The Register
Why zero trust security needs strong hardware foundations
Sponsored Sometimes it feels like the hackers and malware creators are in an arms race with the teams tasked with protecting systems and data. New tools and technologies are being deployed on both sides all the time.…
26 million logins believed to be stolen from LiveJournal in 2017 pop up on hacker forum
Russian-owned blogging service LiveJournal has reportedly suffered a hack affecting 26 million user accounts.…
Oh cool, tech service prices are plummeting. And by tech services, we mean botnet rentals and stolen credit cards
Crime has never been cheaper to pull off, so long as you're not particular about quality.…
Microsoft banishes Trend Micro code at center of driver 'cheatware' storm from Windows 10, rootkit detector product pulled from site
Microsoft has blocked a Trend Micro driver from running on Windows 10 – and Trend has withdrawn downloads of its rootkit detector that uses the driver – after the code appeared to cheat Redmond's QA tests.…
Mulled Chrome API shines light on long-neglected privacy gap: Sites can snoop on your find-in-page searches
Analysis A browser feature being developed for the open-source Chromium platform has raised data-leakage privacy concerns – though the Google engineers working on the project contend the potential benefits outweigh the risks.…
India said its contact-tracing app is perfect – adds bug bounty and open-sources it anyway
India has open-sourced its Aarogya Setu contact-tracing app and announced a bug bounty program to detect any security issues.…
US lawmakers get a second shot at forcing FBI agents to obtain a warrant before they leaf through web histories
US lawmakers will get another vote on whether the FBI must get a warrant before agents can search Americans’ search and web-browsing histories.…
If someone could stop hackers pwning medical systems right now, that would be cool, say Red Cross and friends
Following the surge of cyber attacks on medical facilities, the head of the International Committee of the Red Cross (ICRC) and more than 40 other international leaders asked the governments of the world to do more to safeguard critical medical organizations amid the coronavirus pandemic.…
Airline-chasing lawyers leap on Easyjet for £18bn after 9m folks' data, itineraries nicked
A law firm that is already chasing British Airways now claims it is suing Easyjet for up to £18bn, intending to take a modest £5.4bn cut for itself, after nine million people's data was stolen from the airline's servers.…
Unmanned drones to slash NHS delivery times to one-fifth of road 'n' rail transport
Remote-control drones are to be used to deliver coronavirus testing kits to a remote Scottish hospital – and they're being flown outside of the operators' direct line of sight.…
eBay users spot the online auction house port-scanning their PCs. Um... is that OK?
Users visiting eBay have spotted that the website runs port scans against their computer, using the localhost address to inspect what may be running on your machine.…
Galaxy S20 security is already old hat as Samsung launches new safety silicon
Samsung will launch a new standalone turnkey security chip to protect mobile devices, the company announced today.…
Contact-tracing app may become a permanent fixture in major Chinese city
One of China's major tech hubs is planning to make a health and movement tracking system developed to fight the COVID-19 epidemic a permanent fixture in daily life.…
Pre-authentication, remote root hole in call-center software? Thanks, Cisco. Just what a long weekend needs
Roundup It's once again time to catch up on the latest happenings from the world of infosec.…
It wasn't just a few credit cards: Entire travel itineraries were stolen by hackers, Easyjet now tells victims
Victims of the Easyjet hack are now being told their entire travel itineraries were accessed by hackers who helped themselves to nine million people’s personal details stored by the budget airline.…
Forget BYOD, this is BYOVM: Ransomware tries to evade antivirus by hiding in a virtual machine on infected systems
With antivirus tools increasingly wise to common infection tricks, one group of extortionists has taken the unusual step of stashing their ransomware inside its own virtual machine.…
To test its security mid-pandemic, GitLab tried phishing its own work-from-home staff. 1 in 5 fell for it
Code hosting biz GitLab recently concluded a security exercise to test the susceptibility of its all-remote workforce to phishing – and a fifth of the participants submitted their credentials to the fake login page.…
Campaign groups warn GCHQ can re-identify UK's phones from COVID-19 contact-tracing app data
Campaign groups have written to the UK Prime Minister warning GCHQ and its digital arm, the National Cyber Security Centre (NCSC) will have the capacity to re-identify the phones of people who have installed the COVID-19 contact-tracing app.…
Far-right leader walks free from court after conviction for refusing to hand his phone passcode over to police
The leader of far-right political group Britain First has been handed a judicial slap on the wrist after refusing to give his phone PIN to police at Heathrow Airport.…
DNS this week stands for Drowning Needed Services: Design flaw in name server system can be exploited to flood machines offline
A new vulnerability has been found in the design of the world's domain-name system that potentially can be exploited to flood websites off the internet.…