The Register
These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb
The German Federal Office for Information Security (BIS) has issued an urgent alert about the poor state of Microsoft Exchange Server patching in the country.…
AI hallucinates software packages and devs download them – even if potentially poisoned with malware
In-depth Several big businesses have published source code that incorporates a software package previously hallucinated by generative AI.…
Execs in Japan busted for winning dev bids then outsourcing to North Koreans
Two executives were issued arrest warrants in Japan on Wednesday, reportedly for charges related to establishing a business that outsourced work to North Korean IT engineers.…
China encouraged armed offensive against Myanmar government to protest proliferation of online scams
The military junta controlling Myanmar has struggled to control all of its territory thanks in part to China backing rebel forces as a way of expressing its displeasure about cyberscam centers operating from the country.…
Apple fans flooded with phony password reset requests
Apple device owners, consider yourselves warned: A targeted multi-factor authentication bombing campaign is going around with the goal of exhausting iUsers into accidentally allowing a password reset.…
Majority of Americans now use ad blockers
More than half of Americans are using ad blocking software, and among advertising, programming, and security professionals that fraction is more like two-thirds to three-quarters.…
'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw
Thousands of companies remain vulnerable to a remote-code-execution bug in Ray, an open-source AI framework used by Amazon, OpenAI, and others, that is being abused by miscreants in the wild to steal sensitive data and illicitly mine for cryptocurrency.…
Meta accused of snarfing people's Snapchat data via traffic decryption
To spy on rival Snapchat and get data on how the app was being used, Meta – when it was operating as Facebook – allegedly initiated a program called Project Ghostbusters, which intercepted data traffic from mobile apps. And it used that data to harm its competitors' ad business.…
Google reveals zero-day exploits in enterprise tech surged 64% last year
Zero-day exploits targeting enterprise-specific software and appliances are now outpacing zero-day bugs overall, according to Google's threat hunting teams.…
Street newspaper appears to have Big Issue with Qilin ransomware gang
The parent company of The Big Issue, a street newspaper and social enterprise for homeless people, is wrestling with a cybersecurity incident claimed by the Qilin ransomware gang.…
The easy road to pervasive DLP
Sponsored Post The coronavirus pandemic appears to have changed the employment landscape forever, with estimates suggesting that up to a quarter of staff still spend some of their working week outside of the office compared to just 6 percent prior to 2020.…
Uncle Sam's had it up to here with 'unforgivable' SQL injection flaws
The US has clearly had enough of software vendors shipping products with "unforgivable" vulnerabilities, and is now urging them to launch formal code reviews to stamp out SQL injection flaws.…
Ransomware can mean life or death at hospitals, but DEF CON hackers have a plan
Interview As ransomware gangs target critical infrastructure – especially hospitals and other healthcare organizations – DARPA has added another government agency partner to its Artificial Intelligence Cyber Challenge (AIxCC).…
FreeBSD Foundation hands out Beacon gongs for safer software
The inaugural Beacon Awards has handed three prizes to projects working on safer software for CHERI-enabled hardware running on the CheriBSD operating system.…
UK elections are unaffected by China's cyber-interference, says deputy PM
The UK's deputy prime minister, Oliver Dowden, says China has been unsuccessful in its attempts to undermine UK elections.…
Row breaks out over true severity of two DNSSEC flaws
Two DNSSEC vulnerabilities were disclosed last month with similar descriptions and the same severity score, but they are not the same issue.…
New Zealand to world: China attacked us, too!
The government of South Pacific island nation New Zealand has revealed that it, too, has been attacked by China.…
US charges Chinese nationals with cyber-spying on pretty much everyone for Beijing
The United States on Monday accused seven Chinese men of breaking into computer networks, email accounts, and cloud storage belonging to numerous critical infrastructure organizations, companies, and individuals, including US businesses, politicians, and their political parties.…
Over 170K users caught up in poisoned Python package ruse
More than 170,000 users are said to have been affected by an attack using fake Python infrastructure with "successful exploitation of multiple victims."…
Tech trade union confirms cyberattack behind IT, email outage
Exclusive The Communications Workers Union (CWU), which represents hundreds of thousands of employees in sectors across the UK economy including tech and telecoms, is currently working to mitigate a cyberattack.…