Menu

Gallery

‘Dirty little secret’ extortion email threatens to give your family coronavirus
What do you not want right now? A bunch of Cisco SD-WAN, Webex vulnerabilities? Here are a bunch of them
Russian state-sponsored hackers have been sniffing Middle East defence firms, warns Trend Micro
NIST shared dataset of tattoos that’s been used to identify prisoners
Cryptojacking is almost conquered – crushed along with coinhive.com
Oh-so-generous ransomware crooks vow to hold back from health organisations during COVID-19 crisis
Delayed Adobe patches fix long list of critical flaws
Facebook accidentally blocks genuine COVID-19 news
Hong Kong makes wearable trackers mandatory for new arrivals, checks in with ‘surprise calls’ too
Forget James Bond’s super-gadgets, this chap spied for China using SD card dead drops. Now he’s behind bars
Android malware uses coronavirus for sextortion and ransomware combo
Dear Adobe, Trend Micro users: Please vaccinate your software – at least some of these security holes were exploited in the wild
Freedom of Information coverup clerk stung for £2k after deleting council audio recording
VMware patches virtualisation bugs
Uber to file federal suit against LA over users’ real-time location data
DDoS attack on US Health agency part of coordinated campaign
Small business loans app blamed as 500,000 financial records leak out of … you guessed it, an open S3 bucket
Human traffickers use social media oversharing to gain victims’ trust
Pervasive digital surveillance of citizens deployed in COVID-19 fight, with rules that send genie back to bottle
Remember cryptojacking from way, way back (2019)? Site infections are down 99% – thanks to death of Coinhive
Nigerian spammer made 3X average national salary firehosing macro-laden Word docs at world+dog
Slack fixes account-stealing bug
Tor browser fixes bug that allows JavaScript to run when disabled
WordPress to get automatic updates for plugins and themes
Europol busts up two SIM-swapping hacking rings
Vimeo freezes accounts after malware hunts for logins, coronavirus map app infected with evil code, and more
Virtual machines, real problems: VMware fixes bug trio including guest-to-host hole in Workstation, Fusion
US Health and Human Services targeted by DDoS scum at just the time it’s needed to be up and running
Health workers are top of phishers’ target lists thanks to data value
Microsoft patches wormable Windows 10 ‘SMBGhost’ flaw
Report calls for web pre-screening to end UK’s child abuse ‘explosion’
Open source bugs have soared in the past year
Senate bill would ban TikTok from government phones
Your data was ‘taken without permission’, customers told, after personal info accessed in O2 UK partner’s database
Hey, friends. We know it’s a crazy time for the economy, but don’t forget to enable 2FA for payments by Saturday
EARN IT Act threatens end-to-end encryption
Homeland Security sued over secretive use of face recognition
Confessions app Whisper spills almost a billion records
Open-source bug bonanza: Vulnerabilities up almost 50 per cent thanks to people actually looking for them
Avast pulls plug on insecure JavaScript engine in its security software suite
Fresh virus misery for Illinois: Public health agency taken down by… web ransomware. Great timing, scumbags
Thought you were done after Tuesday’s 115-fix day? Not yet: Microsoft emits SMBv3 worm-cure crisis patch
US Congress: Spying law is flawed, open to abuse, and lacking in accountability – so let’s reauthorize it
Data of millions of eBay and Amazon shoppers exposed
Firefox 74 offers privacy and security updates
Intel patches graphics drivers and offers new LVI flaw mitigations
Analytics firm’s VPN and ad-blocking apps are secretly grabbing user data
Necurs zombie botnet disrupted by Microsoft
Russia-backed crew’s latest malware has discerning taste – when screening visitors to poisoned watering holes
Microsoft nukes 9 million-strong Necurs botnet after unpicking domain name-generating algorithm
Meltdown The Sequel strikes Intel chips – and full mitigation against data-meddling LVI flaw will slash performance
TRRespass research reveals rowhammering is alive and well
Microsoft leaves critical bug unpatched on Patch Tuesday
