Exploits for pre-auth Fortinet FortiWeb RCE flaw released, patch now
Proof-of-concept exploits have been released for a critical SQLi vulnerability in Fortinet FortiWeb that can be used to achieve pre-authenticated remote code execution on vulnerable servers. FortiWeb is a web application firewall (WAF), which is used to protect...
10/10 Wing FTP bug exploited within hours, cyber pros say • The Register
Huntress security researchers observed exploitation of the CVSS 10.0 remote code execution (RCE) flaw in Wing FTP Server on July 1, just one day after its public disclosure. Wing FTP Server is a cross-platform file-transfer solution, supporting FTP, FTPS, SFTP,...
UK Online Safety Act ‘not up to scratch’ on misinformation • The Register
The Online Safety Act fails to tackle online misinformation, leaving the UK in need of further regulation to curb the viral spread of false content, a report from MPs has found. In response, the Science, Innovation and Technology Committee is urging the...
Security company hired used car salesman to build website • The Register
On Call Welcome once again to On Call, The Register's Friday column that shares your stories of tech support terror and triumph. This week, meet a fellow reader we'll Regomize as "Boris" who shared a story from his time working at a cybersecurity firm that...
French cops cuff Russian hoopster for alleged ransomware • The Register
A Russian professional basketball player is cooling his heels in a French detention center after being arrested and accused of acting as a negotiator for a ransomware gang. Daniil Kasatkin, 26, was arrested at Charles de Gaulle Airport outside Paris on June 21...
Chinese censorship-busters say Tencent behind shutdown bid • The Register
Anti-censorship organization GreatFire.org has accused Singapore infosec outfit Group-IB of helping Chinese web giant Tencent to quell its activities. GreatFire researches China’s censorship efforts and publishes data about the material and apps Beijing blocks....
US airman admits leaking secrets on dating app • The Register
A lovestruck US Air Force employee has pleaded guilty to conspiring to transmit confidential national defense information after sharing military secrets information about the Russia-Ukraine war with a woman he met on a dating app. David Franklin Slater, a...
Windows 11 now uses JScript9Legacy engine for improved security
Microsoft announced that it has replaced the default scripting engine JScript with the newer and more secure JScript9Legacy on Windows 11 version 24H2 and later. The decision is driven by security concerns, as JScript9Legacy is expected to offer better...
Russian pro basketball player arrested for alleged role in ransomware attacks
Russian professional basketball player Daniil Kasatkin was arrested in France at the request of the United States for allegedly acting as a negotiator for a ransomware gang. Daniil Kasatkin is a Russian basketball player who briefly played NCAA basketball at...
Russia rejects ethical hacking bill • The Register
Russia, home to some of the world's most lucrative and damaging cybercrime operations, has rejected a bill to legalize ethical hacking. The State Duma, the lower house of Russia's general assembly, blocked the bill's passage into law on various grounds,...