Is that a lot? Depends on the context. GHz, no. Voltage, yes Intel has divulged more details on its Raptor Lake family of 13th and 14th Gen Core processor failures and the 0x129 microcode that’s supposed to prevent further damage…
Tag: The Register – Security
Understanding escalating cyber threats
Explore the latest trends in cybersecurity with expert insight from Cloudflare Webinar As cyber threats grow more sophisticated, staying informed is crucial for IT professionals.… This article has been indexed from The Register – Security Read the original article: Understanding…
Pro-Iran groups lay groundwork for ‘chaos and violence’ as US election meddling intensifies
Political officials, advisors targeted in cyber attacks as fake news sites deliver lefty zingers Microsoft says Iran’s efforts to influence the November US presidential election have gathered pace recently and there are signs that point toward its intent to incite…
It’s 2024 and we’re just getting round to stopping browsers insecurely accessing 0.0.0.0
Can’t reach someone’s private server on localhost from outside? No problem A years-old security oversight has been addressed in basically all web browsers – Chromium-based browsers, including Microsoft Edge and Google Chrome, WebKit browsers like Apple’s Safari, and Mozilla’s Firefox.……
Hello? Are you talking on a Cisco SPA300 or SPA500 IP phone? Now’s the time to junk ’em
Multiple critical flaws found and they won’t be fixed A boffin from British defence contractor BAE has found three critical flaws in Cisco’s Small Business SPA300 and SPA500 IP phones – and another couple of nasties – none of which…
Delta: CrowdStrike’s offer to help in Falcon meltdown was too little, too late
Airline unimpressed with ‘unhelpful and untimely’ phone call from CEO, Falcon maker says claims untrue Delta Air Lines has come out swinging at CrowdStrike in a letter accusing the security giant of trying to “shift the blame” for the IT…
US ‘laptop farm’ man accused of outsourcing his IT jobs to North Korea to fund weapons programs
American and Brit firms thought they were employing a Westerner, but not so, it’s alleged The FBI today arrested a Tennessee man suspected of running a “laptop farm” that got North Koreans, posing as Westerners, IT jobs at American and…
US ‘laptop farm’ man accused of outsourcing his IT jobs to North Koreans to raise funds for weapons
American and Brit firms thought they were employing a Westerner, but not so, it’s alleged The FBI today arrested a Tennessee man suspected of running a “laptop farm” that got North Koreans, posing as Westerners, IT jobs at American and…
Using 1Password on Mac? Patch up if you don’t want your Vaults raided
Hundreds of thousands of users potentially vulnerable Password manager 1Password is warning that all Mac users running versions before 8.10.36 are vulnerable to a bug that allows attackers to steal vault items.… This article has been indexed from The Register…
US elections have never been more secure, says CISA chief
Election tech is fine – it’s all thise idiots buying into the propaganda that’s worrying Jen Easterly Black Hat US Cybersecurity and Infrastructure Security Agency (CISA) director Jen Easterly and her counterparts from the UK and EU want the world…
Report: Tech misconceptions plague the IT world
Just snapping the webcam shutter closed won’t keep a user safe online New research has shown that while many Brits will snap shut a laptop camera in the name of privacy, a worrying amount will just as happily shovel all…
Entrust faces years of groveling to regain browsers’ trust, say rival chiefs
Sectigo bosses claim it’s only a matter of time before Microsoft and Apple drop Big E from their root stores too After falling down in the estimations of major browser makers Google and Mozilla, Entrust faces a lengthy fight on…
Cloud storage lockers from Microsoft and Google used to store and spread state-sponsored malware
Why run your own evil infrastructure when Big Tech offers robust tools hosted at trusted URLs? Black Hat State-sponsored cyber spies and criminals are increasingly using legitimate cloud services to attack their victims, according to Symantec’s threat hunters who have…
Samsung boosts bug bug bounty to a cool million for cracks of the Knox Vault subsystem
Good luck, crackers: It’s an isolated processor and storage enclave, and top dollar only comes from a remote attack Samsung has dangled its first $1 million bug bounty for anyone who successfully compromises Knox Vault – the isolated subsystem the…
