23 Oct

Millions of Android and iOS users at risk from hardcoded creds in popular apps

An analysis of widely used mobile apps offered on Google Play and the Apple App Store has found hardcoded and unencrypted cloud service credentials, exposing

Author rabih
22 Oct

US lawmakers push DOJ to prosecute tax prep firms for leaking taxpayer data to big tech

A quartet of Democratic lawmakers have penned a letter to the US Department of Justice asking it to prosecute tax preparation companies for sharing customer

Author rabih
22 Oct

TSMC blows whistle on potential sanctions-busting shenanigans from Huawei

TSMC has reportedly tipped off US officials to a potential attempt by Huawei to circumvent export controls and obtain AI chips manufactured by the Taiwanese

Author rabih
22 Oct

VMware fixes critical RCE, make-me-root bugs in vCenter – for the second time

VMware has pushed a second patch for a critical, heap-overflow bug in the vCenter Server that could allow a remote attacker to fully compromise vulnerable

Author rabih
22 Oct

Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures

Four high-profile tech companies reached an agreement with the Securities and Exchange Commission to pay millions of dollars in penalties for misleading investors about their

Author rabih
22 Oct

Akira ransomware is encrypting victims again following pure extortion fling

Experts believe the Akira ransomware operation is up to its old tricks again, encrypting victims’ files after a break from the typical double extortion tactics.

Author rabih
22 Oct

IoT Assignment Completed! Report on Barriers to U.S. IoT Adoption

The 16 members of the NIST-managed Internet of Things (IoT) Advisory Board have completed their report on barriers to the U.S. receiving the benefits of

Author rabih
22 Oct

Pixel perfect Ghostpulse malware loader hides inside PNG image files

The Ghostpulse malware strain now retrieves its main payload via a PNG image file’s pixels. This development, security experts say, is “one of the most

Author rabih
21 Oct

China’s Spamouflage cranks up trolling of US Senator Rubio as election day looms

China’s Spamouflage disinformation crew has been targeting US Senator Marco Rubio (R-Florida) with its fake news campaigns over the past couple of months, trolling the

Author rabih
21 Oct

Sophos to snatch Secureworks in $859M buyout: Why fight when you can just buy?

British security biz Sophos has announced a plan to gobble up competitor Secureworks in an $859 million deal that will make Dell happy. The server

Author rabih
21 Oct

The billionaire behind Trump’s ‘unhackable’ phone is on a mission to fight Tesla’s FSD

Interview This month, presidential hopeful Donald Trump got a tool in his arsenal, some allegedly “unhackable” communications kit, and The Register has talked to the

Author rabih
21 Oct

macOS HM Surf vuln might already be under exploit by major malware family

In revealing details about a vulnerability that threatens the privacy of Apple fans, Microsoft urges all macOS users to update their systems. The bug, tracked

Author rabih
21 Oct

Google Voice scams: What are they and how do I avoid them?

Scams Watch out for schemes where fraudsters trick people into sharing verification codes so they can gain access to their phone numbers Phil Muncaster 21

Author rabih
21 Oct

Tesla, Intel, deny they’re the foreign company China just accused of making maps that threaten national security

Tesla has denied it was involved in illegal-map making activities in China after Beijing asserted an unnamed foreign firm working on a smart car project

Author rabih
21 Oct

Internet Archive exposed again – this time through Zendesk

Despite the Internet Archive’s assurances it’s back on its feet after a recent infosec incident, the org still appears to be in trouble after parties

Author rabih
20 Oct

Open source LLM tool primed to sniff out Python zero-days

Researchers with Seattle-based Protect AI plan to release a free, open source tool that can find zero-day vulnerabilities in Python codebases with the help of

Author rabih
18 Oct

Jetpack fixes 8-year-old flaw affecting millions of WordPress sites

in brief A critical security update for the near-ubiquitous WordPress plugin Jetpack was released last week. Site administrators should ensure the latest version is installed

Author rabih
18 Oct

Alleged Bitcoin crook faces 5 years after SEC’s X account pwned

An Alabama man faces five years in prison for allegedly attempting to manipulate the price of Bitcoin by pwning the US Securities and Exchange Commission’s

Author rabih
Load moreLoadingAll items loaded