News

CDNs: Great for speeding up the internet, bad for location privacy

The Register - Mon, 27/01/2025 - 11:45
Also, Subaru web portal spills user deets, Tornado Cash sanctions overturned, a Stark ransomware attack, and more

Infosec in brief  Using a custom-built tool, a 15-year-old hacker exploited Cloudflare's content delivery network to approximate the locations of users of apps like Signal, Discord, and others.…

Categories: News

British Museum says ex-contractor 'shut down' IT systems, wreaked havoc

The Register - Mon, 27/01/2025 - 09:30
Former freelancer cuffed a week after being dismissed by UK's top visitor attraction

The British Museum was forced to temporarily close some galleries and exhibitions this weekend after a disgruntled former tech contractor went rogue and shuttered some onsite IT systems.…

Categories: News

Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet

The Register - Sat, 25/01/2025 - 11:12
Who could be so interested in chips, manufacturing, and more, in the US, UK, Europe, Russia...

Someone has been quietly backdooring selected Juniper routers around the world in key sectors including semiconductor, energy, and manufacturing, since at least mid-2023.…

Categories: News

UK telco TalkTalk confirms probe into alleged data grab underway

The Register - Sat, 25/01/2025 - 09:30
Spinner says crim's claims 'very significantly overstated'

UK broadband and TV provider TalkTalk says it's currently investigating claims made on cybercrime forums alleging data from the company was up for grabs.…

Categories: News

AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud

The Register - Fri, 24/01/2025 - 23:26
GameOn? It's looking more like game over for that biz

The co-founder and former CEO of AI startup GameOn is in a pickle. After exiting the top job last year under a cloud, he's now in court – along with his wife – for allegedly bilking his company and its investors out of more than $60 million.…

Categories: News

Don't want your Kubernetes Windows nodes hijacked? Patch this hole now

The Register - Fri, 24/01/2025 - 15:00
SYSTEM-level command injection via API parameter *chef's kiss*

A now-fixed command-injection bug in Kubernetes can be exploited by a remote attacker to gain code execution with SYSTEM privileges on all Windows endpoints in a cluster, and thus fully take over those systems, according to Akamai researcher Tomer Peled.…

Categories: News

North Korean dev who renamed himself 'Bane' accused of IT worker fraud scheme

The Register - Fri, 24/01/2025 - 13:45
5 indicted as FBI warns North Korea dials up aggression, plus Russian devs allegedly get in on the act

The US is indicting yet another five suspects it believes were involved in North Korea's long-running, fraudulent remote IT worker scheme – including one who changed their last name to "Bane" and scored a gig at a tech biz in San Francisco.…

Categories: News

China and friends claim success in push to stamp out tech support cyber-scam slave camps

The Register - Fri, 24/01/2025 - 05:59
Paint a target on Myanmar, pledge more info-sharing to get the job done

A group established by six Asian nations to fight criminal cyber-scam slave camps that infest the region claims it’s made good progress dismantling the operations.…

Categories: News

Court rules FISA Section 702 surveillance of US resident was unconstitutional

The Register - Fri, 24/01/2025 - 04:31
'Public interest alone does not justify warrantless querying' says judge

It was revealed this week a court in New York made a landmark ruling that sided against the warrantless state surveillance of people's private communications in America.…

Categories: News

One of Salt Typhoon's favorite flaws still wide open on 91% of at-risk Exchange Servers

The Register - Thu, 23/01/2025 - 23:30
But we mean, you've had nearly four years to patch

One of the critical security flaws exploited by China's Salt Typhoon to breach US telecom and government networks has had a patch available for nearly four years - yet despite repeated warnings from law enforcement and private-sector security firms, nearly all public-facing Microsoft Exchange Server instances with this vulnerability remain unpatched.…

Categories: News

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management

The Register - Thu, 23/01/2025 - 21:00
No in-the-wild exploits … yet

Cisco has pushed a patch for a critical, 9.9-rated vulnerability in its Meeting Management tool that could allow a remote, authenticated attacker with low privileges to escalate to administrator on affected devices.…

Categories: News

SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix

The Register - Thu, 23/01/2025 - 16:36
Big organizations and governments are main users of these gateways

SonicWall is warning customers of a critical vulnerability that was potentially already exploited as a zero-day.…

Categories: News

Meta's pay-or-consent model under fire from EU consumer group

The Register - Thu, 23/01/2025 - 15:30
Company 'strongly disagrees' with law infringement allegations

Meta has again come under fire for its pay-or-consent model in the EU.…

Categories: News

FortiGate config leaks: Victims' email addresses published online

The Register - Thu, 23/01/2025 - 14:45
Experts warn not to take leaks lightly as years-long compromises could remain undetected

Thousands of email addresses included in the Belsen Group's dump of FortiGate configs last week are now available online, revealing which organizations may have been impacted by the 2022 zero-day exploits.…

Categories: News

Who is DDoSing you? Rivals, probably, or cheesed-off users

The Register - Thu, 23/01/2025 - 10:19
Plus: 'Largest-ever' duff traffic tsunami clocks in at 5.6 Tbps

In addition to Chinese spies invading organizations' networks and ransomware crews locking up sensitive files, botnets blasting distributed denial of service (DDoS) attacks can still cause a world of hurt — and website downtime — and it's quite likely your competitors are to blame.…

Categories: News

Biz tax rises, inflation and high interest. Why fewer UK tech firms started in 2024

The Register - Thu, 23/01/2025 - 09:30
And the government thinks that AI and taking shackles off big tech will help? God help Britain

For the first time since the start of the pandemic, the number of tech firms incorporated in the UK has declined, with a shrinking economy, as well as high inflation and interest rates causing a slump in business confidence.…

Categories: News

Asus lets processor security fix slip out early, AMD confirms patch in progress

The Register - Thu, 23/01/2025 - 07:19
Answers on a postcard to what 'Microcode Signature Verification Vulnerability' might mean

AMD has confirmed at least some of its microprocessors suffer a microcode-related security vulnerability, the existence of which accidentally emerged this month after a fix for the flaw appeared in a beta BIOS update from PC maker Asus.…

Categories: News

Oracle emits 603 patches, names one it wants you to worry about soon

The Register - Thu, 23/01/2025 - 01:06
Old flaws that keep causing trouble haunt Big Red

Oracle has delivered its regular quarterly collection of patches: 603 in total, 318 for its own products, and another 285 for Linux code it ships.…

Categories: News

Trump 'waved a white flag to Chinese hackers' as DHS axed cyber advisory boards

The Register - Wed, 22/01/2025 - 21:30
'The homeland has never been less secure,' retired Rear Admiral tells Congress

The Trump Administration gutted key cyber advisory boards in its first days, as expert witnesses warned Congress about dire risks posed by cyberattacks rooted in China.…

Categories: News

Supply chain attack hits Chrome extensions, could expose millions

The Register - Wed, 22/01/2025 - 19:45
Threat actor exploited phishing and OAuth abuse to inject malicious code

Cybersecurity outfit Sekoia is warning Chrome users of a supply chain attack targeting browser extension developers that has potentially impacted hundreds of thousands of individuals already.…

Categories: News

Pages

Subscribe to Sec Tec Limited aggregator - News