Microsoft catches hackers exploiting Zimbra bug before disclosure
jawad
Attackers were poking at a critical Zimbra mail server bug weeks before it was publicly disclosed, and then moved on to steal credentials, raid mailboxes, and take deeper control of…
Technology
MI5 warns UK academics their research may have helped Chinese spies
MI5 has warned that more than 100 UK-linked academics contributed to research projects allegedly funded to improve China’s spying capabilities. The Security Service issued an unusually public espionage alert this…
CISO thought he had a ‘r3@lg00dp@$$w0rd’ but forgot to patch
Welcome back to PWNED, the weekly column where we warn you about weak security practices. This week’s terrifying tale involves a lack of important patching and a humorously bad password…
England’s schools are getting better at mopping up cyber incidents
England’s secondary schools are reporting slightly fewer cybersecurity incidents and faster recovery when disaster strikes, according to a survey by exams regulator Ofqual. Twenty-seven percent of schools reported an incident…
UK privacy watchdog starts over with new board and Manchester HQ
Britain’s data protection watchdog has acquired a new legal identity and governance structure, although the familiar ICO initials are staying put. On September 30, the Information Commission replaced the Information…
Fewer women than ever in UK’s ‘old boys’ club’ cyber industry
The proportion of workers in the UK cybersecurity industry identifying as women has dropped to 16 percent, the lowest level since 2021. Gender diversity has long been an issue pervading…
Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
OpenAI, which hoovered up vast amounts of internet content amid copyright fights, has accused individuals associated with China’s Moonshot AI of being involved in a “distillation attack” that began July…
16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows
A 16-year-old security researcher named Faav found an authentication flaw in Microsoft’s Titan analytics service that allowed him to gain administrator access, submit unauthorized SQL queries with no valid credentials,…
More than half of UK businesses lack confidence in basic cyber skills
More than half of UK businesses lack confidence in their ability to perform at least one basic cybersecurity task, according to the government’s latest skills survey. The annual research found…
UK rail cops’ £320K face-scanning spree nets zero matches
British Transport Police (BTP) spent more than £320,000 putting half a million commuters through live facial recognition cameras, only for the system to identify precisely nobody it was looking for.…