The Register - Anti-Virus
Rust rustles up fix for 10/10 critical command injection bug on Windows in std lib
Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on Windows machines.…
X fixes URL blunder that could enable convincing social media phishing campaigns
Elon Musk's X has apparently fixed an embarrassing issue implemented earlier in the week that royally bungled URLs on the social media platform formerly known as Twitter.…
Turning the tide on third-party risk
Webinar There are some unhappy projections out there about the prevalence of third-party security breaches.…
Chrome Enterprise Premium promises extra security – for a fee
Cloud Next Hoping to upsell freeloading corporate users of its Chrome browser, Google has announced Chrome Enterprise Premium – which comes with a dash of AI security sauce for just $6 per user per month.…
Microsoft squashes SmartScreen security bypass bug exploited in the wild
Patch Tuesday Microsoft fixed 149 security flaws in its own products this week, and while Redmond acknowledged one of those vulnerabilities is being actively exploited, we've been told another hole is under attack, too.…
Got an unpatched LG 'smart' television? It could be watching you back
A handful of bugs in LG smart TVs running WebOS could allow an attacker to bypass authorization and gain root access on the device.…
UK businesses shockingly unaware of how to handle security threats
UK businesses' response to security breaches has "astounded" experts following the release of the government's official cybercrime stats for 2024.…
US insurers use drone photos to deny home insurance policies
US insurance companies are reportedly relying on aerial photos from drones to deny claims.…
Home Depot confirms worker data leak after miscreant dumps info online
Home Depot has confirmed that a third-party company accidentally exposed some of its employees' personal details after a criminal copy-pasted the data online.…
Puppies, kittens, data at risk after 'cyber incident' at veterinary giant
First, they came for hospitals, then it was charities and cancer centers. Now, cyber scumbags are coming for the puppies and kittens.…
Change Healthcare faces second ransomware dilemma weeks after ALPHV attack
Change Healthcare is allegedly being extorted by a second ransomware gang, mere weeks after recovering from an ALPHV attack.…
Head of Israeli cyber spy unit exposed ... by his own privacy mistake
Infosec in brief Protecting your privacy online is hard. So hard, in fact, that even a top Israeli spy who managed to stay incognito for 20 years has found himself exposed after one basic error.…
What can be done to protect open source devs from next xz backdoor drama?
Kettle It's been about a week since the shock discovery of a hidden and truly sophisticated backdoor in the xz software library that ordinarily is used by countless systems.…
US government excoriates Microsoft for 'avoidable errors' but keeps paying for its products
Analysis You might think that when a government supplier fails in one of its key duties it would find itself shunned or at least feel financial pain.…
Hotel check-in terminal bug spews out access codes for guest rooms
A self-service check-in terminal used in a German Ibis budget hotel was found leaking hotel room keycodes, and the researcher behind the discovery claims the issue could potentially affect hotels around Europe.…
Academics probe Apple's privacy settings and get lost and confused
A study has concluded that Apple's privacy practices aren't particularly effective, because default apps on the iPhone and Mac have limited privacy settings and confusing configuration options.…
World's second-largest eyeglass lens-maker blinded by infosec incident
If ever there was an incident that brings the need for good infosec into sharp focus, this is the one: Japan's Hoya – a maker of eyeglass and contact lenses, plus kit used to make semiconductor manufacturing, flat panel displays, and hard disk drives – has halted some production and sales activity after experiencing an attack on its IT systems.…
Feds probe alleged classified US govt data theft and leak
Updated Uncle Sam is investigating claims that some miscreant stole and leaked classified information from the Pentagon and other national security agencies.…
Ivanti commits to secure-by-design overhaul after vulnerability nightmare
Ivanti has committed to adopting a secure-by-design approach to security as it gears up for an organizational overhaul in response to the multiple vulnerabilities in Connect Secure exploited earlier this year.…
Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits
Leicester City Council is finally admitting its "cyber incident" was carried out by a ransomware gang and that data was stolen, hours after the criminals forced its hand.…