News

Show of hands: who WASN'T targeted?

The list of victims keeps growing, as yet another company — Cloudflare — today disclosed that some of its customers' data was also compromised in the Salesloft Drift breach.…

Enough governments love it and it's highly lucrative

Governments can't get enough of hacking services to use against their citizens, despite their protestations that elements of the trade need sanctioning.…

Joins Google, Palo Alto Networks in the ever-growing supply chain compromise

Zscaler is the latest company to disclose some of its customers' data was exposed in the recent spate of Salesloft Drift attacks affecting Salesforce databases.…

Security firm's Salesforce instance accessed using credentials stolen from Salesloft's Drift platform breach

Palo Alto Networks is writing to customers that may have had commercially sensitive data exposed after criminals used stolen OAuth credentials lifted from the Salesloft Drift break-in to gain entry to its Salesforce instance.…

Brit limb books just £188M in revenue – down 85% since 2019

Huawei's business in Britain has dwindled in the half-decade since the UK acquiesced to demands from the US to ban the Chinese networking giant from local telco networks.…

Major flaws uncovered in Copeland controllers: Patch now

Ten vulnerabilities in Copeland controllers, which are found in thousands of devices used by the world's largest supermarket chains and cold storage companies, could have allowed miscreants to manipulate temperatures and spoil food and medicine, leading to massive supply-chain disruptions.…

As government says £9B could end up in Redmond, poll says it's time for new thinking

Register debate series  Register readers are backing a shift away from Microsoft software as a default across the UK public sector after the government confirmed it expects to spend £9 billion with the software giant over five years.…

Bloc working on anti-jamming measures and plans extra sat to help

A plane carrying European Commission (EC) president Ursula von der Leyen to Bulgaria was forced to resort to manual navigation techniques after GPS jamming that authorities have pinned on Russia.…

Cisco finds hundreds of Ollama servers open to unauthorized access, creating various nasty risks

Cisco’s Talos security research team has found over 1,100 Ollama servers exposed to the public internet, where miscreants can use them to do nasty things.…

BAE's sub hunter production line warms up – shame it's not for Britain

Norway has ordered British-made Type 26 frigates in a contract valued at roughly £10 billion to the UK economy, but this may delay the introduction of the Royal Navy's own desperately needed ships.…

Don't worry, there's a twist at the end

Opinion  Agatha Christie stuck a dagger in the notion that crime doesn't pay. With sales of between two and four billion books – fittingly, the exact number is a mystery – she built a career out of murder that out-bloodied Jack the Ripper. It's a fair bet that had she chosen to write about accountancy fraud instead, her sales would be between two and four billion fewer. Some crime is sexy. Some is not.…

Trust and believe – AI models trained to see 'legal' doc as super legit

Researchers at security firm Pangea have discovered yet another way to trivially trick large language models (LLMs) into ignoring their guardrails. Stick your adversarial instructions somewhere in a legal document to give them an air of unearned legitimacy – a trick familiar to lawyers the world over.…

Sites at yourcountry.gov may also not bother with HTTPs

Internet traffic to government domains often flows across borders, relies on a worryingly small number of network connections, or does not require encryption, according to new research.…

PLUS: Microsoft ends no-MFA Azure access; WorkDay attack diverts payments; FreePBX warns of CVSS 10 flaw; and more

Infosec In brief  A flaw in Meta's WhatsApp app “may have been exploited in a sophisticated attack against specific targeted users.”…

The admin controls were left wide open on Pudu's robots

A researcher caught the world’s leading supplier of commercial service robots using shoddy admin security that let attackers redirect the delivery machines to anywhere and make them follow any command.…

Look who's visiting the watering hole these days

Amazon today said it disrupted an intel-gathering attempt by Russia's APT29 to trick Microsoft users into unwittingly granting the Kremlin-backed cyberspies access to their accounts and data.…

Up to 29,000 organizations and potentially 370,000 security and IT pros affected

Australian development house Click Studios has warned users of its Passwordstate enterprise password management platform to update immediately if not sooner, following the discovery of an authentication bypass vulnerability that opens the doors to an emergency administration account with nothing more than a "carefully crafted URL."…

Senior officials summoned to science and tech committee to explain further

Senior officials are being summoned to the UK's Science, Innovation and Technology Committee to explain why the government has not fully implemented the security recommendations made in a secret review following the 2021 Afghan data breach.…

Plus millions of other people across 80+ countries

China's Salt Typhoon cyberspies hoovered up information belonging to millions of people in the United States over the course of the years-long intrusion into telecommunications networks, according to a top FBI cyber official.…

Our drones are OK, but those other drones?

The US Department of Homeland Security has revealed plans to spend more than $100 million on systems designed to take out hostile drones.  …