Faulty instructions in Alibaba’s T-Head C910 RISC-V CPUs blow away all security
Let’s get physical, physical … I don’t wanna hear your MMU talk Black Hat Computer security researchers at the CISPA Helmholtz Center for Information Security in Germany have found serious security flaws in some of Alibaba subsidiary T-Head Semiconductor’s RISC-V…
Fighting AI fire with AI fire
Palo Alto Networks reveals how AI can be harnessed to strengthen cyber security defenses David Gordon Sponsored Post Hackers and cyber criminals are busy finding new ways of using AI to launch attacks on businesses and organizations often unprepared to…
Small CSS tweaks can help nasty emails slip through Outlook’s anti-phishing net
A simple HTML change and the warning is gone! Researchers say cybercriminals can have fun bypassing one of Microsoft’s anti-phishing measures in Outlook with some simple CSS tweaks.… This article has been indexed from The Register – Security Read the…
Police take just 2 days to recover $40M stolen in business email scam
Timor-Leste is a known cybercrime hotspot Two days is all it took for Interpol to recover more than $40 million worth of stolen funds in a recent business email compromise (BEC) heist, the international cop shop said this week.… This…
EQT buys majority share in Swiss cybersecurity biz Acronis
Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified Acronis, the Swiss disaster recovery turned cybersecurity firm and catch-all for managed service providers, has been majority acquired by Europe’s largest private equity firm, EQT.… This…
UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack
Nearly 83,000 people had their data stolen amid chaos that struck NHS healthcare The UK’s data protection watchdog says it plans to fine a managed software provider to the NHS £6.09 million ($7.7 million) for failings that led to a…
SharpRhino malware targets IT admins – Hunters International gang suspected
Fake Angry IP Scanner will make you furious – or maybe remind you of how the Hive gang went about its banal business The latest malware from upstart criminal gang Hunters International appears to be targeting network admins, using malicious…
Georgia’s voter portal gets a crash course in client versus backend input validation
Trying to cancel a citizen’s registration would be caught by humans no matter what the page said, officials say The US state of Georgia has a website for cancelling voter registration, and it’s had a bumpy start.… This article has…
Microsoft punches back at Delta Air Lines and its legal threats
SatNad himself offered CrowdStrike recovery help, Redmond says, before suggesting airline’s IT is in a mess Microsoft has labelled Delta Air Lines’ accusations it’s partly to blame for the outages caused by CrowdStrike’s buggy software “false” and “misleading” – and…
CrowdStrike hires outside security outfits to review troubled Falcon code
And reveals the small mistake that bricked 8.5M Windows boxes CrowdStrike has hired two outside security firms to review the Falcon functionality that sparked a global IT outage last month – but it may not have an awful lot to…
CrowdStrike hires outside security outfits to review Falcon code
And reveals the small mistake that bricked 8.5M Windows boxes CrowdStrike has hired two outside security firms to review the Falcon functionality that sparked a global IT outage last month – but it may not have an awful lot to…
CrowdStrike hires outside security firms to review Falcon code
And reveals the small mistake that bricked 8.5 million Windows boxes CrowdStrike has hired two outside security firms to review the Falcon sensor code that sparked a global IT outage last month – but it may not have an awful…
Google splats device-hijacking exploited-in-the-wild Android kernel bug among others
And Qualcomm addresses ‘permanent denial of service’ flaw in its stuff Google released 46 fixes for Android in its August security patch batch, including one for a Linux kernel flaw in the mobile OS that can lead to remote code…
Sonic Automotive says ransomware-linked CDK software outage cost it $30M
Misery loves company – all of its competitors were also negatively impacted One of the US’s largest car dealerships says the IT outage caused by CDK Global’s June ransomware attack cost it approximately $30 million.… This article has been indexed…
Bad apps bypass Windows security alerts for six years using newly unveiled trick
Windows SmartScreen and Smart App Control both have weaknesses of which to be wary Elastic Security Labs has lifted the lid on a slew of methods available to attackers who want to run malicious apps without triggering Windows’ security warnings,…
