The Register

Subscribe to The Register feed
Biting the hand that feeds IT — Enterprise Technology News and Analysis
Updated: 2 hours 1 min ago

Jetpack fixes 8-year-old flaw affecting millions of WordPress sites

Fri, 18/10/2024 - 23:30
Also, new EU cyber reporting rules are live, exploiters hit the gas pedal, free PDNS for UK schools, and more

in brief  A critical security update for the near-ubiquitous WordPress plugin Jetpack was released last week. Site administrators should ensure the latest version is installed to keep their sites secure. …

Categories: News

Alleged Bitcoin crook faces 5 years after SEC's X account pwned

Fri, 18/10/2024 - 13:30
SIM swappers strike again, warping cryptocurrency prices

An Alabama man faces five years in prison for allegedly attempting to manipulate the price of Bitcoin by pwning the US Securities and Exchange Commission's X account earlier this year.…

Categories: News

ESET denies it was compromised as Israeli orgs targeted with 'ESET-branded' wipers

Fri, 18/10/2024 - 12:00
Says 'limited' incident isolated to 'partner company'

ESET denies being compromised after an infosec researcher highlighted a wiper campaign that appeared to victims as if it was launched using the Slovak security shop's infrastructure.…

Categories: News

Intel robustly refutes China's accusations it bakes in NSA backdoors

Fri, 18/10/2024 - 06:32
Chipzilla uses WeChat post to defend record of following local laws

Intel has roundly rebutted Chinese accusations that its chips include security backdoors at the direction of the US National Security Agency (NSA).…

Categories: News

Biz hired, and fired, a fake North Korean IT worker – then the ransom demands began

Fri, 18/10/2024 - 05:28
'My webcam isn't working today' is the new 'The dog ate my network'

It's a pattern cropping up more and more frequently: a company fills an IT contractor post, not realizing it's mistakenly hired a North Korean operative. The phony worker almost immediately begins exfiltrating sensitive data, before being fired for poor performance. Then the six-figure ransom demands – accompanied by proof of the stolen files – start appearing.…

Categories: News

Uncle Sam puts $10M bounty on Russian troll farm Rybar

Fri, 18/10/2024 - 02:00
Propaganda op focuses on anti-West narratives to meddle with elections

The US has placed a $10 million bounty on Russian media network Rybar and a number of its key staffers following alleged attempts to sway the upcoming US presidential election.…

Categories: News

Troubled US insurance giant hit by extortion after data leak

Fri, 18/10/2024 - 00:30
Globe Life claims blackmailers shared stolen into with short sellers

US insurance provider Globe Life, already grappling with legal troubles, now faces a fresh headache: an extortion attempt involving stolen customer data.…

Categories: News

Brazilian police claim they've cuffed serial cybercrook behind FBI and Airbus attacks

Thu, 17/10/2024 - 15:00
Early stage opsec failures lead to landmark arrest of suspected serial data thief

Brazilian police are being cagey with the details about the arrest of a person suspected to be responsible for various high-profile data thefts.…

Categories: News

WeChat devs introduced security flaws when they modded TLS, say researchers

Thu, 17/10/2024 - 09:31
No attacks possible, but enough issues to cause concern

Messaging giant WeChat uses a network protocol that the app's developers modified – and by doing so introduced security weaknesses, researchers claim.…

Categories: News

Anonymous Sudan isn't any more: Two alleged operators named, charged

Thu, 17/10/2024 - 08:27
Gang said to have developed its evilware on GitHub – then DDoSed GitHub

Hacktivist gang Anonymous Sudan appears to have lost its anonymity after the US Attorney's Office on Wednesday unsealed an indictment identifying two of its alleged operators.…

Categories: News

US contractor pays $300k to settle accusation it didn't properly look after Medicare users' data

Thu, 17/10/2024 - 00:15
Resolves allegations it improperly stored screenshots containing PII that were later snaffled

A US government contractor will settle claims it violated cyber security rules prior to a breach that compromised Medicare beneficiaries' personal data.…

Categories: News

Critical default credential bug in Kubernetes Image Builder allows SSH root access

Wed, 16/10/2024 - 22:58
It's called leaving the door wide open – especially in Proxmox

A critical bug in Kubernetes Image Builder could allow unauthorized SSH access to virtual machines (VMs) thanks to default credentials being enabled during the image build process.…

Categories: News

Volkswagen monitoring data dump threat from 8Base ransomware crew

Wed, 16/10/2024 - 22:30
The German car giant appears to be unconcerned

The 8Base ransomware crew claims to have stolen a huge data dump of Volkswagen files and is threatening to publish them, but the German car giant appears to be unconcerned.…

Categories: News

Critical hardcoded SolarWinds credential now exploited in the wild

Wed, 16/10/2024 - 21:00
Another blow for IT software house and its customers

A critical, hardcoded login credential in SolarWinds' Web Help Desk line has been exploited in the wild by criminals, according to the US Cybersecurity and Infrastructure Security Agency, which has added the security blunder to its Known Exploited Vulnerabilities (KEV) Catalog.…

Categories: News

China’s infosec leads accuse Intel of NSA backdoor, cite chip security flaws

Wed, 16/10/2024 - 19:30
Uncle Sam having a secret way into US tech? Say it ain't so

A Chinese industry group has accused Intel of backdooring its CPUs, in addition to other questionable security practices while calling for an investigation into the chipmaker, claiming its products pose "serious risks to national security."…

Categories: News

Strengthen your cybersecurity with automation

Wed, 16/10/2024 - 09:38
Find out how to enhance efficiency using Google Security Operations

Webinar  In an era of ever-evolving cyber threats, staying ahead of potential security risks is essential.…

Categories: News

Internet Archive wobbles back online, with limited functionality

Wed, 16/10/2024 - 08:28
DDoS detectives deduce Mirai used to do the deed, using home entertainment boxes in Korea, China, and Brazil

The Internet Archive has come back online, in slightly degraded mode, after repelling an October 9 DDoS attack and then succumbing to a raid on users' data.…

Categories: News

IBM acquires Indian SaaS startup Prescinto to shine a light on renewable energy assets

Wed, 16/10/2024 - 06:25
Also: Crypto-hub Binance helps Delhi police shut down solar power scam

IBM announced on Tuesday it has acquired Prescinto – a Bangalore-based provider of asset performance management software for renewable energy.…

Categories: News

WhatsApp may expose the OS you use to run it – which could expose you to crooks

Wed, 16/10/2024 - 05:26
Messaging service creates persistent user IDs that have different qualities on each device

An analysis of Meta's WhatsApp messaging software reveals that it may expose which operating system a user is running, and their device setup information – including the number of linked devices.…

Categories: News

Cisco confirms 'ongoing investigation' after crims brag about selling tons of data

Tue, 15/10/2024 - 23:30
IntelBroker claims the breach impacts Microsoft, SAP, AT&T, Verizon, T-Mobile US, and more

Cisco has confirmed it is investigating claims of stealing — and now selling — data belonging to the networking giant.…

Categories: News

Pages