Gareth Corfield

DevOps outfit GitLab has opened its bug bounty scheme to world+dog, having paid out $200,000 last year and fixed "nearly 200 vulnerabilities reported to us". "In managing a public bug bounty program, we will now be able to reward our hacker community for reporting security vulnerabilities to us directly through the program," …

British ministers have approved the export of more than £2.4m worth of telecoms snooping gear to Saudi Arabia, in spite of its very obvious human rights problems, according to a report. Five licences were granted to send "telecommunications interception equipment" to the controversial kingdom, which was most recently in the …

Ticketmaster is telling its customers that it wasn't to blame for the infection of its site by a strain of the Magecart cred-stealing malware – despite embedding third-party Javascript into its payments page. In a letter to Reg reader Mark, lawyers for the controversy-struck event ticket sales website said that Ticketmaster " …

A former high-flying IBM salesman yesterday accused the American mainframe megalith of using "obstructionist" legal tactics to block disclosure of incriminating documents that would help him win a landmark age discrimination lawsuit. Jonathan Langley filed a lawsuit against IBM in May this year claiming that its pro- …

Texas Instruments has rather feebly slapped down infosec researchers' findings on a so-called Bleedingbit Bluetooth Low Energy vulnerability after a more detailed explanation of the chipset's weakness emerged. A cry crying over her scraped knee IT Wi-Fi kit bit by TI chip slip: Wireless gateways open to hijacking via …

US satcom provider Viasat has declared it will appeal a British tribunal ruling that rival European operator Inmarsat had not breached its licence by becoming part of an EU-wide satellite broadband network. Not only did Ofcom in October 2017 brush aside the American firm's challenge against Inmarsat's use of its 2GHz spectrum …

A teenage bomb hoaxer from Watford who taunted the UK's National Crime Agency on Twitter while pretending to be a hacker crew called Apophis Squad has been jailed for three years. George Duke-Cohan, 19, from the village of Garston, near Watford, just north of London, previously pleaded guilty to making three bomb hoaxes, …

Lawyers for a man who sued the Cambridge Analytica group for £20,000 claiming misuse of his personal data have suggested the controversial data-mining biz misled a High Court judge when the companies were put into administration. In a hearing at the High Court today, barrister Andreas Gledhill told Insolvency Judge Barnett: " …

Black HatCrafty infosec researchers have figured out how to remotely set answers to Windows 10’s password reset questions “without even executing code on the targeted machine”. Thanks to some alarmingly straightforward registry tweaks allied with a simple Python script, Illusive Networks’ Magal Baz and Tom Sela were not only able to …

Black HatA Nigerian email scammer gang has evolved to the point where it has corporate-style specialist departments and uses commercial business intelligence data brokers to help plan its attacks. According to infosec research biz Agari, a group of business email compromise (BEC) scammers it nicknamed "London Blue" has become so well …

Black HatGovernments need to "turn from public private partnership slogans to real partnerships" on cybersecurity, former Estonian foreign minister Marina Kaljurand told the Black Hat infosec conference in London this morning. In a wide-ranging speech where she talked about everything from diplomacy to the relationship between states, …

A ransomware decryption service has turned out to be – quelle surprise – a Belarusian middleman who simply pays the ransom and adds his own profit margin to the hapless victim's bill. Dr Shifro, a Russian-language organisation presenting itself online as a ransomware decryption agency, claims that it's "the only company that …

UpdatedBT has lost its legal bid to cut its £14bn pension deficit by slashing interest rates for 83,000 members of its post-privatisation pension scheme. This morning the Court of Appeal in London threw out BT's bid to change the interest rate payable on its pensions, after the High Court had already said "no" earlier this year. The …

The Lord Chief Justice (LCJ) of England and Wales thinks there is a place for articifial intelligence in the judicial process but isn't losing any sleep over the security of his job just yet. Lord Burnett of Maldon, the top judge in England and Wales, gave a speech to the International Forum on Online Courts in which he mulled …

An infosec firm has unleashed a NotPetya-style worm onto a customer’s network – and discovered that a simple Windows Active Directory tweak has a surprising effect on self-spreading malware. In the wake of the outbreak of NotPetya – so-called because it masquerades as Petya ransomware – one of NCC Group's customers asked the …

Offering disgruntled workers a fat cheque to quit is not blackmail, a court has told Capita. Capita accountant Mowe Saha claimed she had been retaliated against by the infamous outsourcing badass after whistleblowing and refusing to accept a roster that included working for 12 days straight (a total of 76 hours) immediately …

HPE DiscoverThe ongoing US-China trade squabble will have little effect on HPE, chief exec Antonio Neri boldly predicted to the world's tech press. China v USA Tech world mulls threat as new round of US China trade tariffs looms READ MORE Speaking at HPE's Discover conference in Madrid earlier this week, Neri reckoned the international …

US hotel chain Marriott has admitted that a breach of its Starwood subsidiary's guest reservation network has exposed the entire database – all 500 million guest bookings over four years, making this one of the biggest hacks of an individual org ever. "On September 8, 2018, Marriott received an alert from an internal security …

On the same day that certain types of British state-backed hacking now need a judge-issued warrant to carry out, GCHQ has lifted the veil and given the infosec world a glimpse inside its vuln-hoarding policies. The spying agency's internal Equities Process is the way by which it decides whether or not to tell tech vendors that …

HPE Discover 2018Formula 1 driver Lewis Hamilton used to be a PFY working on mainframes before his racing career took off, he revealed today during HPE's Discover conference in Madrid. The British racing driver, who notched up yet another Grand Prix victory in Abu Dhabi last Saturday, was at the conference to talk about how HPE's tech support …

HPE Discover 2018HPE chief exec Antonio Neri reckons what the corporate world really wants is to have a nice cloud "experience," which is an interesting way of saying "please, please, buy our cloud-as-a-service". In a mostly unremarkable keynote speech at this week's HPE Discover knees-up in Madrid, Neri informed attendees that his firm is " …

HPE Discover 2018Don't want a full blown data centre? Not a problem, said HPE today as it lifted the curtain on a fresh clutch of edge networking products – including a software platform – under its Edgeline brand. The "converged edge systems" are aimed at bringing together operational tech and what we traditionally see as IT, according to …

ObitBaroness Trumpington, a wartime Bletchley Park transcriber who was part of the push to posthumously pardon Alan Turing, has died aged 96. As the daughter of a society family that had almost been ruined in the Wall Street Crash of 1929, Jean Campbell-Harris left school aged 15 "having never sat an exam but fluent in French, …

An NCC Group graduate trainee who emailed 300 coworkers to ask for help with what she deemed to be "unusual" behaviour from her Kali Linux VM; contacted the firm’s incident response team to complain about a faulty laptop; and said the machine had been "deliberately sabotaged", has had her victimisation claim thrown out by an …

HPE Discover 2018HPE is updating its wares to reduce the skill level needed to deploy its so-called composable infrastructure. Composable infrastructure is its fancy term for pools of networking, storage, and compute resources, all managed as one platform through software and automation, and not necessarily hosted all on-premises. It can look …