Greenbone did not have to write any special code to see what patient data was accessible, nor did any software vulnerability have to be exploited, or a zero-day attack carried out. As such, you don’t need to be a hacker to gain access to this highly sensitive data, it’s all visible with the help of freely available tools. To view and – if desired – download this data, you only need a list of IPs and a corresponding viewer. Both are available for download on the net.

Altogether, we unearthed more than 24 million records which, combined linked to more than 700 million images. Of these scans, 400 million were actually downloadable.

In a cybersecurity study of network attached storage (NAS) systems and routers, Independent Security Evaluators (ISE) found 125 vulnerabilities in 13 IoT devices, reaffirming an industrywide problem of a lack of basic security diligence.

In nearly all the devices (12 of the 13), ISE achieved its goal of obtaining remote root-level access.

Six of them can be remotely exploited without authentication: the Asustor AS-602T, Buffalo TeraStation TS5600D1206, TerraMaster F2-420, Drobo 5N2, Netgear Nighthawk R9000, and TOTOLINK A3002RU.

It wasn’t just 123-Reg either, another big registrar, NamesCo was doing the exact same thing: sending invoices to customers for names they had never requested.

These are just some of the thousands of UK domain holders who will soon be charged tens of millions of pounds for domain names they never ordered and in many cases do not want.

Nominet pushed for the creation of new .uk domains over two years ago, despite strong objections from the internet community. It stands to make tens of millions of pounds a year from the scheme.

Authorities later found out the state court administration did, in fact, hire the men to attempt "unauthorized access" to court records "through various means" in order to check for potential security vulnerabilities of Iowa's electronic court records.

But, the state court administration "did not intend, or anticipate, those efforts to include the forced entry into a building," a Wednesday news release from the Iowa Judicial Branch read.

Shares of MoviePass parent company Helios and Matheson Analytics dropped 10% Friday afternoon, though the stock trades for a fraction of a penny.

Among the options it’s considering are a sale of the company in its entirety, a sale of the company’s assets, including MoviePass, Moviefone and MoviePass Films, as well as the possibility of a reorganization of the company.

Investigators said Google owed about €1.6bn in unpaid taxes amid a wider crackdown on tax planning of big firms.

The search giant, which is part of Alphabet, pays little tax in most European countries because it reports almost all of its sales in Ireland.

In March, the EU hit Google with a €1.5bn fine for blocking rival online search advertisers and last year the European Commission levelled a record €4.3bn fine against the firm over its Android mobile operating system.

Yesterday the UK government was forced to release a report describing the possible impact of the UK leaving the European Union without a deal at the end of October, which is looking increasingly possible. The plans had been codenamed Operation Yellowhammer.

Now it’s clear that civil servants, who are supposed to be impartial, expect there to be at least some harmful consequences of leaving the European Union without a deal. They predict that from day one the lorry flow rate through the Channel could roughly halve, for up to three months, with “significant disruption” for another three months.

The action is the biggest of its kind yet against this type of digital scammer, and is a strong symbol of law enforcement's sense of urgency in trying to contain a rapidly growing threat.

"Will it make a dent? It's really hard to say," says Crane Hassold, senior director of threat research at Agari who previously worked as a digital behavior analyst for the FBI, of the arrests. "There are so many actors doing BEC and other types of social engineering scams—there could be thousands, especially in West Africa—that it's going to be difficult to make a significant impact overall."

“Due to the lack of infrastructure, poor planning, risk management, and blatant disregard for the safety of the expected 10,000+ AlienStock attendees, we decided to pull the plug on the festival,” a message on AlienStock’s website reads.

The local town has been actively warning people on its website not to come, noting that many local residents are armed and would be willing to defend their property.

Mozilla's Firefox privacy protections will soon include one of the most basic tasks for any web browser: fielding the domain name requests that help you visit websites. The developer will make DNS over encrypted HTTPS the default for the US starting in late September, locking down more of your web browsing without requiring an explicit toggle like before.

If all goes smoothly, Firefox may become a go-to option for anyone who insists on securing as much of their web traffic as possible.