The Register

Are you trying to make this easy for China and Russia?

Who bought it, who installed it, and what's happening with the data on it.…

Don't laugh: The $4.5m fine proposed for carrier Telnyx shows how the Trump administration will run its comms regulator

In its first enforcement action of the Trump presidency, the FCC has voted to propose fining Telnyx $4,492,500 – after scammers pretending to be the watchdog's staff started calling actual FCC staffers via the VoIP telco.…

Some worry multi-lang codebase makes it harder to maintain open source uber-project, others disagree

Developers trying to add Rust code to the Linux kernel continue to face opposition from kernel maintainers who believe using multiple languages is an unwelcome and risky complication.…

Nothing to see here, just a 'special government employee' doing his job

The US Treasury Department has assured Congress that a "special government employee" associated with Elon Musk's Department of Government Efficiency (DOGE) has "read-only" access to vital federal government payment systems that disburse trillions of dollars annually.…

International security squads all focus on stopping baddies busting in through routers, IoT kit etc

Netgear is advising customers to upgrade their firmware after it patched two critical vulnerabilities affecting multiple routers.…

Mountain View clocked onto the scheme with days to spare

A Chinese national faces a substantial stint in prison and heavy fines if found guilty of several additional charges related to economic espionage and theft of trade secrets at Google.…

Malicious microcode vulnerability discovered, fixes rolling out for Epycs at least

Googlers have not only figured out how to break AMD's security – allowing them to load unofficial microcode into its processors to modify the silicon's behavior as they wish – but also demonstrated this by producing a microcode patch that makes the chips always output 4 when asked for a random number.…

Researcher says ecosystem's auto-caching is a net positive but presents exploitable quirks

A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.…

Contact info and partial payment details may be compromised

US food and grocery delivery platform Grubhub says a security incident at a third-party service provider is to blame after user data was compromised.…

Suspect, still at large, said to back concept that 'code is law'

New York feds today unsealed a five-count criminal indictment charging a 22-year-old Canadian math prodigy with exploiting vulnerabilities in two decentralized finance protocols, allegedly using them to fraudulently siphon around $65 million from investors in the platforms.…

Healthcare chiefs say impact will persist for months

NHS execs admit that last year's cyberattack on hospitals in Wirral, northwest England, continues to "significantly" impact waiting times for cancer treatments, and suspect this will last for "months."…

When cloud customers don't clean up after themselves, part 97

Abandoned AWS S3 buckets could be reused to hijack the global software supply chain in an attack that would make Russia's "SolarWinds adventures look amateurish and insignificant," watchTowr Labs security researchers have claimed.…

Tackle longstanding issues around productivity, cyber resilience and public sector culture, advises spending watchdog

The UK's government spending watchdog has called on the current administration to make better use of technology to kickstart the misfiring economy and ensure better delivery public services amid tightened budgets.…

Also, Netgear fixes critical router, access point vulnerabilities

Google has released its February Android security updates, including a fix for a high-severity kernel-level vulnerability, which is suspected to be in use by targeted exploits.…

Going beyond the traditional “Prevent, Detect, and Respond” framework and taking a proactive approach

Partner Content  In today's highly connected and technology-driven world, digital resilience is not just a competitive advantage for banks - it is a necessity.…

Senators ask, Homeland Security watchdog answers: Is it worth the money?

The Department of Homeland Security's Inspector General has launched an audit of the Transportation Security Administration's use of facial recognition technology at US airports, following criticism from lawmakers and privacy advocates.…

Investigating compensation to police whose sensitive info was leaked in 2023

The Police Service of Northern Ireland (PSNI) has bailed two officers after they were arrested as part of a fraud investigation related to the payments to cops whose sensitive data was mistakenly published in 2023.…

Australian government staff mixed medical info for folk who share names and birthdays

Australia’s privacy commissioner has found that government agencies down under didn’t make enough of an effort to protect data describing “digital doppelgangers” – people who share a name and date of birth and whose government records sometimes contain data describing other people.…

PLUS: MGM settles breach suits; AWS doesn't trust you with security defaults; A new .NET backdoor; and more

Infosec in brief  The United States Food and Drug Administration has told medical facilities and caregivers that monitor patients using Contec equipment to disconnect the devices from the internet ASAP.…

As if secure design is the only bullet point in a list of software engineering best practices

Systems Approach  As my Systems Approach co-author Bruce Davie and I think through what it means to apply the systems lens to security, I find that I keep asking myself what it is, exactly, that’s unique about security as a system requirement?…