The Register
Expired Juniper routers find new life – as Chinese spy hubs
Chinese spies have for months exploited old Juniper Networks routers, infecting the buggy gear with custom backdoors and gaining root access to the compromised devices.…
This is the FBI, open up. China's Volt Typhoon is on your network
Nick Lawler, general manager of the Littleton Electric Light and Water Departments (LELWD), was at home one Friday when he got a call from the FBI alerting him that the public power utility's network had been compromised. The digital intruders turned out to be Volt Typhoon.…
UK must pay cyber pros more than its Prime Minister, top civil servant says
Senior officials in the UK's civil service understand that future cyber hires in Whitehall will need to be paid a salary higher than that of the Prime Minister if the government wants to get serious about fending off attacks.…
CISA worker says 100-strong red team fired after DOGE cancelled contract
A penetration tester who worked at the US govt's CISA claims his 100-strong team was dismissed after Elon Musk's Trump-blessed DOGE unit cancelled a contract – and that more staff at the cybersecurity agency have also been let go.…
Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws
Patch Tuesday Microsoft’s Patch Tuesday bundle has appeared, with a dirty dozen flaws competing for your urgent attention – six of them rated critical and another six already being exploited by criminals.…
'Uber for nurses' exposes 86k+ medical records, PII in open S3 bucket for months
Exclusive More than 86,000 records containing nurses' medical records, facial images, ID documents and more sensitive info linked to health tech company ESHYFT was left sitting in a wide-open S3 bucket for months — or possibly even longer — before it was closed it last week.…
FTC’s $25.5M scam refund treats victims to $34 each
The Federal Trade Commission (FTC) is distributing over $25.5 million in refunds to consumers deceived by tech support scammers, averaging about $34 per person.…
MINJA sneak attack poisons AI models for other chatbot users
AI models with memory aim to enhance user interactions by recalling past engagements. However, this feature opens the door to manipulation.…
Allstate Insurance sued for delivering personal info on a platter, in plaintext, to anyone who went looking for it
New York State has sued Allstate Insurance for operating websites so badly designed they would deliver personal information in plain-text to anyone that went looking for it.…
Google begs owners of crippled Chromecasts not to hit factory reset
Google's second-generation Chromecast and its Chromecast Audio are suffering a major ongoing outage, with devices failing to cast due to an expired security certificate. The web giant is aware of the breakdown and says a fix is in the works.…
Sidewinder goes nuclear, charts course for maritime mayhem in tactics shift
Researchers say the Sidewinder offensive cyber crew is starting to target maritime and nuclear organizations.…
Rhysida pwns two US healthcare orgs, extracts over 300K patients' data
Break-ins to systems hosting the data of two US healthcare organizations led to thieves making off with the personal and medical data of more than 300,000 patients.…
Consumer Reports calls out slapdash AI voice-cloning safeguards
Four out of six companies offering AI voice cloning software fail to provide meaningful safeguards against the misuse of their products, according to research conducted by Consumer Reports.…
How NOT to f-up your security incident response
Feature Experiencing a ransomware infection or other security breach ranks among the worst days of anyone's life — but it can still get worse.…
The NHS security culture problem is a crisis years in the making
Analysis Walk into any hospital and ask the same question – "Which security system should we invest in?" – to both a doctor and a board member, and you may get different answers. The doctor chooses the system that leads to the most positive patient outcomes, while the board member chooses whichever solution is best for their increasingly stretched budget.…
Strap in, get ready for more Rust drivers in Linux kernel
Rust is alive and well in the Linux kernel and is expected to translate into noticeable benefits shortly, though its integration with the largely C-oriented codebase still looks uneasy.…
Microsoft admits GitHub hosted malware that infected almost a million devices
Infosec in Brief Microsoft has spotted a malvertising campaign that downloaded nastyware hosted on GitHub and exposed nearly a million devices to information thieves.…
India wants backdoors into clouds, email, SaaS, for tax inspectors
Asia in Brief India’s government has proposed giving its tax authorities sweeping powers to access private email systems and applications.…
Kernel saunters – How Apple rearranged its XNU kernel with exclaves
Apple has been working to harden the XNU kernel that powers its various operating systems, including iOS and macOS, with a feature called "exclaves."…
Developer sabotaged ex-employer with kill switch that activated when he was let go
A federal jury in Cleveland has found a senior software developer guilty of sabotaging his employer's systems – and he's now facing a potential ten years behind bars.…