CSO News • The Register

Delta: CrowdStrike's offer to help in Falcon meltdown was too little, too late

Airline unimpressed with 'unhelpful and untimely' phone call from CEO, Falcon maker says claims untrue

CxO08 Aug 2024 | 32

US 'laptop farm' man accused of outsourcing his IT jobs to North Korea to fund weapons programs

American and Brit firms thought they were employing a Westerner, but not so, it's alleged

CSO08 Aug 2024 | 19

Report: Tech misconceptions plague the IT world

Just snapping the webcam shutter closed won't keep a user safe online

Personal Tech08 Aug 2024 | 74

Microsoft punches back at Delta Air Lines and its legal threats

SatNad himself offered CrowdStrike recovery help, Redmond says, before suggesting airline's IT is in a mess

CxO07 Aug 2024 | 39

That cyber-heist of 2.9B personal records? There's a class-action lawsuit looming for that

Updated Background check biz accused of negligence

Cyber-crime05 Aug 2024 | 11

DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

For the want of an underscore

CSO31 Jul 2024 | 27

Delta Air Lines dials up Microsoft's legal nemesis over CrowdStrike losses

Oh, Boies, here we go again

CSO30 Jul 2024 | 17

Proofpoint phishing palaver plagues millions with 'perfectly spoofed' emails from IBM, Nike, Disney, others

They DKIM here, they DKIM there

Research30 Jul 2024 | 33

Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

Happy Sysadmin Day

CSO29 Jul 2024 | 13

CrowdStrike update blunder may cost world billions – and insurance ain't covering it all

We offer this formula instead: RND(100.0)*(10^9)

CSO26 Jul 2024 | 60

FYI: Data from deleted GitHub repos may not actually be deleted

And the forking Microsoft-owned code warehouse doesn't see this as much of a problem

CSO25 Jul 2024 | 49

Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

Exclusive Those national security threat claims? 'No evidence,' VP tells The Reg

CSO25 Jul 2024 | 56

Patch management still seemingly abysmal because no one wants the job

Comment Are your security and ops teams fighting to pass the buck?

Malware Month25 Jul 2024 | 29

How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

This one weird trick saved countless hours and stress – no, really

OSes25 Jul 2024 | 89

The months and days before and after CrowdStrike's fatal Friday

Analysis 'In the short term, they're going to have to do a lot of groveling'

CSO25 Jul 2024 | 46

How did a CrowdStrike file crash millions of Windows computers? We take a closer look at the code

Analysis Maybe next time some staged rollouts? A bit of QA too?

CSO23 Jul 2024 | 119

CrowdStrike Windows patchpocalypse could take weeks to fix, IT admins fear

Kettle Our vultures gather to review this very freaky Friday

CSO19 Jul 2024 | 75

Judge mostly drags SEC's lawsuit against SolarWinds into the recycling bin

Russia-invaded software biz 'grateful for the support we have received'

CSO18 Jul 2024 | 3

Kaspersky culls staff, closes doors in US amid Biden's ban

After all we've done for you, America, sniffs antivirus lab

CSO15 Jul 2024 | 25

Three words to send a chill down your spine: Snowflake. Intrusion. Alert

Kettle And can AI save us from the scourge of malware? In theory, why not, but in practice ... Color us skeptical

CSO13 Jul 2024 | 7

Car dealer software slinger CDK Global said to have paid $25M ransom after cyberattack

15K dealerships take estimated $600M+ hit

Malware Month12 Jul 2024 | 16

You had a year to patch this Veeam flaw – and now it's going to hurt some more

LockBit variant targets backup software - which you may remember is supposed to help you recover from ransomware

Patches11 Jul 2024 | 4

ViperSoftX variant spotted abusing .NET runtime to disguise data theft

Freeware AutoIt also used to hide entire PowerShell environments in scripts

Malware Month10 Jul 2024 | 3

RADIUS networking protocol blasted into submission through MD5-based flaw

If someone can do a little MITM'ing and hash cracking, they can log in with no valid password needed

