News
China names alleged US snoops over Asian Winter Games attacks
China's state-run press has taken its turn in trying to highlight alleged foreign cyber offensives, accusing the US National Security Agency of targeting the 2025 Asian Winter Games.…
All right, you can have one: DOGE access to Treasury IT OK'd judge
A federal judge has partly lifted an injunction against Elon Musk's Trump-blessed cost-trimming DOGE unit, allowing one staff member to access sensitive US Treasury payment systems. This access includes personally identifiable financial information tied to millions of Americans.…
Chinese snoops use stealth RAT to backdoor US orgs – still active last week
A cyberspy crew or individual with ties to China's Ministry of State Security has infected global organizations with a remote access trojan (RAT) that's "even better" than Cobalt Strike, using this stealthy backdoor to enable its espionage and access resale campaigns.…
ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?
Microsoft has twisted the knife into ActiveX once again, setting Microsoft 365 to disable all controls without so much as a prompt.…
Where it Hertz: Customer data driven off in Cleo attacks
Car hire giant Hertz has confirmed that customer information was stolen during the zero-day data raids on Cleo file transfer products last year.…
EU gives staff 'burner phones, laptops' for US visits
The European Commission is giving staffers visiting the US on official business burner laptops and phones to avoid espionage attempts, according to the Financial Times.…
Don't delete that mystery empty folder. Windows put it there as a security fix
Canny Windows users who've spotted a mysterious folder on hard drives after applying last week's security patches for the operating system can rest assured – it's perfectly benign. In fact, it's recommended you leave the directory there.…
New SSL/TLS certs to each live no longer than 47 days by 2029
CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to just 47 days by March 15, 2029.…
Cyber congressman demands answers before CISA gets cut down to size
As drastic cuts to the US govt's Cybersecurity and Infrastructure Security Agency loom, Rep Eric Swalwell (D-CA), the ranking member of the House's cybersecurity subcommittee, has demanded that CISA brief the subcommittee "prior to any significant changes to CISA's workforce or organizational structure."…
Official abuse of state security has always been bad, now it's horrifying
Opinion The UK government's attempts to worm into Apple's core end-to-end encryption were set back last week when the country's Home Office failed in its bid to keep them secret on national security grounds.…
CIO and digi VP to depart UK retail giant Asda as Walmart divorce woes settle
Two of the top team behind Asda's £1 billion ($1.31 billion) tech divorce from US retail giant Walmart — which has seen a number of setbacks — are departing the company.…
Old Fortinet flaws under attack with new method its patch didn't prevent
Infosec In Brief Fortinet last week admitted that attackers have found new ways to exploit three flaws it thought it had fixed last year.…
China reportedly admitted directing cyberattacks on US infrastructure
Asia In Brief Chinese officials admitted to directing cyberattacks on US infrastructure at a meeting with their American counterparts, according to The Wall Street Journal.…
Hacktivism is back – but don't be fooled, it's often state-backed goons in masks
Feature From triggering a water tank overflow in Texas to shutting down Russian state news services on Vladimir Putin's birthday, self-styled hacktivists have been making headlines.…
AI can't stop making up software dependencies and sabotaging everything
The rise of AI-powered code generation tools is reshaping how developers write software - and introducing new risks to the software supply chain in the process.…
Microsoft total recalls Recall totally to Copilot+ PCs
After temporarily shelving its controversial Windows Recall feature amid a wave of backlash, Microsoft is back at it - now quietly slipping the screenshotting app into the Windows 11 Release Preview channel for Copilot+ PCs, signaling its near-readiness for general availability.…
Ransomware crims hammering UK more than ever as British techies complain the board just doesn't get it
The UK government's latest annual data breach survey shows the number of ransomware attacks on the isles is on the increase – and many techies are forced to constantly informally request company directors for defense spending because there's no security people on the board.…
Ex-Meta exec tells Senate Zuck's biz dangled US citizen data in bid to enter China
Facebook's former director of global public policy told a Senate committee that Meta CEO Mark Zuckerberg was willing to do almost anything to get the social network into China - including, she alleged, offering up Americans' data.…
US sensor giant Sensata admits ransomware derailed ops
US sensor maker Sensata has told regulators that a ransomware attack caused an operational disruption, and that it's still working to fully restore affected systems.…
Infosec experts fear China could retaliate against tariffs with a Typhoon attack
World War Fee As the trade war between America and China escalates, some infosec and policy experts fear Beijing will strike back in cyberspace.…
Pages
