News

Privacy campaigners cry foul as grocer joins Asda, Iceland, and others in retail surveillance boom

Sainsbury's, Britain's second-largest supermarket chain, has caught the attention of privacy campaigners by launching an eight-week trial of live facial recognition (LFR) tech in two of its stores to curb shoplifting.…

Web giant and Chinese e-tailer whacked for dropping trackers without permission

France’s data protection authority levied massive fines against Google and SHEIN for dropping cookies on customers without securing their permission, and also whacked Google for showing ads in email service.…

Seven-year-old Cisco vuln that remains inexplicably unpatched is their way in

The US State Department has put a $10 million bounty on the heads of three Russians accused of being intelligence agents hacking America's critical infrastructure - primarily via old Cisco kit, it seems.…

Clock is ticking

US security leaders have urged lawmakers to reauthorize two key pieces of cyber legislation, including one that facilitates threat-intel sharing between the private sector and federal government, before they expire at the end of the month.…

September bundle the largest this year, and possibly the most serious

Patch Tuesday is next week, but Android is ahead of the game, dropping its biggest patch bundle this year while attackers actively exploit two of the now-fixed flaws.…

LLMs and 0-days - what could possibly go wrong?

Attackers on underground forums claimed they were using HexStrike AI, an open-source red-teaming tool, against Citrix NetScaler vulnerabilities within hours of disclosure, according to Check Point cybersecurity evangelist Amit Weigman.…

AI-powered ransomware, extortion chatbots, vibe hacking … just wait until agents replace affiliates

It's no secret that AI tools make it easier for cybercriminals to steal sensitive data and then extort victim organizations. But two recent developments illustrate exactly how much LLMs lower the bar for ransomware and other financially motivated cybercrime — and provide a glimpse to defenders about what's on the horizon.…

Engineers wrangle 55 TB restore and traffic replay as millions of messages queue up

A RAID failure has taken the Matrix.org homeserver offline, leaving users of the decentralized messaging service unable to send or receive messages while engineers attempt a 55 TB database restore.…

‘Universities are being used to proxy offensive government operations, turning research access decisions political’

Censys Inc, vendor of the popular Censys internet-mapping tool, has revealed that state-based actors are trying to abuse its services by hiding behind academic researchers.…

Show of hands: who WASN'T targeted?

The list of victims keeps growing, as yet another company — Cloudflare — today disclosed that some of its customers' data was also compromised in the Salesloft Drift breach.…

Enough governments love it and it's highly lucrative

Governments can't get enough of hacking services to use against their citizens, despite their protestations that elements of the trade need sanctioning.…

Joins Google, Palo Alto Networks in the ever-growing supply chain compromise

Zscaler is the latest company to disclose some of its customers' data was exposed in the recent spate of Salesloft Drift attacks affecting Salesforce databases.…

Security firm's Salesforce instance accessed using credentials stolen from Salesloft's Drift platform breach

Palo Alto Networks is writing to customers that may have had commercially sensitive data exposed after criminals used stolen OAuth credentials lifted from the Salesloft Drift break-in to gain entry to its Salesforce instance.…

Brit limb books just £188M in revenue – down 85% since 2019

Huawei's business in Britain has dwindled in the half-decade since the UK acquiesced to demands from the US to ban the Chinese networking giant from local telco networks.…

Major flaws uncovered in Copeland controllers: Patch now

Ten vulnerabilities in Copeland controllers, which are found in thousands of devices used by the world's largest supermarket chains and cold storage companies, could have allowed miscreants to manipulate temperatures and spoil food and medicine, leading to massive supply-chain disruptions.…

As government says £9B could end up in Redmond, poll says it's time for new thinking

Register debate series  Register readers are backing a shift away from Microsoft software as a default across the UK public sector after the government confirmed it expects to spend £9 billion with the software giant over five years.…

Bloc working on anti-jamming measures and plans extra sat to help

A plane carrying European Commission (EC) president Ursula von der Leyen to Bulgaria was forced to resort to manual navigation techniques after GPS jamming that authorities have pinned on Russia.…

Cisco finds hundreds of Ollama servers open to unauthorized access, creating various nasty risks

Cisco’s Talos security research team has found over 1,100 Ollama servers exposed to the public internet, where miscreants can use them to do nasty things.…

BAE's sub hunter production line warms up – shame it's not for Britain

Norway has ordered British-made Type 26 frigates in a contract valued at roughly £10 billion to the UK economy, but this may delay the introduction of the Royal Navy's own desperately needed ships.…

Don't worry, there's a twist at the end

Opinion  Agatha Christie stuck a dagger in the notion that crime doesn't pay. With sales of between two and four billion books – fittingly, the exact number is a mystery – she built a career out of murder that out-bloodied Jack the Ripper. It's a fair bet that had she chosen to write about accountancy fraud instead, her sales would be between two and four billion fewer. Some crime is sexy. Some is not.…