The Register
Puppies, kittens, data at risk after 'cyber incident' at veterinary giant
First, they came for hospitals, then it was charities and cancer centers. Now, cyber scumbags are coming for the puppies and kittens.…
Change Healthcare faces second ransomware dilemma weeks after ALPHV attack
Change Healthcare is allegedly being extorted by a second ransomware gang, mere weeks after recovering from an ALPHV attack.…
Head of Israeli cyber spy unit exposed ... by his own privacy mistake
In Brief Protecting your privacy online is hard. So hard, in fact, that even a top Israeli spy who managed to stay incognito for 20 years has found himself exposed after one basic error.…
What can be done to protect open source devs from next xz backdoor drama?
Kettle It's been about a week since the shock discovery of a hidden and truly sophisticated backdoor in the xz software library that ordinarily is used by countless systems.…
US government excoriates Microsoft for 'avoidable errors' but keeps paying for its products
Analysis You might think that when a government supplier fails in one of its key duties it would find itself shunned or at least feel financial pain.…
Hotel check-in terminal bug spews out access codes for guest rooms
A self-service check-in terminal used in a German Ibis budget hotel was found leaking hotel room keycodes, and the researcher behind the discovery claims the issue could potentially affect hotels around Europe.…
Academics probe Apple's privacy settings and get lost and confused
A study has concluded that Apple's privacy practices aren't particularly effective, because default apps on the iPhone and Mac have limited privacy settings and confusing configuration options.…
World's second-largest eyeglass lens-maker blinded by infosec incident
If ever there was an incident that brings the need for good infosec into sharp focus, this is the one: Japan's Hoya – a maker of eyeglass and contact lenses, plus kit used to make semiconductor manufacturing, flat panel displays, and hard disk drives – has halted some production and sales activity after experiencing an attack on its IT systems.…
Feds probe massive alleged classified US govt data theft and leak
Uncle Sam is investigating claims that some miscreant stole and leaked classified information from the Pentagon and other national security agencies.…
Ivanti commits to secure-by-design overhaul after vulnerability nightmare
Ivanti has committed to adopting a secure-by-design approach to security as it gears up for an organizational overhaul in response to the multiple vulnerabilities in Connect Secure exploited earlier this year.…
Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits
Leicester City Council is finally admitting its "cyber incident" was carried out by a ransomware gang and that data was stolen, hours after the criminals forced its hand.…
When AI attacks
Sponsored Post Artificial intelligence (AI) offers enormous commercial potential but also substantial risks to data security if it is harnessed by cyber criminals intent on stealing or corrupting sensitive information for their own gain.…
Nearly 1M medical records feared stolen from City of Hope cancer centers
Nearly one million individuals' personal details, financial account information, and medical records may have been stolen from City of Hope systems in the United States.…
Omni Hotels IT systems down since Friday, hitting bookings, payments, door locks
Luxury resort chain Omni Hotels & Resorts has had its computer systems knocked offline since Friday in what it has described as a "disruption," though sounds a lot like the MGM Resorts ransomware infection over the summer.…
Security pioneer Ross Anderson dies at 67
Obituary Venerable computer scientist and information security expert Ross Anderson has died at the age of 67.…
Google bakes new cookie strategy that will leave crooks with a bad taste
Google reckons that cookie theft is a problem for users, and is seeking to address it with a mechanism to tie authentication data to a specific device, rendering any stolen cookies useless.…
Meet clickjacking's slicker cousin, 'gesture jacking,' aka 'cross window forgery'
Web browsers still struggle to prevent clickjacking, an attack technique first noted in 2008 that repurposes web page interface elements to deceive visitors.…
Microsoft slammed for lax security that led to China's cyber-raid on Exchange Online
A review of the June 2023 attack on Microsoft's Exchange Online hosted email service – which saw accounts used by senior US officials compromised by a China-linked group called "Storm-0558" – has found that the incident would have been preventable save for Microsoft's lax infosec culture and sub-par cloud security precautions.…
Feds finally decide to do something about years-old SS7 spy holes in phone networks
The FCC appears to finally be stepping up efforts to secure decades-old flaws in American telephone networks that are allegedly being used by foreign governments and surveillance outfits to remotely spy on and monitor wireless devices.…
OWASP server blunder exposes decade of resumes
A misconfigured MediaWiki web server allowed digital snoops to access members' resumes containing their personal details at the Open Web Application Security Project (OWASP) Foundation.…