The Register

Subscribe to The Register feed
Biting the hand that feeds IT — Enterprise Technology News and Analysis
Updated: 53 min 10 sec ago

Fortinet: FortiGate config leaks are genuine but misleading

Fri, 17/01/2025 - 18:32
Competition hots up with Ivanti over who can have the worst start to a year

Fortinet has confirmed that previous analyses of records leaked by the Belsen Group are indeed genuine FortiGate configs stolen during a zero-day raid in 2022.…

Categories: News

Clock ticking for TikTok as US Supreme Court upholds ban

Fri, 17/01/2025 - 17:15
With Biden reportedly planning to skirt enforcement and kick the can to Trump, this saga might still not be over

updated  The US Supreme Court has upheld a law requiring TikTok to either divest from its Chinese parent company ByteDance or face a ban in the United States. The decision eliminates the final legal obstacle to the federal government forcing a shutdown of the platform on January 19.…

Categories: News

Six vulnerabilities in ubiquitous rsync tool announced and fixed in a day

Fri, 17/01/2025 - 15:49
Turns out tool does both file transfers and security fixes fast

Don't panic. Yes, there were a bunch of CVEs affecting potentially hundreds of thousands of users found in rsync in early December – and made public on Tuesday – but a fixed version came out the same day, and was further tweaked for better compatibility the following day.…

Categories: News

Medusa ransomware group claims attack on UK's Gateshead Council

Fri, 17/01/2025 - 10:30
Pastes allegedly stolen documents on leak site with £600K demand

Another year and yet another UK local authority has been pwned by a ransomware crew. This time it's Gateshead Council in North East England at the hands of the Medusa group.…

Categories: News

Microsoft eggheads say AI can never be made secure – after testing Redmond's own products

Fri, 17/01/2025 - 07:42
If you want a picture of the future, imagine your infosec team stamping on software forever

Microsoft brainiacs who probed the security of more than 100 of the software giant's own generative AI products came away with a sobering message: The models amplify existing security risks and create new ones.…

Categories: News

Just as your LLM once again goes off the rails, Cisco, Nvidia are at the door smiling

Fri, 17/01/2025 - 02:30
Some of you have apparently already botched chatbots or allowed ‘shadow AI’ to creep in

Cisco and Nvidia have both recognized that as useful as today's AI may be, the technology can be equally unsafe and/or unreliable – and have delivered tools in an attempt to help address those weaknesses.…

Categories: News

GM parks claims that driver location data was given to insurers, pushing up premiums

Fri, 17/01/2025 - 00:49
We'll defo ask for permission next time, automaker tells FTC

General Motors on Thursday said that it has reached a settlement with the FTC "to address privacy concerns about our now-discontinued Smart Driver program."…

Categories: News

Russia's Star Blizzard phishing crew caught targeting WhatsApp accounts

Thu, 16/01/2025 - 19:15
FSB cyberspies venture into a new app for espionage, Microsoft says

Star Blizzard, a prolific phishing crew backed by the Russian Federal Security Service (FSB), conducted a new campaign aiming to compromise WhatsApp accounts and gain access to their messages and data, according to Microsoft.…

Categories: News

Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M

Thu, 16/01/2025 - 17:32
That's in addition to the $4.5M fine paid to three state AGs last year

Enzo Biochem has settled a consolidated class-action lawsuit relating to its 2023 ransomware incident for $7.5 million.…

Categories: News

Cybersecurity rethink - from reaction to resilience

Thu, 16/01/2025 - 16:11
Proactive strategies for data security and identity management in 2025

Webinar  Are you tired of constant firefighting in the ever-changing cybersecurity landscape?…

Categories: News

Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge

Thu, 16/01/2025 - 15:15
Power-induced glitches, lasers, and electromagnetic fields are all tools of the trade

Raspberry Pi has given out prizes for extracting a secret value from the one-time-programmable (OTP) memory of the Raspberry Pi RP2350 microcontroller – awarding a pile of cash to all four entrants.…

Categories: News

Infoseccer: Private security biz let guard down, exposed 120K+ files

Thu, 16/01/2025 - 10:36
Assist Security’s client list includes fashion icons, critical infrastructure orgs

A London-based private security company allegedly left more than 120,000 files available online via an unsecured server, an infoseccer told The Register.…

Categories: News

GoDaddy slapped with wet lettuce for years of lax security and 'several major breaches'

Wed, 15/01/2025 - 23:47
Watchdog alleged it had no SIEM or MFA, orders rapid adoption of basic infosec tools

GoDaddy has failed to protect its web-hosting platform with even basic infosec tools and practices since 2018, according to the FTC, but the internet giant won’t face any immediate consequences for its many alleged acts of omission.…

Categories: News

DJI loosens flight restrictions, decides to trust operators to follow FAA rules

Wed, 15/01/2025 - 22:30
Right after one of its drones crashed into an aircraft fighting California wildfires? Great timing

Drone maker DJI has decided to scale back its geofencing restrictions, meaning its software won't automatically stop operators from flying into areas flagged as no-fly zones. …

Categories: News

China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says

Wed, 15/01/2025 - 20:30
We are only seeing 'the tip of the iceberg,' Easterly warns

Beijing's Salt Typhoon cyberspies had been seen in US government networks before telcos discovered the same foreign intruders in their own systems, according to CISA boss Jen Easterly.…

Categories: News

Even modest makeup can thwart facial recognition

Wed, 15/01/2025 - 18:45
You may not need to go full Juggalo for the sake of privacy

Researchers at cyber-defense contractor PeopleTec have found that facial-recognition algorithms' focus on specific areas of the face opens the door to subtler surveillance avoidance strategies.…

Categories: News

Windows Patch Tuesday hits snag with Citrix software, workarounds published

Wed, 15/01/2025 - 17:15
Microsoft starts 2025 as it hopefully doesn't mean to go on

Devices that have Citrix's Session Recording software installed are having problems completing this month's Microsoft Patch Tuesday update, which includes important fixes.…

Categories: News

Crypto klepto North Korea stole $659M over just 5 heists last year

Wed, 15/01/2025 - 14:45
US, Japan, South Korea vow to intensify counter efforts

North Korean blockchain bandits stole more than half a billion dollars in cryptocurrency in 2024 alone, the US, Japan, and South Korea say.…

Categories: News

Microsoft fixes under-attack privilege-escalation holes in Hyper-V

Wed, 15/01/2025 - 01:33
Plus: Excel hell, angst for Adobe fans, and life's too Snort for Cisco

Patch Tuesday  The first Patch Tuesday of 2025 has seen Microsoft address three under-attack privilege-escalation flaws in its Hyper-V hypervisor, plus plenty more problems that deserve your attention.…

Categories: News

FBI wipes Chinese PlugX malware from thousands of Windows PCs in America

Tue, 14/01/2025 - 19:40
Hey, Xi: Zài jiàn!

The FBI, working with French cops, obtained nine warrants to remotely wipe PlugX malware from thousands of Windows-based computers that had been infected by Chinese government-backed criminals, according to newly unsealed court documents.…

Categories: News

Pages