Security News • The Register

Federal judge tightens DOGE leash over critical Treasury payment system access

Final update Lawsuit: 'Scale of intrusion into individuals' privacy is massive and unprecedented'

Public Sector06 Feb 2025 | 28

Dems want answers on national security risks posed by hiring freeze, DOGE probes

Updated Are cybersecurity roles included? Are Elon's enforcers vetted? Inquiring minds want to know

Security06 Feb 2025 | 35

Democrats demand to know WTF is up with that DOGE server on OPM's network

Are you trying to make this easy for China and Russia?

Public Sector06 Feb 2025 | 153

Robocallers who phoned the FCC pretending to be from the FCC land telco in trouble

Don't laugh: The $4.5m fine proposed for carrier Telnyx shows how the Trump administration will run its comms regulator

Networks06 Feb 2025 | 30

Mixing Rust and C in Linux likened to cancer by kernel maintainer

Updated Some worry multiple languages will make it harder to maintain this open source uber-project, others disagree

Software05 Feb 2025 | 127

DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system

CEO of Cloud Software a 'special government employee' probing for Team Elon

Public Sector05 Feb 2025 | 26

Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge

International security squads all focus on stopping baddies busting in through routers, IoT kit etc

Edge + IoT05 Feb 2025 | 4

US cranks up espionage charges against ex-Googler accused of trade secrets heist

Mountain View clocked onto the scheme with days to spare

AI + ML05 Feb 2025 | 15

Google: How to make any AMD Zen CPU always generate 4 as a random number

Malicious microcode vulnerability discovered, fixes rolling out for Epycs at least

Patches04 Feb 2025 | 75

Poisoned Go programming language package lay undetected for 3 years

Updated Researcher says ecosystem's auto-caching is a net positive but presents exploitable quirks

Security04 Feb 2025 | 9

Grubhub serves up security incident with a side of needing to change your password

Contact info and partial payment details may be compromised

Cyber-crime04 Feb 2025 |

US accuses Canadian math prodigy of $65M crypto scheme

Suspect, still at large, said to back concept that 'code is law'

Legal04 Feb 2025 | 24

Cyberattack on NHS causes hospitals to miss cancer care targets

Healthcare chiefs say impact will persist for months

Cyber-crime04 Feb 2025 | 12

Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'

When cloud customers don't clean up after themselves, part 97

CSO04 Feb 2025 | 33

UK govt must learn fast and let failing projects die young

Tackle longstanding issues around productivity, cyber resilience and public sector culture, advises spending watchdog

Public Sector04 Feb 2025 | 11

Google patches odd Android kernel security bug amid signs of targeted exploitation

Also, Netgear fixes critical router, access point vulnerabilities

Patches04 Feb 2025 | 5

Privacy Commissioner warns the ‘John Smiths’ of the world can acquire ‘digital doppelgangers’

Australian government staff mixed medical info for folk who share names and birthdays

Public Sector03 Feb 2025 | 44

Medical monitoring machines spotted stealing patient data, users warned to pull the plug ASAP

Infosec in brief PLUS: MGM settles breach suits; AWS doesn't trust you with security defaults; A new .NET backdoor; and more

Security03 Feb 2025 | 9

What does it mean to build in security from the ground up?

Systems Approach As if secure design is the only bullet point in a list of software engineering best practices

CSO02 Feb 2025 | 12

Gilmore Girls fans nabbed as Eurocops dismantle two major cybercrime forums

Nulled and Cracked had a Lorelai-cal rise - until Operation Talent stepped in

Security02 Feb 2025 | 2

The Big Short on Cybersecurity

How to communicate risk to executives

Partner Content

Another banner year for ransomware gangs despite takedowns by the cops

And it doesn't take a crystal ball to predict the future

Cyber-crime31 Jan 2025 | 6

Google to Iran: Yes, we see you using Gemini for phishing and scripting. We're onto you

And you, China, Russia, North Korea ... Guardrails block malware generation

Security31 Jan 2025 | 13

VMware plugs steal-my-credentials holes in Cloud Foundation

Consider patching soon because cybercrooks love to hit vulnerable tools from Broadcom's virtualization giant

Patches30 Jan 2025 |

Trump admin's purge of US cyber advisory boards was 'foolish,' says ex-Navy admiral

interview ‘No one was kicked off the NTSB in the middle of investigating a crash’

Security30 Jan 2025 | 116

Ransomware attack at New York blood services provider – donors turned away during shortage crisis

