Vendors get checklist on what to do when crooks inevitably turn up in space The German Federal Office for Information Security (BSI) has put out an IT baseline protection profile for space infrastructure amid concerns that attackers could turn their gaze skywards.... [...]
I like driving in my car, hope my data's not gone far UK automobile service and parts seller Halfords has shared the details of its customers a little too freely, according to the findings of a security researcher.... [...]
British parcel delivery firm 'working around the clock' to get systems back and running Delivery company Yodel has found itself the latest victim of a cyber "incident" that has disrupted services.... [...]
Assistant US attorney: 'She wanted data, she wanted money, and she wanted to brag' Updated A former Seattle tech worker has been convicted of wire fraud and computer intrusions in a US federal district court.... [...]
Redmond's security brand extended to multiple devices without stomping on other solutions Microsoft is extending the Defender brand with a version aimed at families and individuals.... [...]
Does your disaster recovery plan include a mysterious missive at a funeral? On Call Every disaster recovery plan needs to contain the "hit by a bus" scenario. But have you ever retrieved a password from beyond the grave? One Register reader has. Welcome to On Call.... [...]
Brains to be added to the Customer Security and Trust in defense against 'foreign adversaries' Microsoft has opened its wallet once more to pick up New York-based cyber-threat analyst Miburo.... [...]
Decentralized identity and knowing who needs what Microsoft has whipped out the rebranding team once more, and chosen the name "Entra" as a catch-all for the company's identity and access capabilities.... [...]
Researchers comb through code execution flaw found in malicious document Infosec researchers have idenitied a zero-day code execution vulnerability in Microsoft's ubiquitous Office software.... [...]
Unrelated to the OAuth token attack, but still troubling as org reveals details of around 100,000 users were grabbed by the baddies GitHub has revealed it stored a "number of plaintext user credentials for the npm registry" in internal logs following the integration of the JavaScript package registry …
Occasional gaping hole and overprivileged users still blight the Beast of Redmond Despite a record number of publicly disclosed security flaws in 2021, Microsoft managed to improve its stats, according to research from BeyondTrust.... [...]
May 10 update addressed serious vulns but also had problems of its own Microsoft has released an out-of-band patch to deal with an authentication issue that was introduced in the May 10 Windows update.... [...]
"We live this fight ourselves everyday," Microsoft says of enterprise attacks Microsoft is rolling out its "Security Experts" managed service with an eye on stomping down threats and malware.... [...]
Woos European firms who don't want their data caught in the US Cloud Act dragnet Google is joining Microsoft in its attempts to tackle EU concerns regarding data sovereignty but some privacy experts are yet to be convinced by the move.... [...]
Security suite for the orgs unwilling to stump up for a Microsoft 365 Business Premium subscription Microsoft has made a standalone version of Microsoft Defender for Business generally available, aimed at customers not keen on paying for one of its subscriptions.... [...]
Only works with signed-in users, but could lure more into using the browser Microsoft appears to be planning a VPN-like solution for its Edge browser judging by a support page for the upcoming feature.... [...]
More attacks and more targeted attacks than ever before. What could have happened to cause that uptick? Kaspersky has released a report showing Distributed Denial of Service (DDoS) attacks hit an all-time-high in the first quarter of 2022.... [...]
You thought hunting for discount vouchers took a while? That's nothing compared to Windows booting on a till A fresh Windows 11 patch slipped out overnight as an optional update, but contains an impressively long list of fixes for Microsoft's flagship operating system.... [...]
Firmware updates incoming in response to UEFI threats Updated Got a Lenovo laptop? You might need to do a swift bit of patching judging by the latest set of vulnerabilities uncovered by security researchers at ESET.... [...]
Running a multi-user Windows environment and Git? Time to patch After a hefty Patch Tuesday comes news of an update for Git to deal with a vulnerability for the source shack when run on Microsoft's Windows.... [...]
Guarding against the forever almost-here crypto-cracking tech OpenSSH 9 is here, with updates aimed at dealing with cryptographically challenging quantum computers.... [...]
You didn't have any plans for the weekend anyway, did you? Another Java Remote Code Execution vulnerability has reared its head, this time in the popular Spring Framework and, goodness, it's a nasty one.... [...]
No EVs were damaged in the making of this report Researchers from the University of Oxford published details of a vulnerability in the Combined Charging System that has the potential to abort charging.... [...]
Legit employers don't normally send a check before you've started – or ask you to send money to a Bitcoin address Scammers appear to be targeting university students looking to kickstart their careers, according to research from cybersecurity biz Proofpoint.... [...]
Cluster tech vulnerability means either patching or port tinkering could be on the cards Atlassian has demonstrated the interconnectedness of all things with a warning that some versions of Bitbucket Data Center and Confluence Data Center require patching courtesy of the Hazelcast Java deserialization vulnerability.... [...]