Users call on Microsoft to update Outlook’s friendly name feature
That one weird thing in Outlook that gives phishers and scammers an in to an inbox Users are urging Microsoft to rethink how it shows sender email addresses in Outlook because phishing criminals are taking advantage, using helpful, friendly names…
Billion-dollar bust as international op shutters Cryptonator wallet
Chap named ‘Roman Boss’ accused of being just that at a cryptocash laundering outfit Users of Cryptonator – an online digital wallet and cryptocurrency exchange – received an unpleasant surprise last weekend after the service was shuttered in a combined…
MDM vendor Mobile Guardian attacked, leading to remote wiping of 13,000 devices
Singapore Ministry of Education orders software removed after string of snafus UK-based mobile device management vendor Mobile Guardian has admitted that on August 4 it suffered a security incident that involved unauthorized access to iOS and ChromeOS devices managed by…
Mobile Guardian attacked, leading to remote wiping of 13,000 devices
Singapore Ministry of Education orders software removed after string of snafus UK-based mobile device management vendor Mobile Guardian has admitted that on August 4 it suffered a security incident that involved unauthorized access to iOS and ChromeOS devices managed by…
Illinois relaxes biometric privacy law so snafus won’t cost businesses billions
Some scowl, some smile, as fines no longer apply every time your mugshot or fingerprint is shared The US state of Illinois has reduced penalties for breaches of its tough Biometric Information Privacy Act (BIPA).… This article has been indexed…
NFL to begin using face scanning tech across all of its stadiums
Smile for the camera to get in, or buy a beer without lining up The National Football League and all 32 of its teams will use tech from facial recognition software vendor Wicket to verify the identity of thousands of…
That cyber-heist of 2.9B personal records? There’s a class-action lawsuit looming for that
Background check biz accused of negligence A lawsuit has accused a Florida data broker of carelessly failing to secure billions of records of people’s private information, which was subsequently stolen from the biz and sold on an online criminal marketplace.……
Your copilot for improved cyber protection
Watch this video to learn how Palo Alto Networks is using GenAI to automate and simplify cybersecurity Sponsored Post Cyber security is complex right, particularly when you’re tyring to monitor and configure multiple tools across a host of different on-…
Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets
Malware logs users’ keystrokes, pilfers credentials, exfiltrates data Criminals are preying on Windows users yet again, this time in an effort to hit them with a keylogger that can also steal credentials and take screenshots.… This article has been indexed…
CrowdStrike unhappy about Delta’s ‘litigation threat,’ claims airline refused ‘free on-site help’
Vendor plans to aggressively defend its case before listing catalog of shortcomings at the airline CrowdStrike says it is “highly disappointed” and rejects the claims made by Delta and its lawyers that the vendor exhibited gross negligence in the events…
China starts testing national cyber-ID before consultation on the idea closes
Eighty-one apps signed up to pilot facial recognition and real name ID system Chinese app developers have signed up to beta test a national cyberspace ID system that will use facial recognition technology and the real names of users, according…
Google gamed into advertising a malicious version of Authenticator
Plus: CISA’s AI hire; and Canuck SIM swappers busted Infosec in brief Scammers have been using Google’s own ad system to fool people into downloading a borked copy of the Chocolate Factory’s Authenticator software.… This article has been indexed from…
DARPA suggests turning old C code automatically into Rust – using AI, of course
Now that’s a TRACTOR pull request To accelerate the transition to memory safe programming languages, the US Defense Advanced Research Projects Agency (DARPA) is driving the development of TRACTOR, a programmatic code conversion vehicle.… This article has been indexed from…
Israeli hacktivist group brags it took down Iran’s internet
WeRedEvils alleges successful attack on infrastructure, including data theft Israel-based hacktivists are taking credit for an ongoing internet outage in Iran.… This article has been indexed from The Register – Security Read the original article: Israeli hacktivist group brags it…
