News

Fancy Bear can't keep its claws out of Outlook inboxes

The UK government is warning that Russia's APT28 (also known as Fancy Bear or Forest Blizzard) has been deploying previously unknown malware to harvest Microsoft email credentials and steal access to compromised accounts.…

Keep It Simple, Stupid

Interview  Scattered Spider and Iranian government-backed cyber units have more in common than a recent uptick in hacking activity, according to Ariel Parnes, a former colonel in the Israeli Defense Forces' cyber unit 8200.…

WeTransfer added the magic words 'machine learning' to its ToS and users reacted predictably

Analysis  WeTransfer this week denied claims it uses files uploaded to its ubiquitous cloud storage service to train AI, and rolled back changes it had introduced to its Terms of Service after they deeply upset users. The topic? Granting licensing permissions for an as-yet-unreleased LLM product.…

Ads giant complains of damage to its reputation and finances ... and crime, too

Google has filed a lawsuit against 25 unnamed individuals in China it accuses of breaking into more than 10 million devices worldwide and using them to build a botnet, called BadBox 2.0, and then to carry out other cybercrimes and fraud.…

Three perfect 10s in the last month - ISE, ISE, baby

Cisco has issued a patch for a critical 10 out of 10 severity bug in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that could allow an unauthenticated, remote attacker to run arbitrary code on the operating system with root-level privileges. …

Computer scientist Peter Gutmann tells The Reg why it's 'bollocks'

The US National Institute for Standards and Technology (NIST) has been pushing for the development of post-quantum cryptographic algorithms since 2016.…

It looks like enough of you are struggling to migrate that Redmond is willing to help out – for a price that might buy nothing

Microsoft has extended its security update programs for Exchange Server 2016 and 2019, and Skype for Business 2015 and 2019.…

'Deeply penetrated' Gaskar 'to the very tonsils of demilitarization'

Ukrainian hackers claim to have taken out the IT infrastructure at Russia's Gaskar Integration plant, one of the largest suppliers of drones for its army, and also destroyed massive amounts of technical data related to drone production. …

Two Russian suspects in cuffs, seven warrants out

International cops shut down more than 100 servers belonging to the pro-Russian NoName057(16) network this week as part of the Europol-led Operation Eastwood.…

Someone's OVERSTEPing the mark

Unknown miscreants are exploiting fully patched, end-of-life SonicWall VPNs to deploy a previously unknown backdoor and rootkit, likely for data theft and extortion, according to Google's Threat Intelligence Group.…

Supermarket announces white hat education scheme as four suspects released on bail

Co-op Group's chief executive officer has confirmed that all 6.5 million of the organization's members had their data stolen during its April cyberattack - Scattered Spider is believed to be behind the digital heist.…

Attack enters day 11 and still no public disclosure of what insider claims to be 'deep breach' of Active Directory

Exclusive  Aviation insiders say Serbia's national airline, Air Serbia, was forced to delay issuing payslips to staff as a result of a cyberattack it is battling.…

Former staffers of struggling UK biz say they don’t expect to be paid for July

UK cybersecurity shop Adarma has confirmed it has entered administration.…

Maintainers struggle to handle growing flow of low-quality bug reports written by bots

Daniel Stenberg, founder and lead developer of the open-source curl command line utility, just wants the AI slop to stop.…

File this one under what not to search if you've committed a crime

A former US Army soldier, who reportedly hacked AT&T, bragged about accessing President Donald Trump's call logs, and then Googled "can hacking be treason," and "US military personnel defecting to Russia," pleaded guilty to conspiring to break into telecom firms' databases and extort at least $1 million.…

Stealth jets can't fight, can't fly much, and can't shoot UK missiles, says NAO

The F-35 stealth fighter is not meeting its potential in British service because of availability issues, a shortage of support personnel, and delays in integrating key weapons that are limiting the aircraft's effectiveness.…

Anyone investigated Grok? Just sayin'…

Someone hacked Elmo's X account on Sunday, making it appear as if the lovable Sesame Street monster with the habit of referring to themselves in the third-person spewed a series of now-removed antisemitic, racist, and anti-Trump posts.…

Rowhammer returns for more memory-meddling fun

The Rowhammer attack on computer memory is back, and for the first time, it's able to mess with bits in Nvidia GPUs, despite defenses designed to protect against this kind of hacking.…

Neil Smith has been trying to get the railroad industry to listen since 2012, but it took a CISA warning to get there

When independent security researcher Neil Smith reported a vulnerability in a comms standard used by trains to the US government in 2012, he most likely didn't expect it would take until 2025 to sort the matter out, but here we are. …

Cross-Channel pact aims to bolster navigation and timing tech as satellite signals face growing jamming threats

Britain and France are to work more closely on technology to back up the familiar Global Positioning System (GPS), which is increasingly subject to interference in many regions around the world.…