Microsoft names alleged credential-snatching 'Azure Abuse Enterprise' operators
Crew helped lowlifes generate X-rated celeb deepfakes using Redmond's OpenAI-powered cloud – claim
AI + ML28 Feb 2025 | 3
Jessica is The Register's cybersecurity editor, leading our coverage of topics ranging from government IT to best practices for defenders. She also hosts video interviews with CxO-level veterans and other subject-matter experts on the challenges facing the IT industry. Jessica has more than 20 years of experience in publishing, with roles ranging from news editor to managing editor.
Feds: Army soldier suspected of AT&T heist Googled ‘can hacking be treason,’ ‘defecting to Russia’
FYI: What NOT to search after committing a crime
Cyber-crime27 Feb 2025 | 33
With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare
244M purloined passwords added to Have I Been Pwned thanks to govt tip-off
Cyber-crime26 Feb 2025 | 10
100-plus spies fired after NSA internal chat board used for kinky sex talk
National intel boss slams naughty nattering on work systems as 'egregious violation of trust'
Bootnotes26 Feb 2025 | 73
Drug-screening biz DISA took a year to disclose security breach affecting millions
If there's something nasty on your employment record, extortion scum could come calling
Cyber-crime26 Feb 2025 | 5
Xi know what you did last summer: China was all up in Republicans' email, says book
Of course, Microsoft is in the mix, isn't it
Cyber-crime25 Feb 2025 | 30
China's Silver Fox spoofs medical imaging apps to hijack patients' computers
Sly like a PRC cyberattack
Research25 Feb 2025 | 2
Malware variants that target operational tech systems are very rare – but 2 were found last year
Fuxnet and FrostyGoop were both used in the Russia-Ukraine war
Research25 Feb 2025 | 4
Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws
PoC exploit code shows why this is a patch priority
Patches21 Feb 2025 |
Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes
Said bugs 'can have significant implications' – glad to hear that from Redmond
AI + ML20 Feb 2025 | 7
Ghost ransomware crew continues to haunt IT depts with scarily bad infosec
FBI and CISA issue reminder - deep sigh - about the importance of patching and backups
Ransomware in Focus20 Feb 2025 | 7
Check out this free automated tool that hunts for exposed AWS secrets in public repos
You can find out if your GitHub codebase is leaking keys ... but so can miscreants
Security19 Feb 2025 | 2
Healthcare outfit that served military personnel settles allegations it faked infosec compliance for $11M
If this makes you feel sick, knowing this happened before ransomware actors started targeting medical info may help
Security19 Feb 2025 | 8
Snake Keylogger slithers into Windows, evades detection with AutoIt-compiled payload
Because stealing your credentials, banking info, and IP just wasn’t enough
Research18 Feb 2025 | 8
If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish
Roses aren't cheap, violets are dear, now all your access token are belong to Vladimir
CSO15 Feb 2025 | 27
SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN
updated Roses are red, violets are blue, CVE-2024-53704 is sweet for a ransomware crew
Networks14 Feb 2025 | 9
Chinese spies suspected of 'moonlighting' as tawdry ransomware crooks
Some employees steal sticky notes, others 'borrow' malicious code
Ransomware in Focus14 Feb 2025 | 11
More victims of China's Salt Typhoon crew emerge: Telcos just now hit via Cisco bugs
Networks in US and beyond compromised by Beijing's super-snoops pulling off priv-esc attacks
Networks13 Feb 2025 | 5
Feds want devs to stop coding 'unforgivable' buffer overflow vulnerabilities
FBI, CISA harrumph at Microsoft and VMware in call for coders to quit baking avoidable defects into stuff
CSO13 Feb 2025 | 75
Arizona laptop farmer pleads guilty for funneling $17M to Kim Jong Un
300+ US companies, 70+ individuals hit by the fraudsters
Cyber-crime12 Feb 2025 | 20
Ransomware isn't always about the money: Government spies have objectives, too
Feature Analysts tell El Reg why Russia's operators aren't that careful, and why North Korea wants money AND data
Ransomware in Focus12 Feb 2025 | 7
Russia's Sandworm caught snarfing credentials, data from American and Brit orgs
'Near-global' initial access campaign active since 2021
Research12 Feb 2025 | 9
Probe finds US Coast Guard has left maritime cybersecurity adrift
Numerous systemic vulnerabilities could scuttle $5.4T industry
Public Sector11 Feb 2025 | 13
Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining
These crooks have no chill
Ransomware in Focus11 Feb 2025 |
I'm a security expert, and I almost fell for a North Korea-style deepfake job applicant …Twice
Remote position, webcam not working, then glitchy AI face ... Red alert!
CSO11 Feb 2025 | 82
Apple missed screenshot-snooping malware in code that made it into the App Store, Kaspersky claims
OCR plugin great for extracting crypto-wallet secrets from galleries
Cyber-crime07 Feb 2025 | 7
DOGE geek with Treasury payment system access now quits amid racist tweet claims
Final update We did Nazi see that coming
Public Sector07 Feb 2025 | 222
Cisco patches two critical Identity Services Engine flaws
One gives root access, the other lets you steal info and reconfig nodes, in the right (or should that be wrong) circumstances
Networks05 Feb 2025 |
DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system
CEO of Cloud Software a 'special government employee' probing for Team Elon
Public Sector05 Feb 2025 | 26
Google torpedoes 'no AI for weapons' rules
Will now happily unleash the bots when 'likely overall benefits substantially outweigh the foreseeable risks'
AI + ML05 Feb 2025 | 34
FBI's secret UFO hunters fear Trump's January 6 purge will send them into orbit
Maybe Musk just wants the alien space tech that definitely doesn't exist?
