October 2023

Privacy advocate challenges YouTube’s ad blocking detection scripts under EU law 26/10/2023 at 13:18 By Thomas Claburn Irish eyes may not be smiling Interview  Last week, privacy advocate (and very occasional Reg columnist) Alexander Hanff filed a complaint with the Irish Data Protection Commission (DPC) decrying YouTube’s deployment of JavaScript code to detect the use […]

Vodafone and Wi-Fi vendors play tug of war over 6 GHz 26/10/2023 at 12:32 By Dan Robinson Everyone’s wanting a slice of this spectrum pie Vodafone says tests of frequencies in the upper 6 GHz band for mobile phone calls were successful, and is pushing for it to be available for cellular networks. The problem?

ServiceNow quietly addresses unauthenticated data exposure flaw from 2015 26/10/2023 at 11:47 By Connor Jones Researcher who publicized issue brands company’s communication ‘appalling’ ServiceNow is issuing a fix for a flaw that exposes data after a researcher published a method for unauthenticated attackers to steal an organization’s sensitive files.… This article is an excerpt from

Iranian Group Tortoiseshell Launches New Wave of IMAPLoader Malware Attacks 26/10/2023 at 11:46 By The Iranian threat actor known as Tortoiseshell has been attributed to a new wave of watering hole attacks that are designed to deploy a malware dubbed IMAPLoader. “IMAPLoader is a .NET malware that has the ability to fingerprint victim systems using native Windows

Critical Flaw in NextGen’s Mirth Connect Could Expose Healthcare Data 26/10/2023 at 11:46 By Users of Mirth Connect, an open-source data integration platform from NextGen HealthCare, are being urged to update to the latest version following the discovery of an unauthenticated remote code execution vulnerability. Tracked as CVE-2023-43208, the vulnerability has been addressed in version 4.4.1 released on October

YoroTrooper: Researchers Warn of Kazakhstan’s Stealthy Cyber Espionage Group 26/10/2023 at 11:46 By A relatively new threat actor known as YoroTrooper is likely made of operators originating from Kazakhstan. The assessment, which comes from Cisco Talos, is based on their fluency in Kazakh and Russian, use of Tenge to pay for operating infrastructure, and very limited targeting

Ubuntu LTS kernels will get one decade of fixes … still 26/10/2023 at 10:32 By Liam Proven Upstream policy change for LTS kernels Ubuntu doesn’t use Canonical has addressed customer concerns over the reduction in long term support (LTS) of its code – but there is no real change here, and you’ll still need Ubuntu Pro

Cisco to sell enterprise version of $400 Bang & Olufsen earbuds 26/10/2023 at 09:47 By Simon Sharwood Make Webex more collaborative and secure, while you enjoy its AI additions and active noise cancellation Cisco has co-branded a pair of high-end electronics vendor Bang & Olufsen’s earbuds, and suggested they’ll make Webex videoconferences more productive and

Microsoft creates a new kind of credential: the ‘Applied Skill’ 26/10/2023 at 07:32 By Simon Sharwood Shorter and more specific than certifications, but still tied to Microsoft products. Would you do one? Poll  When The Register writes about vendor certification programs, readers often comment that the credentials aren’t worth the pixels they’re printed on because