CSO News • The Register

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

If it ain't broke?

CSO23 May 2025 | 1

'Ongoing' Ivanti hijack bug exploitation reaches clouds

Nothing like insecure code in security suites

CSO21 May 2025 | 4

Ex-NSA bad-guy hunter listened to Scattered Spider's fake help-desk calls: 'Those guys are good'

INTERVIEW Plus, Co-op tells The Reg: 'we took early and decisive action' to block the crooks

CSO18 May 2025 | 65

Fired US govt workers, Uncle Xi wants you! – to apply for this fake consulting gig

Phony LinkedIn recruitment ads? Groundbreaking

Public Sector16 May 2025 | 27

Ivanti patches two zero-days under active attack as intel agency warns customers

Vendor says vulns are linked with 2 mystery open source libraries integrated into EPMM product

Patches14 May 2025 | 1

Go ahead and ignore Patch Tuesday – it might improve your security

No rush, according to Gartner chap who says: 'Nobody has ever out-patched threat actors at scale'

Patches14 May 2025 | 34

Everyone's deploying AI, but no one's securing it – what could go wrong?

CYBERUK Crickets as senior security folk asked about risks at NCSC conference

CSO14 May 2025 | 22

Ransomware scum have put a target on the no man's land between IT and operations

Defenses are weaker, and victims are more likely to pay, SANS warns

CSO14 May 2025 | 17

Apple patched one first, but Microsoft’s blasted five exploited flaws this Pa-Tu

Patch Tuesday Plus: All the fun and frolic of fixes from Adobe, SAP, Ivanti

Patches14 May 2025 | 3

Why aggregating your asset inventory leads to better security

Today’s complex IT environments demand a new approach

Partner content

Britain's cyber agents and industry clash over how to tackle shoddy software

CYBERUK Providers argue that if end users prioritized security, they'd get it

CSO12 May 2025 | 76

Unending ransomware attacks are a symptom, not the sickness

Opinion We need to make taking IT systems 'off the books' a problem for corporate types

Cyber-crime12 May 2025 | 63

PowerSchool paid thieves to delete stolen student, teacher data. Looks like crooks lied

Now individual school districts extorted by fiends

CSO08 May 2025 | 33

After that 2024 Windows fiasco, CrowdStrike has a plan – job cuts, leaning on AI

CEO: Neural net tech 'flattens our hiring curve, helps us innovate'

CSO07 May 2025 | 14

Super spyware maker NSO must pay Meta $168M in WhatsApp court battle

Don't f&#k with Zuck

CSO06 May 2025 | 17

Computacenter IT guy let girlfriend into Deutsche Bank server rooms, says fired whistleblower

What was the plan, showing her his big iron?

AI Infrastructure Month06 May 2025 | 79

Apr	MAY	Jun
	26
2024	2025	2026

Topics

Special Features

Vendor Voice

Resources

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

'Ongoing' Ivanti hijack bug exploitation reaches clouds

Ex-NSA bad-guy hunter listened to Scattered Spider's fake help-desk calls: 'Those guys are good'

Fired US govt workers, Uncle Xi wants you! – to apply for this fake consulting gig

From hype to harm: 78% of CISOs see AI attacks already

Socket buys Coana to tell you which security alerts you can ignore

Snowflake CISO on the power of 'shared destiny' and 'yes and'

Why CVSS is failing us and what we can do about it

Ivanti patches two zero-days under active attack as intel agency warns customers

Go ahead and ignore Patch Tuesday – it might improve your security

Everyone's deploying AI, but no one's securing it – what could go wrong?

Ransomware scum have put a target on the no man's land between IT and operations

Apple patched one first, but Microsoft’s blasted five exploited flaws this Pa-Tu

Why aggregating your asset inventory leads to better security

Britain's cyber agents and industry clash over how to tackle shoddy software

Unending ransomware attacks are a symptom, not the sickness

PowerSchool paid thieves to delete stolen student, teacher data. Looks like crooks lied

After that 2024 Windows fiasco, CrowdStrike has a plan – job cuts, leaning on AI

Super spyware maker NSO must pay Meta $168M in WhatsApp court battle

Computacenter IT guy let girlfriend into Deutsche Bank server rooms, says fired whistleblower

Signal shuts the blinds on Microsoft Recall with the power of DRM

Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones

Anthropic Claude 4 models a little more willing than before to blackmail some users

Neptune OS is Debian made easy but, boy, does it need some housekeeping

Irish privacy watchdog OKs Meta to train AI on EU folks' posts

What would a Microsoft engineer do to Ubuntu? AnduinOS is the answer

User unboxed a PC so badly it 'broke' and only a nail file could fix it

Chinese snoops tried to break into US city utilities, says Talos

AI can't replace freelance coders yet, but that day is coming

US Navy sailor charged in horrific child sextortion case

RSA Conf wrap: AI and China on everything, everywhere, all at once

Generative AI makes fraud fluent – from phishing lures to fake lovers

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas

Ex-NSA cyber-boss: AI will soon be a great exploit coder

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

Cloud doesn’t mean secure: How Intruder finds what others miss

Watch out for any Linux malware sneakily evading syscall-watching antivirus

China is using AI to sharpen every link in its attack chain, FBI warns

Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus

Cybersecurity CEO accused of running malware on hospital PC blabs about it on LinkedIn

How to survive as a CISO aka 'chief scapegoat officer'

Admission impossible: NSA, CISA brass absent from RSA Conf

The future of AI in cybersecurity in a word: Optimistic

Signalgate lessons learned: If creating a culture of security is the goal, America is screwed

Amid CVE funding fumble, 'we were mushrooms, kept in the dark,' says board member

Emergency patch for potential SAP zero-day that could grant full system control

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

Your vendor may be the weakest link: Percentage of third-party breaches doubled in a year

Blue Shield says it shared health info on up to 4.7M patients with Google Ads

We’re calling it now: Agentic AI will win RSAC buzzword Bingo

Who needs phishing when your login's already in the wild?

America's cyber defenses are being dismantled from the inside

Two CISA officials jump ship, both proud of pushing for Secure by Design software

A pot of $250K is now available to ransomware researchers, but it feeds a commercial product

Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

Today's LLMs craft exploits from patches at lightning speed

Microsoft rated this bug as low exploitability. Miscreants weaponized it in just 8 days

Oracle hopes talk of cloud data theft dies off. CISA just resurrected it for Easter

CVE fallout: The splintering of the standard vulnerability tracking system has begun

Krebs throws himself on the grenade, resigns from SentinelOne after Trump revokes clearances

Whistleblower describes DOGE IT dept rampage at America's labor watchdog

Signalgate chats vanish from CIA chief phone

Identifying the cyber risks that matter

CVE program gets last-minute funding from CISA – and maybe a new home

Guess what happens when ransomware fiends find 'insurance' 'policy' in your files

Uncle Sam kills funding for CVE program. Yes, that CVE program

All right, you can have one: DOGE access to Treasury IT OK'd judge

New SSL/TLS certs to each live no longer than 47 days by 2029

Hacktivism resurges – but don't be fooled, it's often state-backed goons in masks

LLMs can't stop making up software dependencies and sabotaging everything

Infosec experts fear China could retaliate against tariffs with a Typhoon attack

Trump kills clearances for infosec's SentinelOne, ex-CISA boss Chris Krebs

Google's got a hot cloud infosec startup, a new unified platform — and its eye on Microsoft's $20B+ security biz

Bad luck, Windows 10 users. No fix yet for ransomware-exploited bug

As CISA braces for more cuts, threat intel sharing takes a hit

Oracle says its cloud was in fact compromised