Respect your data, and protect it
Hear how AI runtime security secures applications in the complete journey from design to build to run Sponsored Post Ensuring access to mission critical, AI-enabled applications is important for modern businesses keen on boosting employee productivity and transforming customer operations.…
Fortune 50 biz coughed up record-breaking $75M ransom to halt leak of stolen data
They say crime doesn’t pay. They’re right – it’s the victims doing the paying An unnamed Fortune 50 corporation paid a stonking $75 million to a ransomware gang to stop it leaking terabytes of stolen data.… This article has been…
UK plans to revamp national cyber defense tools are already in motion
Work aims to build on the success of NCSC’s 2016 initiative – and private sector will play a part The UK’s National Cyber Security Centre (NCSC) says it’s in the planning stages of bringing a new suite of services to…
UK crimebusters shut down global call-spoofing outfit that claimed 170K-plus victims
Suspected devs behind Russian Coms cuffed – now to find the users of the nastyware The UK’s National Crime Agency (NCA) has shut down an outfit called Russian Coms – a call-spoofing service believed to have swindled hundreds of thousands…
Japan mandates app to ensure national ID cards aren’t forged
First delays, then data leaks – now fraud detection needed at point of use The Japanese government has released details of of an app that verifies the legitimacy of its troubled My Number Card – a national identity document.… This…
India contemplates compulsory dynamic 2FA for digital payments
SMS OTPs are overused, so bring on the tokens and biometrics India’s central bank on Wednesday proposed a requirement for dynamically generated second authentication factors for most digital payments.… This article has been indexed from The Register – Security Read…
US sends cybercriminals back to Russia in prisoner swap that freed WSJ journo, others
Techno-crooks greeted by grinning Putin after landing At least two Russian cybercriminals are among those being returned to their motherland as part of a multinational prisoner exchange deal announced Thursday.… This article has been indexed from The Register – Security…
Too late now for canary updates, says pension fund suing CrowdStrike
That horse has not just bolted, it’s trampled all over kernel space CrowdStrike, after suggesting canary testing as a way to ensure it avoids future blunders leading to global computer outages, has been sued in federal court by investors for…
How to counter adversarial AI
Using Precision AI to stop cyber threats in real time Sponsored Hackers and cyber criminals are busy finding new ways of using AI to launch attacks on businesses and organisations often unprepared to deal with the speed, scale and sophistication…
FBI, CISA remind US voters that DDoS attacks can’t touch election systems
PSA comes amid multiple IT services crises in recent days US law enforcement and cybersecurity agencies are reminding the public that the country’s voting systems will remain unaffected by distributed denial of service (DDoS) attacks as the next presidential election…
Mozilla follows Google in losing trust in Entrust’s TLS certificates
Compliance failures and unsatisfactory responses mount from the long-time certificate authority Mozilla is following in Google Chrome’s footsteps in officially distrusting Entrust as a root certificate authority (CA) following what it says was a protracted period of compliance failures.… This…
Germany names China as source of attack on government geospatial agency
Meanwhile, US apparently considers further AI hardware sanctions Germany’s government has named China-controlled actors as the perpetrators of a 2021 cyber attack on the Federal Office of Cartography and Geodesy (BKG) – the official mapping agency.… This article has been…
Ransomware infection cuts off blood supply to 250+ hospitals
Scumbags go for the jugular A ransomware attack against blood-donation nonprofit OneBlood, which services more than 250 American hospitals, has “significantly reduced” the org’s ability to take, test, and distribute blood.… This article has been indexed from The Register –…
Ransomware infection cuts off blood supply to 250 hospitals
Scumbags go for the jugular A ransomware attack against blood-donation nonprofit OneBlood, which services more than 250 American hospitals, has “significantly reduced” the org’s ability to take, test, and distribute blood.… This article has been indexed from The Register –…
