Here's $15,000 to make that third-party inspection happen, says Florida outfit Updated Last week, Apple essentially invited security researchers to probe its forthcoming technology that's supposed to help thwart the spread of known child sexual abuse material (CSAM).... [...]
Devices from 60+ manufacturers affected, says infosec outfit Taiwanese chip designer Realtek has warned of four vulnerabilities in three SDKs accompanying its Wi-Fi modules, which are used in almost 200 products made by more than five dozen vendors.... [...]
Fault injection technique presents risk in cloud environments from rogue admins AMD's Secure Encrypted Virtualization (SEV) scheme is not as secure as its name suggests.... [...]
Allegations of purloined trade secrets, unfair competition, national security threats, and more packed into lawsuit A California-based IT consultancy has sued Huawei and its subsidiary in Pakistan alleging the Chinese telecom firm stole its trade secrets and failed to honor a contract to develop technology for Pakistani authorities.... [...]
Vaccine deceit is infectious The number of COVID cases in the US and elsewhere is again rising, thanks to the Delta Variant, lagging vaccination rates, and mask resistance among some.... [...]
Ready to go for telcos, but what's their incentive to lose all that lovely money? Computer science boffins have devised a way to prevent the location of mobile phone users from being snarfed and sold to marketers, though the technique won't affect targeted nation-state surveillance.... [...]
It's just temporary relief from the typical monthly repair routine Now is the winter of our discontent made glorious summer by the fact that it's August and Patch Tuesday brings word of only 44 vulnerabilities in Microsoft's software.... [...]
Offer may not apply in China, or anywhere else warn experts Apple's announcement last week that it will soon be scanning photos on iPhones and iPads that sync to iCloud for child sexual abuse material (CSAM) prompted pushback from thousands of security and privacy professionals and a response from …
Security researchers found they could snoop on dynamic DNS traffic Until February this year, Amazon Route53's DNS service offered largely unappreciated network eavesdropping capabilities. And this undocumented spying option was also available at Google Cloud DNS and at least one other DNS-as-a-service provider.... [...]
Where there's a will, there's Huawei Andy Purdy, CSO for Huawei USA, believes the US needs to be more active in the development of global security standards rather than being aloof.... [...]
And said entirely with a straight face, too Russia has put forward a draft convention to the United Nations ostensibly to fight cyber-crime.... [...]
More than 120 messages caught trying to filch credentials from customers of USAA Bank, Microsoft Between July 13 and July 16, someone took over the Mailgun account owned by restaurant chain Chipotle Mexican Grill and placed an order for login credentials using misappropriated marketing messages.... [...]
Four others at online tat bazaar admit trying to silence newsletter couple, two senior execs fight charges The former global security manager for eBay was sentenced on Tuesday to 18 months in prison and was ordered to pay a $15,000 fine for his role in the cyber-stalking and …
Characteristically mum about details Apple on Monday patched a zero-day vulnerability in its iOS, iPadOS, and macOS operating systems, only a week after issuing a set of OS updates addressing about three dozen other flaws.... [...]
Biz insists it's trying as hard as possible to scrub clean its IRC-for-the-2020s Sophos on Thursday warned that internet instant-chat service Discord is becoming an increasingly popular malware distribution channel.... [...]
'PlugWalkJoe' also said to have meddled with TikTok, SnapChat The Spanish National Police have, at the request of America, arrested UK citizen Joseph O’Connor in Estepona, Spain, in connection with the July 2020 takeover of more than 130 Twitter accounts.... [...]
Deletion of employer's YouTube account deemed violation of release Former journalist Matthew Keys, who served two years in prison for posting his Tribune Company content management system credentials online a decade ago in violation of America's Computer Fraud and Abuse Act, has been ordered back to prison for violating …
El Reg revisits those early days of the internet and learns of the NSA tipping off Boeing about French spying Interview Gene Hoffman is one of the founders of PrivNet, which in 1996 developed Internet Fast Forward, the internet's first commercial ad blocking software. He helped found the company …
Phishing campaign aims to capitalize on slow fix deployment, it seems This month's Kaseya VSA ransomware attack took a turn for the worse on Wednesday with word that miscreants have launched a phishing campaign to ensnare victims with a remote-control tool disguised as a VSA update.... [...]
Could be brute-forced due to design blunders, according to infosec outfit Last year, Kaspersky Password Manager (KPM) users got an alert telling them to update their weaker passwords. Now we've found out why that happened.... [...]
An Ocean's 11 of exploitation involving guessable random numbers and hostname shenanigans Google Compute Engine virtual machines can be hijacked and made to hand over root shell access via a cunning DHCP attack, according to security researcher Imre Rad.... [...]
Redmond's legendary QA strikes again Microsoft on Friday admitted it had signed malicious third-party driver code submitted for certification through its Windows Hardware Compatibility Program.... [...]
Did we mention you'll soon be paying to play in 30 days, too? AWS has set up a competition for its customers' developers to find and fix one million bugs.... [...]
Chocolate Factory proposes common interchange format for vulnerability data Google on Thursday introduced a unified vulnerability schema for open source projects, continuing its current campaign to shore up the security of open source software.... [...]
All depends on whether your workload is making a lot of system calls or not The mitigations applied to exorcise Spectre, the family of data-leaking processor vulnerabilities, from computers hinders performance enough that disabling protection for the sake of speed may be preferable for some.... [...]