The Register
Feds: Army soldier accused of AT&T heist Googled ‘can hacking be treason,’ ‘defecting to Russia’
The US Army soldier accused of compromising AT&T and bragging about getting his hands on President Trump's call logs allegedly tried to sell stolen information to a foreign intel agent.…
FBI officially fingers North Korea for $1.5B Bybit crypto-burglary
The FBI has officially accused North Korea's Lazarus Group of stealing $1.5 billion in Ethereum from crypto-exchange Bybit earlier this month, and asked for help tracking down the stolen funds.…
Does terrible code drive you mad? Wait until you see what it does to OpenAI's GPT-4o
Computer scientists have found that fine-tuning notionally safe large language models to do one thing badly can negatively impact the AI’s output across a range of topics.…
Wallbleed vulnerability unearths secrets of China's Great Firewall 125 bytes at a time
Smart folks investigating a memory-dumping vulnerability in the Great Firewall of China (GFW) finally released their findings after probing it for years.…
With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare
A tip-off from a government agency has resulted in 284 million unique email addresses and plenty of passwords snarfed by credential-stealing malware being added to privacy-breach-notification service Have I Been Pwned (HIBP).…
Bybit declares war on North Korea's Lazarus crime-ring to regain $1.5B stolen from wallet
Cryptocurrency exchange Bybit, just days after suspected North Korean operatives stole $1.5 billion in Ethereum from it, has launched a bounty program to help recover its funds.…
Qualcomm pledges 8 years of security updates for Android kit using its chips (YMMV)
It seems manufacturers are finally getting the message that people want to use their kit for longer without security issues, as Qualcomm has said it'll provide Android software updates, including vulnerability fixes, for its latest chipsets for eight years instead of four.…
Signal will withdraw from Sweden if encryption-busting laws take effect
Signal CEO Meredith Whittaker says her company will withdraw from countries that force messaging providers to allow law enforcement officials to access encrypted user data, as Sweden continues to mull such plans.…
200-plus impressively convincing GitHub repos are serving up malware
Infosec bytes Kaspersky says it has found more than 200 GitHub repos hosting fairly convincing-looking fake projects laced with malicious software.…
Incoming deputy head of Homeland Security says CISA needs to be reined in
During confirmation hearings in the US Senate Tuesday for the role of deputy director of the Dept of Homeland Security, the nominee Troy Edgar said CISA has had the wrong management and needed to be "reined in."…
Drug-screening biz DISA took a year to disclose security breach affecting millions
DISA Global Solutions, a company that provides drug and alcohol testing, background checks and other employee screening services, this week notified over 3.3 million people that their sensitive information may have been stolen by miscreants.…
Xi know what you did last summer: China was all up in Republicans' email, says book
Chinese spies reportedly broke into the US Republication National Committee's Microsoft-powered email and snooped around for months before being caught.…
MITRE Caldera security suite scores perfect 10 for insecurity
The smart cookie who discovered a perfect 10-out-of-10-severity remote code execution (RCE) bug in MITRE's Caldera security training platform has urged users to "immediately pull down the latest version." As in, download it and install it.…
Harassment allegations against DEF CON veteran detailed in court filing
Details about the harassment allegations leveled at DEF CON veteran Christopher Hadnagy have now been revealed after a motion for summary judgment was filed over the weekend.…
Data resilience and data portability
Sponsored Feature Considering it has such a large share of the data protection market, Veeam doesn't talk much about backups in meetings with enterprise customers these days.…
China's Silver Fox spoofs medical imaging apps to hijack patients' computers
A Chinese government-backed group is spoofing legitimate medical software to hijack hospital patients' computers, infecting them with backdoors, credential-swiping keyloggers, and cryptominers.…
Malware variants that target operational tech systems are very rare – but 2 were found last year
Two new malware variants specifically designed to disrupt critical industrial processes were set loose on operational technology networks last year, shutting off heat to more than 600 apartment buildings in one instance and jamming communications to gas, water, and sewage network sensors in the other.…
Southern Water takes the fifth over alleged $750K Black Basta ransom offer
Southern Water neither confirms nor denies offering Black Basta a $750,000 ransom payment following its ransomware attack in 2024.…
How nice that state-of-the-art LLMs reveal their reasoning ... for miscreants to exploit
Analysis AI models like OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking can mimic human reasoning through a process called chain of thought.…
Google binning SMS MFA at last and replacing it with QR codes
Google has confirmed it will phase out the use of SMS text messages for multi-factor authentication in favor of more secure technologies.…