true.…
Linux Foundation rolls bunch of overlapping groups into one to tackle growing number of open-source security vulns
The Linux Foundation has formed the Open Source Security Foundation (OpenSSF) with founding board members representing companies including IBM, GitHub, Google, JPMorgan Chase, Microsoft, NCC Group, and Red Hat.…
'We stopped ransomware' boasts Blackbaud CEO. And by 'stopped' he means 'got insurance to pay off crooks'
"We discovered and stopped a sophisticated attempted ransomware attack," Blackbaud CEO Michael Gianoni has told financial analysts – failing to mention the company simply paid off criminal extortionists to end the attack.…
Oh cool, more Cisco patches to apply. Happy Monday
In Brief Cisco customers once again find themselves needing to patch critical vulnerabilities in Switchzilla's gear.…
Who was behind that stunning Twitter hack? State spies? Probably this Florida kid, say US prosecutors
Three individuals were charged on Friday for allegedly hijacking a string of high-profile Twitter accounts after hoodwinking the social network's staff.…
First rule of Ransomware Club is do not pay the ransom, but it looks like Carlson Wagonlit Travel didn't get the memo
Exclusive US corporate travel management firm Carlson Wagonlit Travel has suffered an intrusion and it is believed the company paid a $4.5m ransom to get its data back.…
Burn baby burn, plastic inferno! Infosec researchers turn 3D printers into self-immolating suicide machines
Some 3D printers can be flashed with firmware updates downloaded directly from the internet – and an infosec research firm says it has discovered a way to spoof those updates and potentially make the printer catch fire.…
In the market for a second-hand phone? Check it's still supported by the vendor – almost a third sold are not
An investigation by consumer watchdog Which? has found that nearly a third of all phones sold on second-hand sites are no longer supported by the vendor, leaving punters at risk of being hacked.…
EU tries to get serious on cybercrime with first sanctions against Wannacry, NotPetya, CloudHopper crews
The European Union has, for the first time ever, slapped sanctions on hacking crews.…
Fun fact: If you noticed a while ago Zoom's web client going AWOL for a week, it's because someone found a passcode-cracking hole
Zoom has confirmed it fixed a vulnerability that could have been exploited by miscreants to crack the passcodes needed to access strangers' private chin-wagging.…
Twitter says spear-phishing attack hooked its staff and led to celebrity account hijack
Twitter has offered further explanation of the celebrity account hijack hack that saw 130 users’ timelines polluted with a Bitcoin scam.…
Infosec bod: I've found zero-day flaws in Tor's bridge relay defenses. Tor Project: Only the zero part is right
Neal Krawetz, a computer forensics expert, has published details on how to detect Tor bridge network traffic that he characterizes as "zero-day exploits"... which the Tor Project insists are nothing of the sort.…
If you own one of these 45 Netgear devices, replace it: Firm won't patch vulnerable gear despite live proof-of-concept code
Netgear has quietly decided not to patch more than 40 home routers to plug a remote code execution vulnerability – despite security researchers having published proof-of-concept exploit code.…
DXC says ransomware attack disrupted customer operations at insurance services arm but barely left a scratch
DXC has recovered from a ransomware attack that hit its independent services-for-insurers operation Xchanging.…
YOU... SHA-1 NOT PASS! Microsoft magics away demonic hash algorithm from Windows updates, apps
Microsoft is preparing to once and for all drop support for the SHA-1 hash algorithm.…
GRUB2, you're getting too bug for your boots: Config file buffer overflow is a boon for malware seeking to drill deeper into a system
An annoying vulnerability in the widely used GRUB2 bootloader can be potentially exploited by malware or a rogue insider already on a machine to thoroughly compromise the operating system or hypervisor while evading detection by users and security tools.…