The Register
Ransomware drops the Lillehammer on Norsk Hydro: Aluminium giant forced into manual mode after systems scrambled
Norwegian power and metals giant Norsk Hydro is battling an extensive ransomware outbreak on its computers.…
Sorry, Linux. We know you want to be popular, but cyber-crooks are all about Microsoft for now
Eight out of the ten most exploited vulnerabilities tracked by threat intelligence biz Recorded Future in 2018 targeted Microsoft products – though number two on its list was, surprise surprise, a Flash flaw.…
PuTTY in your hands: SSH client gets patched after RSA key exchange memory vuln spotted
Venerable SSH client PuTTY has received a pile of security patches, with its lead maintainer admitting to the The Register that one fixed a "'game over' level vulnerability".…
Bandersnatch to gander snatched: Black Mirror choices can be snooped on, thanks to privacy-leaking Netflix streams
Boffins have found a side channel to observe the choices netizens make when viewing interactive streaming videos.…
Bad cup of Java leaves nasty taste in IBM Watson's 'AI' mouth: Five security bugs to splat in analytics gear
IBM has issued a security alert over five vulnerabilities in its golden boy Watson analytics system.…
This headline is proudly brought to you by wired keyboards: Wireless Fujitsu model hacked
A German security researcher has revealed that one model of Fujitsu wireless keyboard will accept unauthenticated input, despite the presence of AES-128 encryption.…
Lone staffer killed our shields, claims etailer Gearbest after infosec bods peep at user deets
Researchers working for VPNMentor have accused Chinese e-commerce site Gearbest of storing user information in "completely unsecured" Elasticsearch databases after discovering "1.5 million records" which they were able to access through a browser.…
Karpeles walks, Google and Microsoft board up Windows hole, and Android AV still sucks
Roundup Last week we saw a conservative app exposed, the revelation of Beto's hacker past, and the rise of Slub.…
UK code breakers drop Bombe, Enigma and Typex simulators onto the web for all to try
UK signals intelligence agency GCHQ, celebrating its centenary, has released emulators for famed World War II-era cipher machines that can be run within its web-based educational encryption app CodeChef.…
Q&A: Crypto-guru Bruce Schneier on teaching tech to lawmakers, plus privacy failures – and a call to techies to act
RSA Politicians are, by and large, clueless about technology, and it's going to be up to engineers and other techies to rectify that, even if it means turning down big pay packets for a while.…
What was that P word? Ah. Privacy. Yes, we'll think about privacy, says FCC mulling cellphone location data overhaul
Analysis America's comms regulator has finally pinky-promised to at least consider people's privacy when it looks into how cellphone location data can be made more accurate.…
Welcome. You're now in a timeline in which US presidential hopeful Beto was a member of a legendary hacker crew
Newly minted US presidential hopeful Beto O'Rourke says he was a member of Cult of the Dead Cow, one of the most legendary hacking groups in cyber-history.…
Public spending watchdog snipes at UK.gov's £1.3bn infosec plan – but broadly nods it through
Britain's Cabinet Office (CO) hasn’t quite bungled the National Cyber Security Programme (NCSP) but it could certainly be doing things a lot better, the National Audit Office said today.…
So you need an IT security center. Fret not: Let an automated solution take the strain
Promo Today's businesses are so heavily dependent on their IT infrastructure that the slightest disruption in service can incur damaging losses.…
Don't be a WordPress RCE-hole and patch up this XSS vuln, pronto
A newly revealed vuln in the open-source CMS WordPress allows an unauthenticated website attacker to remotely execute code – potentially letting naughty folk delete or edit blog posts.…
Protip: If you'd rather cyber-scoundrels didn't know the contents of your comp, don't apply for a Pakistani passport
A Pakistani government website was compromised with a keylogger and other malware that hoovered up a whole host of information about people checking on their passport application status.…
Hackers cop a FILA thousands of UK card deets after slinking onto clothing brand's servers
Sportswear brand FILA is the latest company to fall victim to the card-stealing JavaScript infection that menaced British Airways and Ticketmaster last year.…
What do sexy selfies, search warrants, tax files have in common? They've all been found on resold USB sticks
About two-thirds of USB memory sticks bought secondhand in the US and UK have recoverable and sometimes sensitive data, and in one-fifth of the devices studied, the past owner could be identified.…
Thought you were done patching this week? Not if you're using an Intel-powered PC or server
Hot on the heels of this month's security updates from Microsoft, Adobe, and SAP, Intel has kicked out a batch of its own bug patches.…
Just Android things: 150m phones, gadgets installed adware-ridden mobe simulator games
Android adware has managed to find its way into as many as 150 million devices – after it was stashed inside a large number of those bizarre viral “mundane job simulator” games, we're told.…