The Register
Microsoft's Patch Tuesday baker's dozen: 12 critical bugs plus a SharePoint RCE
Microsoft’s August Patch Tuesday flaw-fixing festival addresses 111 problems in its products, a dozen of which are deemed critical, and one moderate-severity flaw that is listed as being publicly known.…
Manpower franchise discloses data theft after RansomHub posts alleged stolen data
Global staffing firm Manpower confirmed ransomware criminals broke into its Lansing, Michigan franchise's network and stole personal information belonging to 144,189 people, months after the extortionists claimed that they pilfered "all of [the company's] confidential data." …
Major outage at Pennsylvania Attorney General's Office blamed on 'cyber incident'
The Pennsylvania's Office of Attorney General (OAG) is blaming a digital blackout of its services on a "cyber incident."…
BlackSuit ransomware crew loses servers, domains, and $1m in global shakedown
In a display of bureaucratic bravado, US law enforcement agencies say they've “disrupted” the BlackSuit ransomware gang (also known as Royal), freeing millions of dollars in virtual currency from its clutches.…
Oh, great.Three notorious cybercrime gangs appear to be collaborating
Prolific cybercrime collectives Scattered Spider, ShinyHunters, and Lapsus$ appear to have come together in a new Telegram channel that shares news of their exploits.…
Hyundai: Want cyber-secure car locks? That'll be £49, please
Hyundai is charging UK customers £49 ($66) for a security upgrade to prevent thieves from bypassing its car locks.…
The White House could end UK's decade-long fight to bust encryption
Analysis The Home Office's war on encryption – its most technically complex and controversial aspect of modern policymaking yet – is starting to look like battlefield failure after more than ten years of skirmishes.…
Poisoned telemetry can turn AIOps into AI Oops, researchers show
Automating IT operations using AI may not be the best idea at the moment.…
Russia's RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks
Russia-linked attackers found and exploited a high-severity WinRAR vulnerability before the maintainers of the Windows file archiver issued a fix.…
US scrambles to recoup $1M+ nicked by NORKs
The US Department of Justice is trying to recoup around $1 million that three IT specialists secretly working for the North Korean government allegedly stole from a New York company.…
Red teams are safe from robots for now, as AI makes better shield than spear
Black Hat/DEF CON At the opening of Black Hat, the largest security shindig in the Hacker Summer Camp week ahead of DEF CON and BSides, the opening keynote speaker suggested the current state of AI slightly favors defenders over attackers, but he warned that was not a given for much longer.…
Wikimedia Foundation loses first court battle to swerve Online Safety Act regulation
Wikipedia today lost a legal battle against the UK's tech secretary to tighten the criteria around the Online Safety Act 2023 (OSA), as it seeks to exclude itself from the strictest regulations.…
Intel chief Lip-Bu Tan to visit White House after Trump calls for him to step down
Intel boss Lip-Bu Tan reportedly has an appointment at the White House today, just days after President Donald Trump called for his resignation. The move comes as Intel's former CEO Craig Barrett weighs in on the troubled chipmaker's future.…
Deepfake detectors are slowly coming of age, at a time of dire need
DEF CON While AI was on everyone's lips in Las Vegas this week at the trio of security conferences in Sin City – BSides, Black Hat, AND DEF CON – there were a lot of people using the F-word too: fraud.…
UK retail giant M&S restores Click & Collect months after cyber attack, some services still down
British retailer Marks and Spencer updated its website today, confirming its Click & Collect service is once again available to customers.…
Your CV is not fit for the 21st century – time to get it up to scratch
The job market is queasy and since you're reading this, you need to upgrade your CV. It's going to require some work to game the poorly trained AIs now doing so much of the heavy lifting. I know you don't want to, but it's best to think of this as dealing with a buggy lump of undocumented code, because frankly that's what is between you and your next job.…
Trend Micro offers weak workaround for already-exploited critical vuln in management console
Infosec In Brief A critical vulnerability in the on-prem version of Trend Micro's Apex One endpoint security platform is under active exploitation, the company admitted last week, and there's no patch available.…
DEF CON hackers plug security holes in US water systems amid tsunami of threats
def con A DEF CON hacker walks into a small-town water facility…no, this is not the setup for a joke or a (super-geeky) odd-couple rom-com. It's a true story that happened at five utilities across four states.…
The inside story of the Telemessage saga, and how you can view the data
DEF CON On Saturday at DEF CON, security boffin Micah Lee explained just how he hacked into TeleMessage, the supposedly secure messaging app used by White House officials, which in turn led to a massive database dump of their communications.…
Chinese biz using AI to hit US politicians, influencers with propaganda
DEF CON A cache of documents uncovered by Vanderbilt University has revealed disturbing details about how a Chinese company is building up a database of US politicians and influencers with whom to share propaganda.…