News

Salt Typhoon may have accessed court-ordered wiretaps and US internet traffic

Verizon, AT&T, and Lumen Technologies were among the US broadband providers whose networks were reportedly hacked by Chinese cyberspies, possibly compromising the wiretapping systems used for court-ordered surveillance.…

Struggle ye not with cookies, lest ye become a cookie monster

Opinion  The people are defeated. Worn out, deflated, and apathetic about the barrage of banners and pop-ups about cookies and permissions.…

Irish data watchdog opens probe after 'numerous complaints'

Ireland's Data Protection Commission (DPC) has launched an inquiry into Ryanair's Customer Verification Process for travelers booking flights through third-party websites or online travel agents (OTA).…

Radioactive hazards and cyber failings ... what could possibly go wrong?

The outfit that runs Britain's Sellafield nuclear waste processing and decommissioning site has been fined £332,500 ($440,000) by the nation's Office for Nuclear Regulation (ONR) for its shoddy cybersecurity practices between 2019 and 2023.…

Cable giant says ransomware involved, FBCS keeps schtum

Comcast says data on 237,703 of its customers was in fact stolen in a cyberattack on a debt collector it was using, contrary to previous assurances it was given that it was unaffected by that intrusion.…

Not a great look when the iGiant just launched its first password manager

Apple just fixed a duo of security bugs in iOS 18.0.1 and iPadOS 18.0.1, one of which might cause users' saved passwords to be read aloud. It's hardly an ideal situation for the visually impaired.…

Get together with the European cybersecurity community at a two-day conference in London this December

Sponsored Post  This year's CyberThreat returns to London to provide a place for cybersecurity professionals to share experiences, new tools and techniques to help organisations stay ahead of the latest cyber threats.…

'You can build this in a few days – even as a very naïve developer'

A pair of inventive Harvard undergraduates have created what they believe could be one of the most intrusive devices ever built – a wake-up call, they tell The Register, for the world to take privacy seriously in the AI era.…

Gangs hit 5% of all Adobe Commerce, Magento-powered stores, Sansec says

Ray-Ban, National Geographic, Whirlpool, and Segway are among thousands of brands whose web stores were reportedly compromised by criminals exploiting the CosmicSting flaw in hope of stealing shoppers' payment card info as they order stuff online.…

Winter is coming

The US Department of Justice and Microsoft have seized 107 websites used by Russian cyberspies in a phishing campaign to steal sensitive information from US government agencies, think tanks, and other victims.…

Best way to boost your package is to leave, or pretend to

A survey of nearly 700 CISOs in the US and Canada has found that salaries have risen over the last year to an average of $565,000 and a median of $403,000, with the top 10 percent of execs pulling in over $1 million.…

Fraudsters targeted local government, colleges, and construction firms in Texas and North Carolina

Two British-Nigerian men were sentenced for serious business email compromise schemes in the US this week, netting them millions of dollars from local government entities, construction companies, and colleges.…

Crooks 'like a sysadmin, with a malicious slant'

Exclusive  An extortionist armed with a new variant of MedusaLocker ransomware has infected more than 100 organizations a month since at least 2022, according to Cisco Talos, which recently discovered a "substantial" Windows credential data dump that sheds light on the criminal and their victims.…

Managing the endless stream of cookie banners leaves little energy for anything else

Fewer than one in five Brits report being happy with the way their personal data is handled by big tech companies, yet the furthest many will go is to reject optional cookies on the web.…

With 14 serious security flaws found, what a gift for spies and crooks

Fourteen bugs in DrayTek routers — including one critical remote-code-execution flaw that received a perfect 10 out of 10 CVSS severity rating — could be abused by crooks looking to seize control of the equipment to then steal sensitive data, deploy ransomware, and launch denial-of-service attacks.…

Poor use of PHP include() strikes again

Two trivial but critical security holes have been found in Optigo's Spectra Aggregation Switch, and so far no patch is available.…

Logjam 'hurting infosec processes world over' one expert tells us as US body blows its own Sept deadline

NIST has made some progress clearing its backlog of security vulnerability reports to process – though it's not quite on target as hoped.…

Attacks began the day after public disclosure

"Patch yesterday" is the advice from infosec researchers as the latest critical vulnerability affecting Zimbra mail servers is now being mass-exploited.…

Strategies for securing intellectual property in AI systems

Webinar  As enterprises increasingly incorporate AI, the challenge of protecting private intellectual property (IP) often becomes more difficult.…

Bother, given the White House has bet big on RPKI – just like we all rely on immature internet infrastructure that usually works

The Resource Public Key Infrastructure (RPKI) protocol has "software vulnerabilities, inconsistent specifications, and operational challenges" according to a pre-press paper from a trio of German researchers.…