Menu



Gallery

‘Anomalous surge in DNS queries’ knocked Microsoft’s cloud off the web last week
April 6, 2021
Facebook says dump of 533m accounts is old news. But my date of birth, name, etc haven’t changed in years, Zuck
April 5, 2021
QNAP caught napping as disclosure delay expires, critical NAS bugs revealed
April 2, 2021
Criminals send out fake “census form” reminder – don’t fall for it!
April 1, 2021
S3 Ep26: Apple 0-day, crypto vulnerabilities and PHP backdoor [Podcast]
April 1, 2021
Dutch watchdog fines Booking.com €475k after it kept customer data thefts quiet for more than 3 weeks
April 1, 2021
Wi-Fi slinger Ubiquiti hints at source code leak after claim of ‘catastrophic’ cloud intrusion emerges
April 1, 2021
How Cybereason is reversing the adversary advantage
March 31, 2021
Pair accused of turning photos into vids to crack tax dept facial recognition system in China
March 31, 2021
Payment app MobiKwik denies customer data was stolen from it, has no idea how the info ended up on the dark web: Maybe it was your fault?
March 31, 2021
Browser tracking protections won’t stop tracking, warns DuckDuckGo
March 30, 2021
Mozilla VPN now nudges users to put shields up on dodgy networks, adds LAN access
March 30, 2021
And that’s yet another UK education body under attack from ransomware: Servers, email, phones yanked offline
March 30, 2021
Money can buy you insurance against network break-ins but investing in infosec hygiene wouldn’t go amiss, says new NCSC chief
March 30, 2021
The cloud attack you didn’t see coming
March 30, 2021
UK’s Home Office dangles £32m for application support on comms-snooping network
March 30, 2021
Intel accused of wiretapping because it uses analytics to track keystrokes, mouse movements on its website
March 30, 2021
After oil giant Shell hit by Clop ransomware gang, workers’ visas dumped online as part of extortion attempt
March 29, 2021
Sitting comfortably? Then it’s probably time to patch, as critical flaw uncovered in npm’s netmask package
March 29, 2021
UK terror law reviewer calls for expanded police powers to imprison people who refuse to hand over passwords
March 29, 2021
Scottish National Party members found among list of names signed up to rival Alba Party after website whoopsie
March 29, 2021
PHP repository moved to GitHub after malicious code inserted under creator Rasmus Lerdorf’s name
March 29, 2021
Patch alert for Apple fans: Cybercrooks have already been exploiting this flaw in iPhones, iPads, and watches
March 29, 2021
Blockchain may be the machinery of mischief, but it can’t help telling the truth
March 29, 2021
Which cyberthreat should you care about most? Here’s a clue … all of them
March 29, 2021
OpenSSL shuts down two high-severity bugs: Flaws enable cert shenanigans, denial-of-service attacks
March 25, 2021
Defence Industrial Strategy suggests the UK is ready to start taking its homegrown infosec industry seriously
March 25, 2021
The pandemic-driven rush to cloud is compromising security
March 23, 2021
Authorization is the next big technical challenge
March 22, 2021
Google’s OSS-Fuzz extends fuzzing to Java apps
March 12, 2021
150,000 security cameras allegedly breached in “too much fun” hack
March 10, 2021
Belgian cops crack down on encrypted phone network Sky ECC in 200 overnight raids as firm denies criminal ties
March 10, 2021
Brit cybercops issue tender to rip and replace their formerly flaw-ridden CyberAlarm tool
March 10, 2021
Missing colleagues in cybersecurity? That’s no surprise – the world is missing 3.5 million
March 10, 2021
India pauses blockchain-powered SMS spam-scrubber after it swallows people’s one-time login codes
March 10, 2021
Beware the IDEs of March: Microsoft’s latest monthly fixes land after frantic Exchange Server updates
March 9, 2021
US newspaper’s ‘Biden will hack Russia’ claim: A good way to reassure Putin you’ll leave him alone
March 9, 2021
European Banking Authority restores email service in wake of Microsoft Exchange hack
March 9, 2021
Serious Security: Webshells explained in the aftermath of HAFNIUM attacks
March 9, 2021
So it appears some of you really don’t want us to use the word ‘hacker’ when we really mean ‘criminal’
March 9, 2021
GitHub bug briefly gave valid authenticated session cookies to wrong users
March 9, 2021
Azure flings out free virtual trusted platform module for cloudy VMs
March 9, 2021
Apple emits patches for iOS, macOS, Safari, etc to stop dodgy websites hijacking people’s gadgets
March 9, 2021
Google engineer urges web devs to step up and secure their code in this data-spilling Spectre-haunted world
March 8, 2021
McAfee to offload enterprise business for $4bn, focus on consumer security
March 8, 2021
University of the Highlands and Islands shuts down campuses as it deals with ‘ongoing cyber incident’
March 8, 2021
SolarWinds just keeps getting worse: New strain of backdoor malware found in probe
March 8, 2021
Cybersecurity in 2021: Stopping the madness
March 8, 2021
6 security risks in software development and how to address them
March 8, 2021
The torture garden of Microsoft Exchange: Grant us the serenity to accept what they cannot EOL
March 8, 2021
US National Security Council urges review of Exchange Servers in wake of Hafnium attack
March 8, 2021
Intel CPU interconnects can be exploited by malware to leak encryption keys and other info, academic study finds
March 8, 2021
Poison packages – “Supply Chain Risks” user hits Python community with 4000 fake modules
March 7, 2021
EFF urges Google to ground its FLoC: ‘Pro-privacy’ third-party cookie replacement not actually great for privacy
March 5, 2021
Oh SITA: Airline IT provider confirms passenger data leaked after major ‘cyber-attack’
March 5, 2021
While Reg readers know the difference between a true hacker and cyber-crook, for everyone else, hacking means illegal activity
March 5, 2021
Dutch government: Did we say 10 ‘high data protection risks’ in Google Workspace block adoption? Make that 8
March 5, 2021
Biden administration labels China top tech threat, promises proportionate responses to cyberattacks
March 5, 2021
AdGuard names 6,000+ web trackers that use CNAME chicanery: Feel free to feed them into your browser’s filter
March 4, 2021
Like a challenge in a high profile ‘face-of-IT’ role? Welcome to the Home Office
March 4, 2021
Using TikTok? Check out these six security tips
March 4, 2021
Would you let users vouch for unknown software’s safety with an upvote? Google does
March 4, 2021
Another Chrome zero-day exploit – so get that update done!