400 hospitals and med centers across 15 states rely on its products

Cyber-crime30 Jan 2025 | 13

Canvassing apps used by UK political parties riddled with privacy, security issues

Neither Labour, Conservatives, nor the Lib Dems offered a retort to rights org's report

Research30 Jan 2025 | 21

WFH with privacy? 85% of Brit bosses snoop on staff

Employers remain blissfully unaware/wilfully ignorant of the impact of surveillance on staff

Security30 Jan 2025 | 80

Wacom says crooks probably swiped customer credit cards from its online checkout

Digital canvas slinger indicates dot-com was skimmed for over a month

Cyber-crime30 Jan 2025 | 3

Guess who left a database wide open, exposing chat logs, API keys, and more? Yup, DeepSeek

Oh someone's in DeepShi...

CSO30 Jan 2025 | 71

North Koreans clone open source projects to plant backdoors, steal credentials

Stealing crypto is so 2024. Supply-chain attacks leading to data exfil pays off better?

Devops29 Jan 2025 | 2

Why is my Mitel phone DDoSing strangers? Oh, it was roped into a new Mirai botnet

And now you won't stop calling me, I'm kinda busy

CSO29 Jan 2025 | 4

'Bro delete the chat': Feel the panic shortly before cops bust major online fraud ring

Mastermind begs colluders to bury evidence later used to imprison him

Cyber-crime29 Jan 2025 | 21

Spending watchdog blasts UK govt over sloth-like progress to shore up IT defenses

Think government cybersecurity is bad? Guess again. It’s alarmingly so

Public Sector29 Jan 2025 | 13

The curious story of Uncle Sam's HR dept, a hastily set up email server, and fears of another cyber disaster

Lawsuit challenges effort to create federal-wide centralized inbox expected to be used for mass firings

CSO29 Jan 2025 | 57

SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac, iPad Silicon

It's another cousin of Spectre, here to read your email, browsing history, and more

Research29 Jan 2025 | 15

Baguette bandits strike again with ransomware and a side of mockery

Big-game hunting to the extreme

Cyber-crime28 Jan 2025 | 6

Protecting AWS environments from cyberthreats

The shared responsibility model: why securing AWS workloads is essential

Partner Content

Security pros more confident about fending off ransomware, despite being battered by attacks

Data leak, shmata leak. It will all work out, right?

Cyber-crime28 Jan 2025 | 5

Apple plugs security hole in its iThings that's already been exploited in iOS

Cupertino kicks off the year with a zero-day

Patches28 Jan 2025 | 15

US freezes foreign aid, halting cybersecurity defense and policy funds for allies

Updated Uncle Sam will 'no longer blindly dole out money,' State Dept says

Public Sector27 Jan 2025 | 86

DeepSeek limits new accounts amid cyberattack

Updated Chinese AI startup grapples with consequences of sudden popularity

Cyber-crime27 Jan 2025 | 43

Google takes action after coder reports 'most sophisticated attack I've ever seen'

Latest trope is tricky enough to fool even the technical crowd… almost

Cyber-crime27 Jan 2025 | 32

Sweden seizes cargo ship after another undersea cable hit in suspected sabotage

NATO increasing patrols in the Baltic as region awaits navy drones

Networks27 Jan 2025 | 64

CDNs: Great for speeding up the internet, bad for location privacy

Infosec in brief Also, Subaru web portal spills user deets, Tornado Cash sanctions overturned, a Stark ransomware attack, and more

Security27 Jan 2025 | 5

British Museum says ex-contractor 'shut down' IT systems, wreaked havoc

Former freelancer cuffed a week after being dismissed by UK's top visitor attraction

Security27 Jan 2025 | 62

Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet

Who could be so interested in chips, manufacturing, and more, in the US, UK, Europe, Russia...

Networks25 Jan 2025 | 78

UK telco TalkTalk confirms probe into alleged data grab underway

Spinner says crim's claims 'very significantly overstated'

Security25 Jan 2025 | 33

AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud

GameOn? It's looking more like game over for that biz

Cyber-crime24 Jan 2025 | 30

Don't want your Kubernetes Windows nodes hijacked? Patch this hole now

SYSTEM-level command injection via API parameter *chef's kiss*

Patches24 Jan 2025 | 4

North Korean dev who renamed himself 'Bane' accused of IT worker fraud caper

5 indicted as FBI warns North Korea dials up aggression, plus Russian devs allegedly get in on the act

Cyber-crime24 Jan 2025 | 2

China and friends claim success in push to stamp out tech support cyber-scam slave camps

