Security
RansomEXX trojan variant is being deployed against Linux systems, warns Kaspersky
Inoculation is simple: MFA, regular timely patching
09 Nov 17:12 | 1
Security
Security
Somebody's Russian to meddle with UK coronavirus vaccine efforts, but GCHQ won't take it lying down
Offensive cyber operation includes 'encrypting' Vlad and Chums' disinfo servers
09 Nov 15:52 | 17
Security
Chinese hacking competition cracks Chrome, ESXi, Windows 10, iOS 14, Galaxy 20, Qemu, and more
VMware warns of incoming security fix after attackers get root on host
09 Nov 07:11 | 18
Promo
Hackers work 24 hours a day – when will you schedule your security training?
It’s SANS training time in Tokyo, Singapore, and India
08 Nov 22:00 |
Security
Let's Encrypt warns about a third of Android devices will from next year stumble over sites that use its certs
Expiration of cross-signed root certificates spells trouble for pre-7.1.1 kit... unless they're using Firefox
06 Nov 23:58 | 34
Security
Ransomware crims read our bank balance and demanded the lot, reveals Scotland's Dundee and Angus College
But we rebuilt the entire institution in 5 days, says principal as he looks back on February attack
06 Nov 17:17 | 25
Security
Sodinokibi/REvil ransomware gang pwns British housing biz via suspected phishing attack
Same people who killed Travelex and revenge-published personal data when ignored. Nice folk
06 Nov 16:08 | 4
Security
Snap-crappy: 183 Brit local authorities operate 80,000 CCTV cams between them, says surveillance watchdog
Please make sure you're obeying the law, outgoing commissioner pleads
06 Nov 11:01 | 18
Security
Ransomware attack shutters Brazilian courts. But did attackers breach the virtual machine divide?
Six-day outage predicted as rebuild commences from untouched backups
06 Nov 04:31 | 6
Security
Tech support scammer dialed random number and Australian Police’s cybercrime squad answered
Cops used the opportunity to figure out remote access traps
06 Nov 03:05 | 126
Security
Apple emits iOS, iPadOS, watchOS, macOS patches to fix three hijack-my-device flaws exploited in the wild
Trio of bugs reported by Google Project Zero, plenty of other flaws addressed
05 Nov 23:41 | 12
Security
After Cummings' Barnard Castle trip, cheeky Britons started using the word 'vision' in their passwords
That was still dwarfed by clods using 'password' itself, though
05 Nov 15:45 | 58
Security
Data protection scofflaws failed to pay £2m in fines from UK watchdog – and 68% of penalties are still outstanding
We're trying, insists beleaguered Information Commissioner's Office
05 Nov 12:15 | 17
Updated
Deloitte's 'Test your Hacker IQ' site fails itself after exposing database user name, password in config file
Security quiz site created by advisors includes inadvertent bonus round
05 Nov 08:28 | 29
Security
No, GitHub's source code wasn't hacked and posted on GitHub, says GitHub CEO
Nat Friedman says they'll make it harder to impersonate unsigned commits
05 Nov 07:57 | 16
Sponsored
Proofpoint survey: IT security leaders worry about and are ill-prepared to defeat cyber-attacks
Remote workers are now the perimeter
05 Nov 07:30 |
Security
Criticalstudies.org sounds pretty important, right? Wrong: USA says it’s an Iranian fake news front
So it's been seized, along with a bunch of other sites, with Cloudflare accounts providing critical evidence
05 Nov 06:57 | 22
Security
Revamped DLL side-load attack hits Myanmar
Sophos reckons Chinese gangs are behind attack it's charmingly chosen to name 'KilllSomeOne'
05 Nov 02:02 |
Security
Feds throw book at eBay execs who deny they had anything to do with cyberstalking of site's critics
James Baugh, David Harville hit with several new counts
04 Nov 22:47 | 19
Security
If you're an update laggard, buck up: Chrome zero-days are being exploited in the wild
Desktop and Android versions both at risk
04 Nov 20:15 | 17
Popular
Cloud
Biden projected to be the next US President, Microsoft joins rest of world in telling Trump: It looks like... you're fired
Orange is the new sacked
Software
Bad software crashed Boeings. Now it appears the company lacked a singular software supremo
Former SpaceX, Tesla, and Google site reliability leader steps into newly-created role
Security
Chinese hacking competition cracks Chrome, ESXi, Windows 10, iOS 14, Galaxy 20, Qemu, and more
VMware warns of incoming security fix after attackers get root on host
Who, Me?
The day I took down the data centre- I mean, the day I saved the day. Right, boss?