March 4, 2021
How (NOT?!) to jailbreak your iPhone
March 3, 2021
Qualys hit with ransomware: Customer invoices leaked on extortionists’ Tor blog
March 3, 2021
Proof of concept code published for latest Saltstack CVE: Don’t be an update laggard
March 3, 2021
Cybersecurity threats aren’t getting any smaller. Could big data help?
March 3, 2021
I see you: your home-working photos reveal more than you think!
March 3, 2021
It’s not easy being green: EV HTTPS cert seller Sectigo questions Chrome’s logic in burying EV HTTPS cert info
March 3, 2021
Hacking is not a crime – and the media should stop using ‘hacker’ as a pejorative
March 3, 2021
TPG buys Thycotic, immediately merges it with Centrify to create ~$230m access management monster
March 3, 2021
Microsoft promises end-to-end encrypted Teams calls for some, invites you to go passwordless with Azure AD
March 3, 2021
Eugene Kaspersky says cyber-crooks coined it during COVID and will take a break to spend their loot
March 3, 2021
Microsoft fixes four zero-day flaws in Exchange Server exploited by China’s ‘Hafnium’ spies to steal victims’ data
March 3, 2021
Search crimes – how the Gootkit gang poisons Google searches
March 2, 2021
Gootkit malware crew using SEO to get pwned websites in front of unwitting marks
March 2, 2021
Perl.com theft blamed on social engineering attack: Registrar ‘convinced’ to alter DNS records by miscreants
March 2, 2021
Chinese businessman plotted with GE insider to steal transistor secrets, say Feds
March 1, 2021
Malware attack that crippled Mumbai’s power system came from China, claims infosec intel outfit Recorded Future
March 1, 2021
Cyber-attackers work 24/7 … but what about your security team?
March 1, 2021
Mobile spyware fan Saudi Crown Prince accused by US intel of Khashoggi death
March 1, 2021
Imperva pretty adamant that security analytics aggregator product Sonar is not ‘one dashboard to rule them all’
February 26, 2021
Google looks at bypass in Chromium’s ASLR security defense, throws hands up, won’t patch garbage issue
February 26, 2021
Half a million stolen French medical records, drowned in feeble excuses
February 26, 2021
India’s demand to identify people on chat apps will ‘break end-to-end encryption’, say digital rights warriors
February 26, 2021
1Password has none, KeePass has none… So why are there seven embedded trackers in the LastPass Android app?
February 25, 2021
UK’s National Cyber Security Centre sidles in to help firm behind hacked NurseryCam product secure itself
February 25, 2021
Ever felt that a few big tech companies are following you around the internet? That’s because … they are
February 25, 2021
Alexa, swap out this code that Amazon approved for malware… Installed Skills can double-cross their users
February 25, 2021
Revealed: The military radar system swiped from aerospace biz, leaked online by Clop ransomware gang
February 24, 2021
‘We’re finding bugs way faster than we can fix them’: Google sponsors 2 full-time devs to improve Linux security
February 24, 2021
Think you know all about security pen-testing in the cloud? Here’s how to prove it
February 24, 2021
Mozilla Firefox keeps cookies kosher with quarantine scheme, 86s third-party cookies in new browser build
February 24, 2021
What’s CNAME of your game? This DNS-based tracking defies your browser privacy defenses
February 24, 2021
Indian Railways suffers unspecified security ‘breaches in various IT applications’
February 24, 2021
Microsoft president asks Congress to force private-sector orgs to publicly admit when they’ve been hacked
February 24, 2021
VMware warns of critical remote code execution flaw in vSphere HTML5 client
February 23, 2021
They break into your network but do nothing themselves: ‘Initial access brokers’ resell stolen creds for $7k a pop
February 23, 2021
Clop ransomware gang leaks online what looks like stolen Bombardier blueprints of GlobalEye radar snoop jet
February 23, 2021
Keybase secure messaging fixes photo-leaking bug – patch now!
February 23, 2021