Find out how to manage detection and response for better cyber security
Secret-sharing app Whisper shared secrets like last known location and actual password tokens in exposed database
FBI arrests alleged owner of Deer.io, top market for stolen accounts
Trial for accused CIA leaker ends in hung jury
Brave browser to block web fingerprinting with randomisation
The Reg produces exhibit A1: A UK court IT system running Windows XP
Google: You know we said that Chrome tracker contained no personally identifiable info? Forget we ever said that
Stuck at home? Need something to keep busy with? Microsoft has 115 ideas – including an awful SMBv3 security hole to worry about
That LVI CPU hole wasn’t the only Intel fix: Dozens of flaws patched to stop chips turning into potatoes
California tech industry gets its first big coronavirus hit: RSA Conference attendee infected, in serious condition
You only LVI twice: Meltdown The Sequel strikes Intel chips – and full mitigation against data-meddling flaw will cost you 50%+ of performance
Watch out for Office 365 and G Suite scams, FBI warns businesses
Google data puts innocent man at the scene of a crime
Ex-Inspector General indicted for stealing data on 250k govt colleagues
Phone carriers may soon be forced to adopt anti-robocall tech
Avast’s AntiTrack promised to protect your privacy. Instead, it opened you to miscreant-in-the-middle snooping
AMD, boffins clash over chip data-leak claims: New side-channel holes in decades of cores, CPU maker disagrees
NSO Group fires back at Facebook: You lied to the court, claims spyware slinger, and we’ve got the proof
Months-long trial of alleged CIA Vault 7 exploit leaker ends with hung jury: Ex-sysadmin guilty of contempt, lying to FBI
It’s not a breach… it’s just that someone else has your data
UK Defence Committee probe into national security threat of Huawei sure to uncover lots of new and original insights
One billion Android smartphones racking up security flaws
Microsoft: Turn off Memory Integrity if it’s causing problems
Spyware maker NSO runs scared from Facebook over WhatsApp hacking charges, fails to show up in court
Now you need a notarized document to get a .gov domain
99% of compromised Microsoft enterprise accounts lack MFA
UK.gov is not sharing Brits’ medical data among different agencies… but it’s having a jolly good think about it
Check Point chap: Small firms don’t invest in infosec then hope they won’t get hacked. Spoiler alert: They get hacked
Don’t be fooled, experts warn, America’s anti-child-abuse EARN IT Act could burn encryption to the ground
FYI: When Virgin Media said it leaked ‘limited contact info’, it meant p0rno filter requests, IP addresses, IMEIs as well as names, addresses and more
UK spy auditor gives state snoops a big pat on the back for job well done – except MI5
Remote working due to coronavirus? Here’s how to do it securely…
NordVPN quietly plugged vuln where an HTTP POST request without authentication would return detailed customer data
Run ANDROID on an iPhone? Are you SERIOUS?!?
Researcher finds 670 Microsoft subdomains vulnerable to takeover
Chrome extension cons cryptocurrency users out of hardware wallet key
More than a billion hopelessly vulnerable Android gizmos in the wild that no longer receive security updates – research
Cathay Pacific fined over crooks slurping its database for over 4 years
Boots yanks loyalty card payouts after 150K accounts get stuffed
Like a Virgin, hacked for the very first time… UK broadband ISP spills 900,000 punters’ records into wrong hands from insecure database
Android users, if you could pause your COVID-19 panic buying for one minute to install these critical security fixes, that would be great
Let’s Encrypt: OK, maybe nuking three million HTTPS certs at once was a tad ambitious. Let’s take time out
Staffer emails compromised and customer details exposed in T-Mobile US’s third security whoopsie in as many years
‘Unfixable’ boot ROM security flaw in millions of Intel chips could spell ‘utter chaos’ for DRM, file encryption, etc
Coronavirus warning spreads computer virus
Facebook: No, we are not killing Libra
Ethical hackers swarm Pentagon websites