Gareth Corfield

The maintainers of Webmin – an open-source application for system administration tasks on Unix-flavored systems – have released Webmin version 1.930 and the related Usermin version 1.780 to patch a vulnerability that can be exploited to achieve remote code execution in certain configurations. Joe Cooper, one of the …

One of the crew who hacked TalkTalk has been ordered to hand over £400,000 after seizing control of a high-profile Instagram account following a hack on Aussie telco Telstra. Elliott Gunton, 19, pleaded guilty to breaching a Sexual Harm Prevention Order (SHPO), Computer Misuse Act crimes and money laundering at Norwich Crown …

Ireland's Data Protection Commission (DPC) has ordered the country to delete 3.2 million people's personal data after ruling that its national ID card scheme was "unlawful from a data-processing point of view". Speaking to the Irish Times, data protection commissioner Helen Dixon described the scheme as "unlawful" and has …

Sussex Police's probe of the infamous London Gatwick airport drone fiasco of Christmas 2018 has doubled in cost to nearly £900,000 – and the bungling force still hasn't arrested the person or persons responsible. So far police in Sussex, where the "London" airport is situated, have splurged an eye-watering £886,210 on trying …

Huawei has reportedly boasted that it will continue investing in the UK even if the British government U-turns on allowing the Chinese company to supply critical 5G mobile network equipment. Speaking to Sky News, Victor Zhang, Huawei president of global government affairs, said the business will still flog its wares to Britons …

A young man who DoSed two British police forces' websites has been sentenced to 16 months in a young offenders' institution. Liam Reece Watts was jailed at Chester Crown Court earlier this week after DoSing Cheshire Police and Greater Manchester Police's public-facing websites as revenge for being convicted of carrying out a …

CommentWeWork, the office rental upstart that poses as some kind of tech startup incubation facility, has submitted the paperwork for its stock-market debut in the US – and its filings warn the biz “may never be profitable.” This news is everywhere today because it's the middle of August and no sane business knowingly announces stuff …

Two infosec researchers found 27 million personal data records, including a million people's fingerprints, exposed to the public along with plaintext admin credentials for the Suprema Biostar 2 system they were associated with. The database powering South Korean company Suprema Inc's Biostar 2 biometric access control system …

UpdatedAmerica has pushed back its decision to raise import tariffs on Chinese-made smartphones, laptops, and similar electronics, by 10 per cent, the Office of the US Trade Representative announced today. From September 1, The Land of the Free will tack the extra levy on $300bn of stuff coming in from the Middle Kingdom. However, …

A British Army Watchkeeper drone that crashed near its home base of Aberporth in south Wales did so after its crew overrode its autopilot, causing the unmanned aircraft to hit a tree. The Watchkeeper, tail number WK050, was destroyed in the June 2018 crash, according to the BBC, which obtained a copy of an internal Ministry of …

A British cloud software company has sold a 50 per cent stake to the private equity firm that owned British phone retailer Phones4U at the time of the company's demise. The lucky recipient of a reported £2bn is Slough's Advanced Computer Software Group, a cloud migration services outfit. Advanced's new part-owner is BC …

The American Securities and Exchange Commission is said to be investigating a US insurance company that allegedly left 885 million personal records accessible "without authentication to anyone with a web browser". As revealed by infosec journalist Brian Krebs in May this year, First American Financial Corporation was said to …

A curious thing happens when you look at a map of fibre-optic cables – most of the UK section of American cable operator GTT's network appears to link the NSA spy station at Menwith Hill in Yorkshire with continental Europe. Thanks to the diligent efforts of Alan Turnbull at secret-bases.co.uk, The Register can point the …

UpdatedBritons working for Google at its London HQ are being secretly spied on by creepy facial recognition cameras – but these ones aren't operated by the ad-tech company. Instead it's the private landlord for most of the King's Cross area doing the snooping, according to today's Financial Times. "The 67-acre King's Cross area, …

Facebook will face a class-action lawsuit with a payout potential of $35bn over how its photo tagging and facial recognition software works. A US appeal court ruled yesterday that the antisocial network's attempts to bat away the sueball should fall accordingly, opening up Mark Zuckerberg's company to potentially billions of …

Microsoft has blacklisted Brit hosting outfit TSO Host's bulk email domain, meaning anyone trying to send large quantities of mail over its infrastructure cannot deliver it to an Outlook or Hotmail address. Irate resellers got in touch with The Reg to complain that their own customers were moaning that emails sent to any …

ExclusiveTransport for London's online Oyster travel smartcard system has been accessed by miscreants using stolen customer login credentials, The Reg can reveal, forcing IT bods to pull the website offline for a second day. The UK capital's transport authority has blamed the intrusions on passengers who have used email address and …

An American appeals court has nixed one of Google's original legal settlements over its infamous privacy-busting Safari Workaround. The 3rd Circuit Court of Appeal, based in Philadelphia, ordered a new hearing to take place over the 2017 payoff – $5.5m handed over to Google-backed privacy campaign groups. In an opinion (PDF) …

Passwords were among the 23 million customer records siphoned from CafePress by hackers – and the site was using the less secure SHA-1 hashing algorithm to store half of its users' credentials. As El Reg and the rest of the security-focused media reported yesterday, CafePress had around 23 million customer records exfiltrated …

As late Microsoftie Paul Allen's estate is gradually wound down, the gems from his collection of rare and historic aircraft are coming up for auction – including his personal two-seat MiG-29 Russian fighter jet. Allen, who died from cancer in October 2018, was well known in aviation enthusiast circles for his dedication to …

Oracle's EU-area employee rep council has lost its legal battle to force the American company to pay attention to it after Big Red sacked several hundred people and offshored their jobs to Romania. In a judgment delivered last Friday afternoon, the UK Employment Appeal Tribunal ruled (PDF) that Oracle's "European Works Council …

Twee T-shirts 'n' merch purveyor CafePress had 23 million user records swiped – reportedly back in February – and this morning triggered a mass password reset, calling it a change in internal policy. Details of the security breach emerged when infosec researcher Troy Hunt's Have I Been Pwned service – which lists websites …

Autonomy TrialThe judge in the long-running Autonomy trial has joked that it's a "very strange feeling" not to see the British firm's former CEO in the witness box after Mike Lynch's marathon testimony to the High Court finally ended. Rounding off Lynch's four solid weeks of giving evidence about what happened before and after Autonomy plc …

Further details have emerged on the 737 Max flight control software bug discovered at the end of June, with reports suggesting that belated tests by a US regulator found the hitherto unknown bug. The Seattle Times, Boeing's hometown newspaper for many years, explains in detail how timid Federal Aviation Authority regulators …

Palo Alto Networks has spotted a new cryptomining malware technique that not only wipes out any other miners present on the target machine but uses GitHub and Pastebin as part of its command-and-control (C2) infrastructure. The malware, believed to originate from a Chinese cybercrime group nicknamed Rocke, targets cloud …