Better get Grandpa off Windows 7 because zero-day bug in Zoom allows remote code execution on vintage OS July 13, 2020
An email banning our staff from using TikTok? Haha, funny story about that, we didn’t mean it – Amazon July 11, 2020
Tony Blair tells Russian infosec conference that cross-border infosec policies need more gov intervention July 10, 2020
TomTom bill bomb: Why am I being charged for infotainment? I sold my car last year, rages Reg reader July 10, 2020
Digicert will shovel some 50,000 EV HTTPS certificates into the furnace this Saturday after audit bungle July 10, 2020
FYI: Someone’s scanning gateways, looking for those security holes Citrix told you not to worry too much about July 9, 2020
If you haven’t potentially exposed 1000s of customers once again with networking vulns, step forward… Not so fast, Palo Alto Networks July 9, 2020
Microsoft sues coronavirus phishing spammers to seize their domains amid web app attacks against Office 354.5 July 8, 2020
One surefire way to get the boss’s attention on network security is to get hacked. But there must be a better way? July 8, 2020
Criminals auction off stolen domain admin credentials for up to £95k. Your bank account details? Barely get £50 July 8, 2020
Citrix tells everyone not to worry too much over its latest security patches. NSA’s former top hacker disagrees July 8, 2020
Shopped recently in a small online store? Check this list to see if it was one of 570 websites infected with card-skimming Magecart July 7, 2020
Fret not, Linux fans, Microsoft’s Project Freta is here to peer deep into your memory… to spot malware July 7, 2020
Hundreds of forgotten corners of mega-corp websites fall into the hands of spammers and malware slingers July 7, 2020
Your 2.3m Instagram fans won’t stop the FBI… Web star accused of plotting to launder millions from cyber-crime July 6, 2020
You may be distracted by the pandemic but FYI: US Senate panel OK’s backdoors-by-the-backdoor EARN IT Act July 6, 2020
Think of a number: A tale of iffy discount codes, supermarket loyalty cards and Hotels.com July 6, 2020
Three UK: We’re sending you this SMS to warn you not to pay attention to unsolicited texts July 6, 2020
Make sure you’ve patched your F5 BIG-IP gear. Exploit code for scary bug pair is so trivial, it fits in a tweet July 6, 2020
F5 emits fixes for critical flaws in BIG-IP gear: Hopefully yours aren’t internet-facing while you ready a patch July 3, 2020
Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions July 2, 2020
Euro police forces infiltrated encrypted phone biz – and now ‘criminal’ EncroChat users are being rounded up July 2, 2020
Hold off that rush into the July 4 weekend – you may need this: Microsoft patches pwn-by-picture pitfalls in Win 10 July 2, 2020
Cisco SMB kit harbors cross-site scripting bug: One wrong link click… and that’s your router pwned remotely July 2, 2020
Details of Beijing’s new Hong Kong security law revealed: Signals end to more than two decades of autonomy July 1, 2020
Things that happen every four years: Olympic Games, Presidential elections, and now new Mac ransomware July 1, 2020
After six months of stonewalling by Apple, app dev goes public with macOS privacy protection bypass July 1, 2020
It’s happened again: AT&T sued for allegedly transferring victim’s number to thieves in $1.9m cryptocoin heist July 1, 2020
Living on a prayer? Netgear not quite halfway there with patches for 28 out of 79 vulnerable router models June 30, 2020
NEC insists its face-recog training dataset isn’t biased, but refuses to share details of Neoface system with UK court June 30, 2020
Remember when we warned in February Apple will crack down on long-life HTTPS certs? It’s happening: Chrome, Firefox ready to join in, too June 30, 2020
University of California San Francisco pays ransomware gang $1.14m as BBC publishes ‘dark web negotiations’ June 29, 2020
CyberX, CyberX, does whatever a CyberX does. Locks IoT, machines too, Microsoft got it, so will you June 29, 2020
Let’s roll the 3d6 dice on today’s security drama: Ah, 15, that’s LG allegedly hacked, source code stolen by Maze ransomware gang June 26, 2020
Brit plod’s use of facial-recognition tech is lawful, no need to question us, cops’ lawyer tells Court of Appeal June 26, 2020
When one open-source package riddled with vulns pulls in dozens of others, what’s a dev to do? June 26, 2020
REvil gang threaten to auction celebrity data from Mariah Carey, Lebron James, MTV and more June 26, 2020
Talk about the fox guarding the hen house. Comcast to handle DNS-over-HTTPS for Firefox-using subscribers June 26, 2020
US govt: Julian Assange tried to recruit hacker to steal hush-hush dirt and we should know – the hacker was an informant June 25, 2020
Honeypot behind sold-off IP subnet shows Cyberbunker biz hosted all kinds of filth, says SANS Institute June 25, 2020
There are DDoS attacks, then there’s this 809 million packet-per-second tsunami Akamai says it just caught June 25, 2020
After huffing and puffing for years, US senators unveil law to blow the encryption house down with police backdoors June 24, 2020
Ransomware crims to sell off ‘scandalous’ files swiped from Mariah Carey, Nicki Minaj, Puff Daddy’s legal eagles June 24, 2020
Laws on police facial recognition aren’t tough enough, UK data watchdog barrister tells Court of Appeal June 24, 2020
Former UK Labour deputy leader wants to know how the NHS’s contact-tracing app will ensure user privacy June 24, 2020
Maze ransomware gang threatens to publish sensitive stolen data after US aerospace biz sensibly refuses to pay June 24, 2020
Three words you do not want to hear regarding a ‘secure browser’ called SafePay… Remote. Code. Execution June 24, 2020
The state of OpenPGP key servers: Kristian, can you renew my certificate? A month later: Kristian? Ten days later: Too late, it’s expired June 24, 2020
Here’s a headline we never thought we’d write 20 years ago: Microsoft readies antivirus for Linux, Android June 23, 2020
None shall pass: Yet another layer to protect hapless users, employers from dodgy docs added to Microsoft 365 June 23, 2020
UK police’s face recognition tech breaks human rights laws. Outlaw it, civil rights group urges Court of Appeal June 23, 2020
What did it take for stubborn IBM to fix flaws in its Data Risk Manager security software? Someone dropping zero-days June 23, 2020
Step on it, I’ve got the police on my hack: Anon swipes, leaks online 269GB of crime intel docs from cops, Feds June 22, 2020
VMware and Office for Mac need patching, Microsoft can scan your firmware, and Anonymous takes credit for Atlanta police hacks June 22, 2020
Hey NYPD, when you’re done tear-gassing and running over protesters, can you tell us about your spy gear? June 19, 2020