The Register
Pandabuy admits to data breach of 1.3 million unique records
Ecommerce platform Pandabuy has apologized after two cybercriminals were spotted hawking personal data belonging to 1.3 million customers.…
Microsoft warns deepfake election subversion is disturbingly easy
As hundreds of millions of voters around the globe prepare to elect their leaders this year, there's no question that trolls will try to sway the outcomes using AI, according to Clint Watts, general manager of Microsoft's Threat Analysis Center.…
Rubrik files to go public following alliance with Microsoft
Cloud security provider Rubrik has filed for an IPO on the New York Stock Exchange following a flurry of similar flotations.…
Polish officials may face criminal charges in Pegasus spyware probe
Former Polish government officials may face criminal charges following an investigation into their use of the notorious spyware Pegasus to surveil political opponents and others.…
INC Ransom claims to be behind 'cyber incident' at UK city council
The cyber skids at INC Ransom are claiming responsbility for the ongoing cybersecurity incident at Leicester City Council, according to a post caught by eagle-eyed infosec watchers.…
Happy 20th birthday Gmail, you're mostly grown up – now fix the spam
It was 20 years ago on Monday that Google unleashed Gmail on the world, and the chocolate factory is celebrating with new rules that just might, hopefully, cut down on the amount of spam users receive.…
Apple's GoFetch silicon security fail was down to an obsession with speed
Opinion Apple is good at security. It's good at processors. Thus GoFetch, a major security flaw in its processor architecture, is a double whammy.…
Six banks share customer info to help Singapore fight money laundering
ASIA IN BRIEF Singapore's Monetary Authority on Monday launched an application, intuitively named "COllaborative Sharing of Money Laundering/TF Information & Cases" (COSMIC for short, obviously) to target money laundering and terrorism financing.…
US House of Reps tells staff: No Microsoft Copilot for you!
Staff working at the US House Of Representatives have been barred from using Microsoft's Copilot chatbot and AI productivity tools, pending the launch of a version tailored to the needs of government users.…
Malicious xz backdoor reveals fragility of open source
Analysis The discovery last week of a backdoor in a widely used open source compression library called xz could have been a security disaster had it not been caught by luck and atypical curiosity about latency from a Microsoft engineer.…
Nearly 3M people hit in Harvard Pilgrim healthcare data theft
Infosec in brief Nearly a year on from the discovery of a massive data theft at healthcare biz Harvard Pilgrim, and the number of victims has now risen to nearly 2.9 million people in all US states.…
Ex-White House CIO tells The Reg: TikTok ban may be diplomatic disaster
Interview Congress is mulling legislation that will require TikTok's Chinese parent ByteDance to cut ties with the video-sharing mega-app, or the social network will be banned in the USA.…
AT&T admits massive 70m+ mid-March data dump is real, but claims it's years old
That rumored AT&T dark web customer data dump from mid-March has been confirmed, and it's a whopper: A total of more than 73 million current and former customers are included in the cache, AT&T confirmed over the weekend.…
Rust developers at Google are twice as productive as C++ teams
Echoing the past two years of Rust evangelism and C/C++ ennui, Google reports that Rust shines in production, to the point that its developers are twice as productive using the language compared to C++.…
Malicious SSH backdoor sneaks into xz, Linux world's data compression library
Red Hat on Friday warned that a malicious backdoor found in the widely used data compression library xz may be present in the upcoming Fedora Linux 40 and in the Fedora Rawhide developer distribution.…
Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching
A Linux privilege-escalation proof-of-concept exploit has been published that, according to the bug hunter who developed it, typically works effortlessly on kernel versions between at least 5.14 and 6.6.14. …
JetBrains keeps mum on 26 'security problems' fixed after Rapid7 spat
JetBrains TeamCity users are urged to apply the latest version upgrade this week after the vendor disclosed 26 new security issues in the CI/CD web application.…
FTX crypto-crook Sam Bankman-Fried gets 25 years in prison
Fallen crypto-king Sam Bankman-Fried has been jailed for 25 years after New York federal judge Lewis Kaplan expressed disbelief at almost every argument from his legal team.…
Nvidia's newborn ChatRTX bot patched for security bugs
Nvidia's AI-powered ChatRTX app launched just six week ago but already has received patches for two security vulnerabilities that enabled attack vectors, including privilege escalation and remote code execution.…
US critical infrastructure cyberattack reporting rules inch closer to reality
America's long-awaited cyber attack reporting rules for critical infrastructure operators are inching closer to implementation, after the Feds posted a notice of proposed rulemaking for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).…