How many hundred thousand customers?
Review
Magic! If you have an entry-level iPad, the Combo Touch could make it your workhorse
If only cheaper-than-Apple Logitech kit could turn bog-standard slab into a Pro
Promo
Hackers work 24 hours a day – when will you schedule your security training?
It’s SANS training time in Tokyo, Singapore, and India
Emergent Tech
Uber is now a food delivery company with a substantial sideline in taxis
Delivery is even profitable in some places, whole company be kind-of in the black by 2021
Cloud
You can forget your fancy ERP customisations because that's not how it works in the cloud, SAP's Oliver Betz tells users
But that's where German software giant wants its on-prem customers to go
Policy
India slashes red tape to make life much easier for outsourcers and outsourcing
Makes work-from-home legal and lowers barriers to entry for smaller players and multinationals' use of Indian workers
Bork!Bork!Bork!
Windows 10 quite literally projects its deepest, darkest fears on to New Zealand
It may have escaped the worse of coronavirus, but no one is immune to bork
STORIES
Security
Was that November's Patch Tuesday? Already? Oh, no, it's just Adobe issuing 14 emergency security fixes
Critical Acrobat, Reader flaws evidently couldn't wait until next week
04 Nov 06:28 | 12
Security
Automation software slinger SaltStack warns of stop-watching-the-election-and-patch-now bugs
Fixes look to have landed in GitHub well ahead of disclosure
04 Nov 02:45 |
Sponsored
The death of the email attack 'campaign'
So long and (no) thanks for all the phish
03 Nov 19:00 |
Security
None of our apps (except those 3) could secretly slurp Facebook user details, devs rage to High Court of England and Wales
Small Brit firm pushes back against Zuckerborg sueball
03 Nov 17:20 | 12
Security
Oracle patches severe flaw in WebLogic Server that could be exploited 'without the need for a username and password'
D'oh! If only they'd seen bug before issuing those 402 other fixes
03 Nov 14:12 | 6
Security
Protecting the NHS: NCSC fended off lots of meddling aimed at UK health orgs while ransomware ramped up
But annual report doesn't mention China once
03 Nov 12:28 | 3
Security
I'll give you my passwords if you investigate police corruption, accused missile systems leaker told cops
Ex-BAE Systems bod's letter read to Old Bailey
03 Nov 10:15 | 59
Security
CERT/CC: 'Sensational' bug names spark fear, hype – so we'll give flaws our own labels... like Suggestive Bunny
Officials go with randomly selected words with unintentionally hilarious results. Filthy Python, anyone?
03 Nov 06:02 | 29
Security
Russian jailed for eight years in the US for writing code that sifted botnet logs for web banking creds for fraudsters
Harvested usernames, passwords used to drain victims' coffers
02 Nov 23:58 | 9
Promo
Are you protected from the latest threats to Industrial Control Systems?
SANS Institute opens up ICS Asia Pacific Summit to all
02 Nov 23:00 |
In brief
Google's home security package flies the Nest, Chocolate Factory pledges software support – for now
Plus: Immigration lawyers for Mountain View breached, SonarQube hack worse than thought, and more
02 Nov 13:15 | 14
Column
You can't spell 'electronics' without 'elect': The time for online democracy has come
Software, security, distributed systems, process-based engineering... e-voting might not be such a bad idea
02 Nov 11:00 | 182
Analysis
Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use
Web giant insists anti-bot service isn't used for personalized ads – but cookie claims don't quite add up
02 Nov 08:15 | 68
Security
India securities regulator suggests webcam surveillance of finance folk who work from home
Random snaps suggested to authenticate users, along with hasty adoption of VPNs and MFA
02 Nov 01:07 |
Security
Windows kernel zero-day disclosed by Google's Project Zero after bug exploited in the wild by hackers
Chocolate Factory spills beans on make-me-admin flaw
30 Oct 21:26 | 49
Security
The Russians are at it again: Zebrocy backdoor malware is evolving, Uncle Sam warns close to eve of presidential election
Yep, it's the artists occasionally known as APT28
30 Oct 18:30 | 15
Security
Marriott fined £0.05 for each of the 339 million hotel guests whose data crooks were stealing for four years
UK watchdog's mooted £99m penalty comes in at just £18.4m
30 Oct 14:08 | 32
Security
Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it
And the 'acceptable company name' charset is hardcoded... in legislation
30 Oct 13:00 | 64
Security
On Friday the US starts Ender's hacking game: All local teens can compete for scholarships in cybersecurity
CyberStart America challenge aims to find talented network defenders
30 Oct 10:00 | 7