Research10 Jul 2024 | 11

Affirm fears customer info pilfered during ransomware raid at Evolve Bank

Number of partners acknowledging data theft continues to rise

Malware Month02 Jul 2024 | 2

Juniper Networks flings out emergency patches for perfect 10 router vuln

Get 'em while they're hot

Patches01 Jul 2024 | 6

CISA director: US is 'not afraid' to shout about Big Tech's security failings

Jen Easterly hopes CSRB's Microsoft report won't impede future private sector collaboration

CSO01 Jul 2024 | 12

TeamViewer says Russia broke into its corp IT network

Updated Same APT29 crew that hit Microsoft and SolarWinds. How close were we to a mega backdoor situation?

CSO28 Jun 2024 | 25

Polyfill.io owner punches back at 'malicious defamation' amid domain shutdown

Updated No supply-chain attacks to see over here!

Research28 Jun 2024 | 28

TeamViewer can't bring itself to say someone broke into its network – but it happened

Updated Claims customer data, prod environment not affected as NCC sounds alarm

Cyber-crime28 Jun 2024 | 25

Microsoft blamed for million-plus patient record theft at US hospital giant

Updated Probe: Worker at speech-recog outfit Nuance wasn't locked out after firing

CSO26 Jun 2024 | 20

If you're using Polyfill.io code on your site – like 100,000+ are – remove it immediately

Scripts turn sus after mysterious CDN swallows domain

CSO25 Jun 2024 | 61

Fiend touts stolen Neiman Marcus customer info for $150K

Flash clobber chain fashionably late to Snowflake fiasco party

Cyber-crime25 Jun 2024 | 3

Ollama drama as 'easy-to-exploit' critical flaw found in open source AI server

About a thousand vulnerable instances still exposed online, we're told

Patches24 Jun 2024 | 9

Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew

'Substantial proportion' of America to get a little note from next month

Cyber-crime21 Jun 2024 | 9

Uncle Sam sanctions Kaspersky's top bosses – but not Mr K himself

Here's America's list of the supposedly dirty dozen

CSO21 Jun 2024 | 17

Crooks get their hands on 500K+ radiology patients' records in cyber-attack

Two ransomware gangs bragged of massive theft of personal info and medical files

Cyber-crime20 Jun 2024 | 4

Biden bans Kaspersky: No more sales, updates in US

Blockade begins July 20 on national security grounds as antivirus slinger vows to fight back

CSO20 Jun 2024 | 111

That PowerShell 'fix' for your root cert 'problem' is a malware loader in disguise

Control-C, Control-V, Enter ... Hell

Research19 Jun 2024 | 18

Dark-web kingpin puts 'stolen' internal AMD databases, source code up for sale

Updated Chip designer really gonna need to channel some Zen right now

Cyber-crime18 Jun 2024 |

Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam

Updated Pen-testing tools didn't work – and personal info of folks hit by pandemic started appearing in search engines

CSO17 Jun 2024 | 2

AWS is pushing ahead with MFA for privileged accounts. What that means for you ...

The clock is ticking – why not try a passkey?

CSO17 Jun 2024 | 17

Microsoft answered Congress' questions on security. Now the White House needs to act

Feature Business as usual needs a real change

Public Sector15 Jun 2024 | 45

Meta won't train AI on Euro posts after all, as watchdogs put their paws down

Facebook parent calls step forward for privacy a 'step backwards'

AI + ML14 Jun 2024 | 41

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

'It's not our job to find the culprits – That's what we're paying you for' lawmaker scolds Brad Smith

CSO14 Jun 2024 | 57

Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

Analysis In this slightly more private era, your data ain't as profitable as it once was

Personal Tech13 Jun 2024 | 25

Ransomware crew may have exploited Windows make-me-admin bug as a zero-day

Symantec suggests Black Basta crew beat Microsoft to the patch

Malware Month12 Jun 2024 | 2

White House report dishes deets on all 11 major government breaches from 2023

The MOVEit breach and ransomware weren’t kind to the Feds last year

CSO12 Jun 2024 | 1

Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

Patch Tuesday Redmond splats dozens of bugs as does Adobe while Arm drivers and PHP under active attack