Paint a target on Myanmar, pledge more info-sharing to get the job done

Cyber-crime24 Jan 2025 | 12

Court rules FISA Section 702 surveillance of US resident was unconstitutional

'Public interest alone does not justify warrantless querying' says judge

Security24 Jan 2025 | 19

One of Salt Typhoon's favorite flaws still wide open on 91% of at-risk Exchange Servers

But we mean, you've had nearly four years to patch

Patches23 Jan 2025 | 4

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management

No in-the-wild exploits … yet

Patches23 Jan 2025 |

SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix

Big organizations and governments are main users of these gateways

Patches23 Jan 2025 | 10

Meta's pay-or-consent model under fire from EU consumer group

Company 'strongly disagrees' with law infringement allegations

Personal Tech23 Jan 2025 | 31

Topics

Special Features

Vendor Voice

Resources

Security

Federal judge tightens DOGE leash over critical Treasury payment system access

Dems want answers on national security risks posed by hiring freeze, DOGE probes

Democrats demand to know WTF is up with that DOGE server on OPM's network

Robocallers who phoned the FCC pretending to be from the FCC land telco in trouble

Mixing Rust and C in Linux likened to cancer by kernel maintainer

DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system

Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge

US cranks up espionage charges against ex-Googler accused of trade secrets heist

Google: How to make any AMD Zen CPU always generate 4 as a random number

Poisoned Go programming language package lay undetected for 3 years

Grubhub serves up security incident with a side of needing to change your password

US accuses Canadian math prodigy of $65M crypto scheme

Cyberattack on NHS causes hospitals to miss cancer care targets

Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'

UK govt must learn fast and let failing projects die young

Google patches odd Android kernel security bug amid signs of targeted exploitation

Why digital resilience is critical to banks

TSA’s airport facial-recog tech faces audit probe

2 officers bailed as anti-corruption unit probes data payouts to N Irish cops

Privacy Commissioner warns the ‘John Smiths’ of the world can acquire ‘digital doppelgangers’

Medical monitoring machines spotted stealing patient data, users warned to pull the plug ASAP

What does it mean to build in security from the ground up?

Gilmore Girls fans nabbed as Eurocops dismantle two major cybercrime forums

The Big Short on Cybersecurity

Another banner year for ransomware gangs despite takedowns by the cops

Google to Iran: Yes, we see you using Gemini for phishing and scripting. We're onto you

VMware plugs steal-my-credentials holes in Cloud Foundation

Trump admin's purge of US cyber advisory boards was 'foolish,' says ex-Navy admiral

Ransomware attack at New York blood services provider – donors turned away during shortage crisis

Canvassing apps used by UK political parties riddled with privacy, security issues

WFH with privacy? 85% of Brit bosses snoop on staff

Wacom says crooks probably swiped customer credit cards from its online checkout

Guess who left a database wide open, exposing chat logs, API keys, and more? Yup, DeepSeek

North Koreans clone open source projects to plant backdoors, steal credentials

Why is my Mitel phone DDoSing strangers? Oh, it was roped into a new Mirai botnet

'Bro delete the chat': Feel the panic shortly before cops bust major online fraud ring

Spending watchdog blasts UK govt over sloth-like progress to shore up IT defenses

The curious story of Uncle Sam's HR dept, a hastily set up email server, and fears of another cyber disaster

SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac, iPad Silicon

Baguette bandits strike again with ransomware and a side of mockery

Protecting AWS environments from cyberthreats

Security pros more confident about fending off ransomware, despite being battered by attacks

Apple plugs security hole in its iThings that's already been exploited in iOS

US freezes foreign aid, halting cybersecurity defense and policy funds for allies

DeepSeek limits new accounts amid cyberattack

Google takes action after coder reports 'most sophisticated attack I've ever seen'

Sweden seizes cargo ship after another undersea cable hit in suspected sabotage

CDNs: Great for speeding up the internet, bad for location privacy

British Museum says ex-contractor 'shut down' IT systems, wreaked havoc

Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet

UK telco TalkTalk confirms probe into alleged data grab underway

AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud

Don't want your Kubernetes Windows nodes hijacked? Patch this hole now

North Korean dev who renamed himself 'Bane' accused of IT worker fraud caper

China and friends claim success in push to stamp out tech support cyber-scam slave camps

Court rules FISA Section 702 surveillance of US resident was unconstitutional

One of Salt Typhoon's favorite flaws still wide open on 91% of at-risk Exchange Servers

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management

SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix

Meta's pay-or-consent model under fire from EU consumer group

About Us

Our Websites

Your Privacy