News
US House of Reps tells staff: No Microsoft Copilot for you!
Staff working at the US House Of Representatives have been barred from using Microsoft's Copilot chatbot and AI productivity tools, pending the launch of a version tailored to the needs of government users.…
Malicious xz backdoor reveals fragility of open source
Analysis The discovery last week of a backdoor in a widely used open source compression library called xz could have been a security disaster had it not been caught by luck and atypical curiosity about latency from a Microsoft engineer.…
Nearly 3M people hit in Harvard Pilgrim healthcare data theft
Infosec in brief Nearly a year on from the discovery of a massive data theft at healthcare biz Harvard Pilgrim, and the number of victims has now risen to nearly 2.9 million people in all US states.…
Ex-White House CIO tells The Reg: TikTok ban may be diplomatic disaster
Interview Congress is mulling legislation that will require TikTok's Chinese parent ByteDance to cut ties with the video-sharing mega-app, or the social network will be banned in the USA.…
AT&T admits massive 70m+ mid-March data dump is real, but claims it's years old
That rumored AT&T dark web customer data dump from mid-March has been confirmed, and it's a whopper: A total of more than 73 million current and former customers are included in the cache, AT&T confirmed over the weekend.…
Rust developers at Google are twice as productive as C++ teams
Echoing the past two years of Rust evangelism and C/C++ ennui, Google reports that Rust shines in production, to the point that its developers are twice as productive using the language compared to C++.…
Malicious SSH backdoor sneaks into xz, Linux world's data compression library
Red Hat on Friday warned that a malicious backdoor found in the widely used data compression library xz may be present in the upcoming Fedora Linux 40 and in the Fedora Rawhide developer distribution.…
Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching
A Linux privilege-escalation proof-of-concept exploit has been published that, according to the bug hunter who developed it, typically works effortlessly on kernel versions between at least 5.14 and 6.6.14. …
JetBrains keeps mum on 26 'security problems' fixed after Rapid7 spat
JetBrains TeamCity users are urged to apply the latest version upgrade this week after the vendor disclosed 26 new security issues in the CI/CD web application.…
FTX crypto-crook Sam Bankman-Fried gets 25 years in prison
Fallen crypto-king Sam Bankman-Fried has been jailed for 25 years after New York federal judge Lewis Kaplan expressed disbelief at almost every argument from his legal team.…
Nvidia's newborn ChatRTX bot patched for security bugs
Nvidia's AI-powered ChatRTX app launched just six week ago but already has received patches for two security vulnerabilities that enabled attack vectors, including privilege escalation and remote code execution.…
US critical infrastructure cyberattack reporting rules inch closer to reality
America's long-awaited cyber attack reporting rules for critical infrastructure operators are inching closer to implementation, after the Feds posted a notice of proposed rulemaking for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).…
Canonical cracks down on crypto cons following Snap Store scam spree
After multiple waves of cryptocurrency credential-stealing apps were uploaded to the Snap store, Canonical is changing its policies.…
INC Ransom claims responsibility for attack on NHS Scotland
NHS Scotland says it managed to contain a ransomware group's malware to a regional branch, preventing the spread of infection across the entire institution.…
These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb
The German Federal Office for Information Security (BIS) has issued an urgent alert about the poor state of Microsoft Exchange Server patching in the country.…
AI hallucinates software packages and devs download them – even if potentially poisoned with malware
In-depth Several big businesses have published source code that incorporates a software package previously hallucinated by generative AI.…
Execs in Japan busted for winning dev bids then outsourcing to North Koreans
Two executives were issued arrest warrants in Japan on Wednesday, reportedly for charges related to establishing a business that outsourced work to North Korean IT engineers.…
China encouraged armed offensive against Myanmar government to protest proliferation of online scams
The military junta controlling Myanmar has struggled to control all of its territory thanks in part to China backing rebel forces as a way of expressing its displeasure about cyberscam centers operating from the country.…
Apple fans flooded with phony password reset requests
Apple device owners, consider yourselves warned: A targeted multi-factor authentication bombing campaign is going around with the goal of exhausting iUsers into accidentally allowing a password reset.…
Majority of Americans now use ad blockers
More than half of Americans are using ad blocking software, and among advertising, programming, and security professionals that fraction is more like two-thirds to three-quarters.…