CSO12 Jun 2024 | 7

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

Interview Scott Small tells us gang's 'intent and capability' should get the attention of CSOs

Malware Month09 Jun 2024 | 3

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

Interview Lessons learned from the infosec chief convicted and punished for covering up theft of data from taxi app maker

CSO08 Jun 2024 | 33

Topics

Special Features

Vendor Voice

Resources

CSO

Delta: CrowdStrike's offer to help in Falcon meltdown was too little, too late

US 'laptop farm' man accused of outsourcing his IT jobs to North Korea to fund weapons programs

Report: Tech misconceptions plague the IT world

Microsoft punches back at Delta Air Lines and its legal threats

That cyber-heist of 2.9B personal records? There's a class-action lawsuit looming for that

Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets

DARPA suggests turning old C code automatically into Rust – using AI, of course

Too late now for canary test updates, says pension fund suing CrowdStrike

Firefox's Mozilla follows Google in losing trust in Entrust's TLS certificates

Ransomware infection cuts off blood supply to 250+ hospitals

More than 83K certs from nearly 7K DigiCert customers must be swapped out now

Chrome adopts app-bound encryption to stymie cookie-stealing malware

'Error' in Microsoft's DDoS defenses amplified 8-hour Azure outage

UK Electoral Commission slapped for basic cybersecurity fails

DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

Delta Air Lines dials up Microsoft's legal nemesis over CrowdStrike losses

Proofpoint phishing palaver plagues millions with 'perfectly spoofed' emails from IBM, Nike, Disney, others

Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

CrowdStrike update blunder may cost world billions – and insurance ain't covering it all

FYI: Data from deleted GitHub repos may not actually be deleted

Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

Patch management still seemingly abysmal because no one wants the job

How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

The months and days before and after CrowdStrike's fatal Friday

How did a CrowdStrike file crash millions of Windows computers? We take a closer look at the code

CrowdStrike Windows patchpocalypse could take weeks to fix, IT admins fear

Judge mostly drags SEC's lawsuit against SolarWinds into the recycling bin

Kaspersky culls staff, closes doors in US amid Biden's ban

Three words to send a chill down your spine: Snowflake. Intrusion. Alert

Car dealer software slinger CDK Global said to have paid $25M ransom after cyberattack

You had a year to patch this Veeam flaw – and now it's going to hurt some more

ViperSoftX variant spotted abusing .NET runtime to disguise data theft

RADIUS networking protocol blasted into submission through MD5-based flaw

Affirm fears customer info pilfered during ransomware raid at Evolve Bank

Juniper Networks flings out emergency patches for perfect 10 router vuln

CISA director: US is 'not afraid' to shout about Big Tech's security failings

TeamViewer says Russia broke into its corp IT network

Polyfill.io owner punches back at 'malicious defamation' amid domain shutdown

TeamViewer can't bring itself to say someone broke into its network – but it happened

Microsoft blamed for million-plus patient record theft at US hospital giant

If you're using Polyfill.io code on your site – like 100,000+ are – remove it immediately

Fiend touts stolen Neiman Marcus customer info for $150K

Ollama drama as 'easy-to-exploit' critical flaw found in open source AI server

Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew

Uncle Sam sanctions Kaspersky's top bosses – but not Mr K himself

Crooks get their hands on 500K+ radiology patients' records in cyber-attack

Biden bans Kaspersky: No more sales, updates in US

That PowerShell 'fix' for your root cert 'problem' is a malware loader in disguise

Dark-web kingpin puts 'stolen' internal AMD databases, source code up for sale

Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam

AWS is pushing ahead with MFA for privileged accounts. What that means for you ...

Microsoft answered Congress' questions on security. Now the White House needs to act

Meta won't train AI on Euro posts after all, as watchdogs put their paws down

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

Ransomware crew may have exploited Windows make-me-admin bug as a zero-day

White House report dishes deets on all 11 major government breaches from 2023

Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

About Us

Our Websites

Your Privacy