More than 83K certs from nearly 7K DigiCert customers must be swapped out now
Some ‘exceptional circumstances’ will be given a minor extension as lawsuits start to fly As the DigiCert drama continues, we now have a better idea of the size and scope of the problem – with the organization’s infosec boss admitting…
Russia takes aim at Sitting Ducks domains, bags 30,000+
Eight-year-old domain hijacking technique still claiming victims Dozens of Russia-affiliated criminals are right now trying to wrest control of web domains by exploiting weak DNS services.… This article has been indexed from The Register – Security Read the original article:…
Chrome adopts app-bound encryption to stymie cookie-stealing malware
Windows users now get macOS-grade secret security Google says it’s enhancing the security of sensitive data managed by Chrome for Windows users to fight the scourge of infostealer malware targeting cookies.… This article has been indexed from The Register –…
Embedding AI security from the get go
Watch this Palo Alto Networks keynote to understand the importance of visibility, control and governance in AI application and service development Sponsored Post The dawn of artificial intelligence is upon us, but its development has only just begun.… This article…
Five months after takedown, LockBit is a shadow of its former self
An unprecedented period for an unparalleled force in cybercrime Feature For roughly two years, LockBit’s ransomware operation was by far the most prolific of its kind, until the fateful events of February. After claiming thousands of victims, extorting hundreds of…
‘Error’ in Microsoft’s DDoS defenses amplified 8-hour Azure outage
A playbook full of strategies and someone fumbles the implementation Do you have problems configuring Microsoft’s Defender? You might not be alone: Microsoft admitted that whatever it’s using for its defensive implementation exacerbated yesterday’s Azure instability.… This article has been…
UK Electoral Commission slapped for basic cybersecurity fails
It took 13 months to notice 40 million voters’ data was compromised The UK’s Electoral Commission has received a formal slap on the wrist for a litany of security failings that led to the theft of personal data belonging to…
DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder
For the want of an underscore DigiCert has given some unlucky customers 24 hours to replace their SSL/TLS security certificates it previously issued them – due to a five-year-old blunder in its backend software.… This article has been indexed from…
Delta Air Lines dials up Microsoft’s legal nemesis over CrowdStrike losses
Oh, Boies, here we go again Delta Air Lines lost hundreds of millions of dollars due to the CrowdStrike outage earlier this month – and it has hired a high-powered law firm to claw some of those lost funds back,…
‘LockBit of phishing’ EvilProxy used in more than a million attacks every month
Leaves a trail of ransomware infections, data theft, business email compromise in its wake Insight The developers of EvilProxy – a phishing kit dubbed the “LockBit of phishing” – have produced guides on using legitimate Cloudflare services to disguise malicious…
Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability
Get those patches applied – all the big dogs are abusing it Do you have your VMware ESXi hypervisor joined to Active Directory? Well, the latest news from Microsoft serves as a reminder that you might not want to do…
Proofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others
They DKIM here, they DKIM there A huge phishing campaign exploited a security blind-spot in Proofpoint’s email filtering systems to send an average of three million “perfectly spoofed” messages a day purporting to be from Disney, IBM, Nike, Best Buy,…
Malaysia is working on an internet ‘kill switch’, says minister
Follows requirement for social media and messaging platforms to get a license Legislation for an internet “kill switch” will reach Malaysia’s Parliament in October, according to the country’s minister for Law and Institutional Reform.… This article has been indexed from…
Meta’s AI safety system defeated by the space bar
‘Ignore previous instructions’ thwarts Prompt-Guard model if you just add some good ol’ ASCII code 32 Meta’s machine-learning model for detecting prompt injection attacks – special prompts to make neural networks behave inappropriately – is itself vulnerable to, you guessed…
US border cops really must get a warrant in NY before searching your phones, devices
