Collaborate Disseminate
‘Sustained focus on Western critical infrastructure’ Russia’s Main Intelligence Directorate (GRU) is behind a years-long campaign targeting energy, telecommunications, and tech providers, stealing credentials and compromising misconfigured devices host… Continue reading Amazon security boss blames Russia’s GRU for years-long energy-sector hacks
Who hasn’t exploited this max-severity flaw? At least five more Chinese spy crews, Iran-linked goons, and financially motivated criminals are now attacking React2Shell, a maximum-severity flaw in the widely used React JavaScript library, according to G… Continue reading China, Iran are having a field day with React2Shell, Google warns
Watchdog links schedule change to replanning of UK payments system overhaul The European Central Bank’s (ECB) decision to delay its move to a new messaging standard in 2022 ended up costing the Bank of England £23 million as it was forced to adjust mig… Continue reading Delay to European Central Bank messaging project cost the Bank of England £23M
Automaker admits raid that crippled its factories in August led to the theft of sensitive info Jaguar Land Rover (JLR) has reportedly told staff the cyber raid that crippled its operations in August didn’t just bring production to a screeching halt – i… Continue reading JLR: Payroll data stolen in cybercrime that shook UK economy
Both admit attackers were already exploiting the bugs, with scant detail and hints of spyware-grade abuse Apple and Google have both issued emergency patches after zero-day bugs were caught being actively exploited in what the companies describe as “so… Continue reading Apple, Google forced to issue emergency 0-day patches
Minister insists ‘modest’ bill is not an assault on privacy-preserving tech The Danish government wants the public to weigh in on its proposed laws restricting use of VPNs to access certain corners of the internet.… Continue reading Denmark takes a Viking swing at VPN-enabled piracy
I’m dreaming of a white hat mass Opinion It was 40 years ago that four young British hackers set about changing the law, although they didn’t know it at the time. It was a cross-platform attack including a ZX Spectrum, a BBC Micro, and a Tatung Einste… Continue reading Legal protection for ethical hacking under Computer Misuse Act is only the first step
PLUS: Drugs found in ink cartridges; Censorship fighters criticize Vultr; Coupang CEO resigns; And more! Asia In Brief A SpaceX executive has claimed that a Chinese satellite launch came within 200 meters of hitting a Starlink satellite.… Continue reading Starlink claims Chinese launch came within 200 meters of broadband satellite
PLUS: Crims could burn your AI budgets thanks to weak defaults; CISA’s top 25 vulns for 2025; And more Infosec In Brief The UK’s National Cyber Security Centre (NCSC) has found that cyber-deception tactics such as honeypots and decoy accounts designed… Continue reading Honeypots can help defenders, or damn them if implemented badly
Exploit hasn’t been picked up by any malware detection engines, CEO tells The Reg A Microsoft zero-day vulnerability that allows an unprivileged user to crash the Windows Remote Access Connection Manager (RasMan) service now has a free, unofficial patc… Continue reading Microsoft RasMan DoS 0-day gets unofficial patch – and a working exploit