Security
StatCounter fingers cache-poisoning caper for Bitcoin-slurping JavaScript hijack
The good news? Nobody appears to have lost any Bitcoin, says Gate.io
Vulns in online shopping toolkit WooCommerce can blast a hole in your WordPress security
Rogue managers can seize control of web shops
We don' need no stinkin' bounties: VirtualBox guest-to-host escape zero-day lands at GitHub
Bug hunter rages at wearisome disclosure process
SMBs: We don't want to spoil all of this article, but have you patched, taken away admin rights, made backups yet?
Backgrounder If yes, wow, you're well ahead of the game
Dutch cops hope to cuff 'hundreds' of suspects after snatching server, snooping on 250,000+ encrypted chat texts
BlackBox IronPhones' IronChat app convos intercepted
Stop us if you've heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP
Advisory issued over yet another critical security vulnerability
Hackers seed StatCounter with nasty JavaScript in elaborate Bitcoin cyber-heist caper
Gate.io exchange believed to be target of embedded attack
HSBC now stands for Hapless Security, Became Compromised: Thousands of customer files snatched by crims
Bank fesses up: Hackers made off with folks' personal details
ICO poised to fine Leave campaign and Arron Banks’ insurance biz £135,000
Finds orgs sent marketing emails promoting each other without consent
Android fans get fat November security patch bundle – if the networks or mobe makers are kind enough to let 'em have it
And Apple fixes Watch-killing security patch of its own
Solid state of fear: Euro boffins bust open SSD, Bitlocker encryption (it's really, really dumb)
Security experts frantically facepalming at stupid design
Heighten your organisation’s risk awareness at the SANS Security Awareness summit
Promo Raise your security expertise to a new level
Cyber-crooks think small biz is easy prey. Here's a simple checklist to avoid becoming an easy victim
Comment Make sure you're spending your hard-earned cash on the 'right' IT security
Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
Roundup Plus, SystemD gets system de-bugged, again
30 spies dead after Iran cracked CIA comms network with, er, Google search – new claim
Uncle Sam's snoops got sloppy with online chat, it seems
PortSmash attack blasts hole in Intel's Hyper-Threading CPUs, leaves with secret crypto keys
Malware already on machines can exploit SMT using side-channel techniques to snatch private info
Web domain owners paid EasyDNS to cloak their contact info from sight. It was blabbed via public Whois anyway
Registrar apologies as punters wait for spam tsunami
What's that? SSH can still use RC4? Not for much longer, promise
IETF hackathoners point the 'die-die-die' gun at another buggy cipher
BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
We're one of 7,000 victims here, firm insists
I know what you're thinking: Outsource or in-source IT security? I've worked both sides, so here's my advice...
Comment The pros and cons of using internal and external talent, or a mix of both
IT Wi-Fi kit bit by TI chip slip: Wireless gateways open to hijacking via BleedingBit chipset vuln
Updated Firmware security patches hit to fix critical holes in enterprise network access points
Welcome back, 'ping of death', it has been... a few months. Now it's Apple's turn to do the patching
Kernel-level ICMP buffer overrun quietly fixed as all eyes on this week's launchfest
£220k fines for dodgy dialling duo who didn't do due dil on data
Cold-calling home security firms slammed in watchdog's cooler
This one weird trick turns your Google Home Hub into a doorstop
Updated Secret API leaves door open for remote commands from other gadgets sharing its Wi-Fi
Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken
As it turns out, crime pays incredibly well for some
US government charges two Chinese spies over jet engine blueprint theft
China says case is full of hot air
Check this out: Radisson Hotel Group 'fesses up to 'security incident'
Loyalty card members deets exposed
Apple emits its much-anticipated updates to Mac, AppleTV, and iOS
Security updates. What did you think we were referring to?
Pain in the brain! Kaspersky warns of hackable brain implants
That furious clicking you hear is Charlie Brooker frantically writing his next script
Yahoo! $50m! hack! damages! bill!, Russian trolls menaced by Uncle Sam inaction, computer voting-machine UI confusion, and more
Roundup Plus, GSA shamed for glacial notification pace
The D in Systemd stands for 'Dammmmit!' A nasty DHCPv6 packet can pwn a vulnerable Linux box
Hole opens up remote-code execution to miscreants – or a crash, if you're lucky
How to build your own IT infosec holodeck: A blueprint for crafting a virtual enterprise to prod, test and hack
Massive hacker playground can be spun up on the cheap
Sorry friends, I'm afraid I just can't quite afford the Bitcoin to stop that vid from leaking everywhere
Something for the Weekend, Sir? Those darn webcam hackers are at it again, maybe
Belgium: Oi, Brits, explain why Belgacom hack IPs pointed at you and your GCHQ
State investigation finds non-Snowden proof of UK badness - local report
We asked 100 people to name a backdoored router. You said 'EE's 4GEE HH70'. Our survey says... Top answer!
Updated SSH hardcoded 'root' login found, patch incoming
British Airways: If you're feeling left out of our 380,000 passenger hack, then you may be one of another 185,000 victims
Names, billing addresses, email addresses, card info, CVV numbers in some case...
This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet
Overwrite arbitrary files? Load arbitrary code? As setuid root? Sure, why not!
Word up: Embedded vids in Office docs can hide embedded nasties, infosec bods warn
Updated XML twiddling can lead to lock-and-loading dodgy JavaScript, we're told
What a crane in the ass: Bug leaves construction machinery vulnerable to evil command injection
Builders warned over Telecrane remote control radio vuln
Cathay Pacific hack: Personal data of up to 9.4 million airline passengers laid bare
Passport numbers, credit card info etc – combo of stuff leaked 'varies for each' poor sod
From 'WebEx' to 'WebExec' to 'WTF, my PC!' Cisco rapped in chat app security flap
Patch your vid conferencing software to stop malware, users nabbing admin rights
Ex spy bosses: Cyber-warfare needs rules of engagement for nations to promptly ignore
OpenWorld 'I think all of us would agree that cyber space is the new battle space'
The Register - Independent news and views for the tech community. Part of Situation Publishing
© 1998–2018
Follow us