Do we really want to bother SCOTUS with this, friends? Surely they’re way too busy to take a look US border agents must obtain a warrant, in New York at least, to search anyone’s phone and other electronic device when…
US border cops really must get a warrant in NY before searching phones, devices
Do we really want to bother SCOTUS with this, friends? Surely they’re way too busy right now to take a look US border agents must obtain a warrant, in New York at least, to search anyone’s phone and other electronic…
Intruders at HealthEquity rifled through storage, stole 4.3M people’s data
No mention of malware or ransomware – somewhat of a rarity these days HealthEquity, a US fintech firm for the healthcare sector, admits that a “data security event” it discovered at the end of June hit the data of a…
Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update
Happy Sysadmin Day Google celebrated Sysadmin Day last week by apologizing for breaking its password manager for millions of Windows users – just as many Windows admins were still hard at work mitigating the impact of the faulty CrowdStrike update.……
Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed
Promises to discourage use of kernel drivers – so they don’t crash the world again Microsoft has admitted that its estimate of 8.5 million machines crashed by CrowdStrike’s faulty software update was almost certainly too low, and vowed to reduce…
China ponders creating a national ‘cyberspace ID’
Because clearly it’s better for Beijing to know who you are than for every ISP and social service to keep its own records Beijing may soon issue “cyberspace IDs” to its citizens, after floating a proposal for the scheme last…
Secure Boot useless on hundreds of PCs from major vendors after key leak
Plus: More stalkerware exposure; a $16M TracFone fine; Ransomware victims don’t use MFA, and more Infosec in brief Protecting computers’ BIOS and the boot process is essential for modern security – but knowing it’s important isn’t the same as actually…
CrowdStrike meets Murphy’s Law: Anything that can go wrong will
And boy, did last Friday’s Windows fiasco ever prove that yet again Opinion CrowdStrike’s recent Windows debacle will surely earn a prominent place in the annals of epic tech failures. On July 19, the cybersecurity giant accomplished what legions of…
Progress discloses second critical flaw in Telerik Report Server in as many months
These are the kinds of bugs APTs thrive on, just ask the Feds Progress Software’s latest security advisory warns customers about the second critical vulnerability targeting its Telerik Report Server in as many months.… This article has been indexed from…
North Korean chap charged for attacks on US hospitals, military, NASA – and even China
Microsoft, Mandiant, weigh in with info about methods used by Andariel gang alleged to have made many, many, heists The US Department of Justice on Thursday charged a North Korean national over a series of ransomware attacks on stateside hospitals…
North Korean chap charged for attacks on US hospitals, miiltary, NASA – and even China
Microsoft, Mandiant, weigh in with info about methods used by Andariel gang alleged to have made many, many, heists The US Department of Justice on Thursday charged a North Korean national over a series of ransomware attacks on stateside hospitals…
North Korean chap charged for attacks on US hospitals, NASA – and even China
Microsoft, Mandiant, weigh in with info about methods used by Andariel gang alleged to have made many, many, heists The US Department of Justice on Thursday charged a North Korean national over a series of ransomware attacks on stateside hospitals…
Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank
May even have targeted other malware gangs, and infosec researchers Infosec researchers have discovered a network of over three thousand malicious GitHub accounts used to spread malware, targeting groups including gamers, malware researchers, and even other threat actors who themselves…
CrowdStrike update blunder may cost world billions – and insurance ain’t covering it all
We offer this formula instead: RND(100.0)*(10^9) The cost of CrowdStrike’s apocalyptic Falcon update that brought down millions of Windows computers last week may be in the billions of dollars, and insurance isn’t covering most of that.… This article has been…
Beware of fake CrowdStrike domains pumping out Lumma infostealing malware
PSA: Only accept updates via official channels … ironically enough CrowdStrike is the latest lure being used to trick Windows users into downloading and running the notorious Lumma infostealing malware, according to the security shop’s threat intel team, which spotted…
