News

96% of US hospital websites share visitor info with Meta, Google, data brokers

The Register - Thu, 11/04/2024 - 16:00
Could have been worse – last time researchers checked it was 98.6%

Hospitals – despite being places where people implicitly expect to have their personal details kept private – frequently use tracking technologies on their websites to share user information with Google, Meta, data brokers, and other third parties, according to research published today.…

Categories: News

Global taxi software vendor exposes details of nearly 300K across UK and Ireland

The Register - Thu, 11/04/2024 - 10:30
High-profile individuals including MPs said to be caught up in leak

Exclusive  Taxi software biz iCabbi recently fixed an issue that exposed the personal information of nearly 300,000 individuals via an unprotected database.…

Categories: News

It's 2024 and Intel silicon is still haunted by data-spilling Spectre

The Register - Wed, 10/04/2024 - 21:22
Go, go InSpectre Gadget

Intel CPU cores remain vulnerable to Spectre data-leaking attacks, say academics at VU Amsterdam.…

Categories: News

Rust rustles up fix for 10/10 critical command injection bug on Windows

The Register - Wed, 10/04/2024 - 14:15
BatBadBut hits Erlang, Go, Python, Ruby as well

Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on Windows machines.…

Categories: News

X fixes URL blunder that could enable convincing social media phishing campaigns

The Register - Wed, 10/04/2024 - 11:37
Poorly implemented rule allowed miscreants to deceive users with trusted URLs

Elon Musk's X has apparently fixed an embarrassing issue implemented earlier in the week that royally bungled URLs on the social media platform formerly known as Twitter.…

Categories: News

Turning the tide on third-party risk

The Register - Wed, 10/04/2024 - 09:39
Using threat intelligence to mitigate against security breaches

Webinar  There are some unhappy projections out there about the prevalence of third-party security breaches.…

Categories: News

Chrome Enterprise Premium promises extra security – for a fee

The Register - Wed, 10/04/2024 - 07:26
Paying for browsers is no longer a memory from the 1990s

Cloud Next  Hoping to upsell freeloading corporate users of its Chrome browser, Google has announced Chrome Enterprise Premium – which comes with a dash of AI security sauce for just $6 per user per month.…

Categories: News

Microsoft squashes SmartScreen security bypass bug exploited in the wild

The Register - Wed, 10/04/2024 - 01:15
Plus: Adobe, SAP, Fortinet, VMware, Cisco issue pressing updates

Patch Tuesday  Microsoft fixed 149 security flaws in its own products this week, and while Redmond acknowledged one of those vulnerabilities is being actively exploited, we've been told another hole is under attack, too.…

Categories: News

Got an unpatched LG 'smart' television? It could be watching you back

The Register - Tue, 09/04/2024 - 19:00
Four fatal flaws allow TV takeover

A handful of bugs in LG smart TVs running WebOS could allow an attacker to bypass authorization and gain root access on the device.…

Categories: News

UK businesses shockingly unaware of how to handle security threats

The Register - Tue, 09/04/2024 - 13:41
Many decide to make no changes after detecting a breach

UK businesses' response to security breaches has "astounded" experts following the release of the government's official cybercrime stats for 2024.…

Categories: News

US insurers use drone photos to deny home insurance policies

The Register - Mon, 08/04/2024 - 21:30
Of course, it helps if you don't live in a potential disaster zone

US insurance companies are reportedly relying on aerial photos from drones to deny claims.…

Categories: News

Home Depot confirms worker data leak after miscreant dumps info online

The Register - Mon, 08/04/2024 - 19:01
SaaS slip up leads to scumbags seeking sinecure

Home Depot has confirmed that a third-party company accidentally exposed some of its employees' personal details after a criminal copy-pasted the data online.…

Categories: News

Puppies, kittens, data at risk after 'cyber incident' at veterinary giant

The Register - Mon, 08/04/2024 - 15:30
IT systems pulled offline for chance to paws and reflect

First, they came for hospitals, then it was charities and cancer centers. Now, cyber scumbags are coming for the puppies and kittens.…

Categories: News

Change Healthcare faces second ransomware dilemma weeks after ALPHV attack

The Register - Mon, 08/04/2024 - 14:00
Theories abound over who's truly responsible

Change Healthcare is allegedly being extorted by a second ransomware gang, mere weeks after recovering from an ALPHV attack.…

Categories: News

Head of Israeli cyber spy unit exposed ... by his own privacy mistake

The Register - Mon, 08/04/2024 - 07:28
PLUS: Another local government hobbled by ransomware; Huge rise in infostealing malware; and critical vulns

In Brief  Protecting your privacy online is hard. So hard, in fact, that even a top Israeli spy who managed to stay incognito for 20 years has found himself exposed after one basic error.…

Categories: News

What can be done to protect open source devs from next xz backdoor drama?

The Register - Sat, 06/04/2024 - 17:12
What happened, how it was found, and what your vultures have made of it all

Kettle  It's been about a week since the shock discovery of a hidden and truly sophisticated backdoor in the xz software library that ordinarily is used by countless systems.…

Categories: News

US government excoriates Microsoft for 'avoidable errors' but keeps paying for its products

The Register - Fri, 05/04/2024 - 15:30
In what other sphere does a bad supplier not feel pain for its foulups?

Analysis  You might think that when a government supplier fails in one of its key duties it would find itself shunned or at least feel financial pain.…

Categories: News

Hotel check-in terminal bug spews out access codes for guest rooms

The Register - Fri, 05/04/2024 - 13:30
Attacks could be completed in seconds, compromising customer safety

A self-service check-in terminal used in a German Ibis budget hotel was found leaking hotel room keycodes, and the researcher behind the discovery claims the issue could potentially affect hotels around Europe.…

Categories: News

Academics probe Apple's privacy settings and get lost and confused

The Register - Fri, 05/04/2024 - 06:34
Just disabling Siri requires visits to five submenus

A study has concluded that Apple's privacy practices aren't particularly effective, because default apps on the iPhone and Mac have limited privacy settings and confusing configuration options.…

Categories: News

World's second-largest eyeglass lens-maker blinded by infosec incident

The Register - Fri, 05/04/2024 - 02:45
Japan's Hoya also makes components for chips, displays, and hard disks, and has spent four days groping for a fix

If ever there was an incident that brings the need for good infosec into sharp focus, this is the one: Japan's Hoya – a maker of eyeglass and contact lenses, plus kit used to make semiconductor manufacturing, flat panel displays, and hard disk drives – has halted some production and sales activity after experiencing an attack on its IT systems.…

Categories: News

Pages

Subscribe to Sec Tec Limited aggregator - News