Public Sector04 Feb 2025 | 53
Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'
When cloud customers don't clean up after themselves, part 97
CSO04 Feb 2025 | 33
Musk’s DOGE ship gets ‘full’ access to Treasury payment system, sinks USAID
Who better to trust trillions of dollars, SSNs and other sensitive info with than Elon
Public Sector03 Feb 2025 | 275
Another banner year for ransomware gangs despite takedowns by the cops
And it doesn't take a crystal ball to predict the future
Cyber-crime31 Jan 2025 | 6
VMware plugs steal-my-credentials holes in Cloud Foundation
Consider patching soon because cybercrooks love to hit vulnerable tools from Broadcom's virtualization giant
Patches30 Jan 2025 |
Trump admin's purge of US cyber advisory boards was 'foolish,' says ex-Navy admiral
interview ‘No one was kicked off the NTSB in the middle of investigating a crash’
Security30 Jan 2025 | 116
North Koreans clone open source projects to plant backdoors, steal credentials
Stealing crypto is so 2024. Supply-chain attacks leading to data exfil pays off better?
Devops29 Jan 2025 | 2
Why is my Mitel phone DDoSing strangers? Oh, it was roped into a new Mirai botnet
And now you won't stop calling me, I'm kinda busy
CSO29 Jan 2025 | 4
Baguette bandits strike again with ransomware and a side of mockery
Big-game hunting to the extreme
Cyber-crime28 Jan 2025 | 6
Apple plugs security hole in its iThings that's already been exploited in iOS
Cupertino kicks off the year with a zero-day
Patches28 Jan 2025 | 15
US freezes foreign aid, halting cybersecurity defense and policy funds for allies
Updated Uncle Sam will 'no longer blindly dole out money,' State Dept says
Public Sector27 Jan 2025 | 86
Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet
Who could be so interested in chips, manufacturing, and more, in the US, UK, Europe, Russia...
Networks25 Jan 2025 | 78
Don't want your Kubernetes Windows nodes hijacked? Patch this hole now
SYSTEM-level command injection via API parameter *chef's kiss*
Patches24 Jan 2025 | 4
One of Salt Typhoon's favorite flaws still wide open on 91% of at-risk Exchange Servers
But we mean, you've had nearly four years to patch
Patches23 Jan 2025 | 4
Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug in Meeting Management
No in-the-wild exploits … yet
Patches23 Jan 2025 |
Who is DDoSing you? Rivals, probably, or cheesed-off users
Plus: 'Largest-ever' duff traffic tsunami clocks in at 5.6 Tbps
Networks23 Jan 2025 | 7
Trump 'waved a white flag to Chinese hackers' as Homeland Security axed cyber advisory boards
And: America 'has never been less secure,' retired rear admiral tells Congress
Security22 Jan 2025 | 94
Infosec was literally the last item in Trump's policy plan, yet major changes are likely on his watch
Feature Everyone agrees defense matters. How to do it is up for debate
CSO22 Jan 2025 | 20
Ransomware scum make it personal for Reg readers by impersonating tech support
That invitation to a Teams call on which IT promises to mop up a spamstorm may not be what it seems
CSO22 Jan 2025 | 18
CISA: Wow, that election had a lot of foreign trolling. Trump's Homeland Sec pick: And that's none of your concern
Cyber agency too 'far off mission,' says incoming boss Kristi Noem
Public Sector18 Jan 2025 | 81
FCC to telcos: By law you must secure your networks from foreign spies. Get on it
Plus: Uncle Sam is cross with this one Chinese biz over Salt Typhoon mega-snooping
CSO17 Jan 2025 | 29
Biden signs sweeping cybersecurity order, just in time for Trump to gut it
Analysis Ransomware, AI, secure software, digital IDs – there's something for everyone in the presidential directive
Public Sector17 Jan 2025 | 40
Russia's Star Blizzard phishing crew caught targeting WhatsApp accounts
updated FSB cyberspies venture into a new app for espionage, Microsoft says
Security16 Jan 2025 | 4
GoDaddy slapped with wet lettuce for years of lax security and 'several major breaches'
Watchdog alleged it had no SIEM or MFA, orders rapid adoption of basic infosec tools
CSO15 Jan 2025 | 13
China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says
We are only seeing 'the tip of the iceberg,' Easterly warns
Security15 Jan 2025 | 11
FBI wipes Chinese PlugX malware from thousands of Windows PCs in America
Hey, Xi: Zài jiàn!
Cyber-crime14 Jan 2025 | 31
Miscreants 'mass exploited' Fortinet firewalls, 'highly probable' zero-day used
Updated Ransomware 'not off the table,' Arctic Wolf threat hunter tells El Reg
Networks14 Jan 2025 | 26
Microsoft sues 'foreign-based' cyber-crooks, seizes sites used to abuse AI
Scumbags stole API keys, then started a hacking-as-a-service biz, it is claimed
Security13 Jan 2025 | 4
Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days
'Codefinger' crims on the hunt for compromised keys
Research13 Jan 2025 | 5
Chinese cyber-spies peek over shoulder of officials probing real-estate deals near American military bases
Gee, wonder why Beijing is so keen on the – checks notes – Committee on Foreign Investment in the US
Cyber-crime10 Jan 2025 | 7
Biting the hand that feeds IT