FYI: Data from deleted GitHub repos may not actually be deleted
And the forking Microsoft-owned code warehouse doesn’t see this as much of a problem Researchers at Truffle Security have found, or arguably rediscovered, that data from deleted GitHub repositories (public or private) and from deleted copies (forks) of repositories isn’t…
Uncle Sam accuses telco IT pro of decade-long spying campaign for China
Beijing has a long history of recruiting US residents to carry out various espionage activities The US is looking to prosecute a Chinese immigrant over claims he has been drip-feeding information of interest to Beijing since at least 2012.… This…
You should probably fix this 5-year-old critical Docker vuln fairly sharpish
For some unknown reason, initial patch was omitted from later versions Docker is warning users to rev their Docker Engine into patch mode after it realized a near-maximum severity vulnerability had been sticking around for five years.… This article has…
Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review
Those national security threat claims? ‘No evidence,’ VP tells The Reg Exclusive Despite the Feds’ determination to ban Kaspersky’s security software in the US, the Russian business is moving forward with another proposal to open up its data and products…
Patch management still seemingly abysmal because no one wants the job
Are your security and ops teams fighting to pass the buck? Comment Patching: The bane of every IT professional’s existence. It’s a thankless, laborious job that no one wants to do, goes unappreciated when it interrupts work, and yet it’s…
How a cheap barcode scanner helped fix CrowdStrike’d Windows PCs in a flash
This one weird trick saved countless hours and stress – no, really Not long after Windows PCs and servers at the Australian limb of audit and tax advisory Grant Thornton started BSODing last Friday, senior systems engineer Rob Woltz remembered…
The months and days before and after CrowdStrike’s fatal Friday
‘In the short term, they’re going to have to do a lot of groveling’ Analysis The great irony of the CrowdStrike fiasco is that a cybersecurity company caused the exact sort of massive global outage it was supposed to prevent.…
Fatal timeline of CrowdStrike’s week from hell – Feb to now
‘In the short term, they’re going to have to do a lot of groveling’ Analysis The great irony of the CrowdStrike fiasco is that a cybersecurity company caused the exact sort of massive global outage it was supposed to prevent.…
Oops. Apple relied on bad code while flaming Google Chrome’s Topics ad tech
Yes, you can be fingerprinted and tracked via Privacy Sandbox – tho the risk is low Apple last week celebrated a slew of privacy changes coming to its Safari browser and took the time to bash rival Google for its…
Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines
Concerns abound over why it has taken so long to recover compared to competitors The US Department of Transportation (DoT) is investigating Delta Air Lines over its handling of the global IT outage caused by CrowdStrike’s content update.… This article…
Windows Patch Tuesday update might send a user to the BitLocker recovery screen
Not now, Microsoft Some Windows devices are presenting users with a BitLocker recovery screen upon reboot following the installation of July’s Patch Tuesday update.… This article has been indexed from The Register – Security Read the original article: Windows Patch…
Data pilfered from Pentagon IT supplier Leidos
With numerous US government agency customers, any leak could be serious Internal documents stolen from Leidos Holdings, an IT services provider contracted with the Department of Defense and other US government agencies, have been leaked.… This article has been indexed…
School gets an F for using facial recognition on kids in canteen
Watchdog reprimand follows similar cases in 2021 The UK’s data protection watchdog has reprimanded a school in Essex for using facial recognition for canteen payments, nearly three years after other schools were warned about doing the same.… This article has…
Forget security – Google’s reCAPTCHA v2 is exploiting users for profit
Web puzzles don’t protect against bots, but humans have spent 819 million unpaid hours solving them Google promotes its reCAPTCHA service as a security mechanism for websites, but researchers affiliated with the University of California, Irvine, argue it’s harvesting information…