|
Article: FBI cyber boss: China's hacker-for-hire ecosystem 'out of control' - published 6 months ago. Content: China's "hacker-for-hire ecosystem has gotten out of control," according to Brett Leatherman, assistant director of the FBI's cyber division. This ecosystem includes private technology companies operating at the behest of the PRC's intelligence agencies while allowing Beijing to maintain plausible deniability. "Motivated by profit, this network of private ... https://www.theregister.com/security/2026/04/30/fbi-chinas-hacker-for-hire-ecosystem-out-of-control/5227748 Published: 2026 04 30 19:30:53 Received: 2026 05 06 09:48:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Bot her emails: most modern phishing campaigns are AI-enabled - published 6 months ago. Content: Give a man a phishing kit and he might get lucky a couple of times; teach an AI to phish and it'll change the landscape, if KnowBe4's latest phishing trends report is accurate. The cybersecurity and phishing awareness outfit released the seventh edition of its Phishing Threat Trends report on Thursday, and it appears that the internet's legions of phisherme... https://www.theregister.com/security/2026/04/30/most-phishing-now-uses-ai-says-knowbe4/5220579 Published: 2026 04 30 20:26:27 Received: 2026 05 06 09:48:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: The never-ending supply chain attacks worm into SAP npm packages, other dev tools - published 6 months ago. Content: The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package. The newly compromised packages as of Thursday include intercom-client@7.0.5 (according to Google-owned Wiz) and intercom-client@7.0.4 (says supply-chain security firm Socket) and lightning@... https://www.theregister.com/security/2026/05/01/ongoing-supply-chain-attacks-worm-into-sap-npm-packages/5228837 Published: 2026 04 30 23:21:53 Received: 2026 05 06 09:48:15 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Passport to £££: Home Office adds £216M to travel doc contract before a single bid's been placed - published 6 months ago. Content: The Home Office has increased the annual value and overall duration of its new passport production contract, increasing it to a total of £576 million as it starts a third round of engagement with suppliers. The department’s first engagement notice for the Provision of Passport Manufacturing and Personalisation Services contract last July included an estimat... https://www.theregister.com/security/2026/05/01/home-office-adds-216m-to-travel-doc-contract-before-bids/5227219 Published: 2026 05 01 09:15:06 Received: 2026 05 06 09:48:15 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down - published 6 months ago. Content: Canonical says its web infrastructure is under attack after a pro-Iran hacktivist group instructed its members to target the open source giant. "I can confirm that Canonical's web infrastructure is under a sustained, cross-border Distributed Denial of Service (DDoS) attack" a Canonical spokesperson told The Register. "Our teams are working to restore full ... https://www.theregister.com/security/2026/05/01/pro-iran-group-turns-ubuntu-ddos-into-shakedown/5224575 Published: 2026 05 01 11:05:59 Received: 2026 05 06 09:48:15 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: OpenAI locks GPT-5.5-Cyber behind velvet rope despite slamming Anthropic for doing exactly that - published 6 months ago. Content: OpenAI is lining up a limited release of its new GPT-5.5-Cyber model to a handpicked circle of "cyber defenders," just weeks after taking a swipe at Anthropic for doing almost exactly the same thing. CEO Sam Altman said in a post on X that the rollout will begin "in the next few days," with access restricted to a group he described as trusted defenders work... https://www.theregister.com/security/2026/05/01/openai-locks-gpt-55-cyber-behind-velvet-rope/5219691 Published: 2026 05 01 11:42:01 Received: 2026 05 06 09:48:14 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed - published 6 months ago. Content: CISA has added a critical cPanel bug to its known-exploited list, confirming that attackers are already poking holes in one of the internet's most widely used hosting stacks. The vulnerability, tracked as CVE-2026-41940, carries a near-worst-case CVSS score of 9.8 and affects all supported versions of cPanel and Web[Host Manager (WHM) released after version... https://www.theregister.com/security/2026/05/01/critical-cpanel-exploited-millions-of-sites-could-be-hit/5225588 Published: 2026 05 01 13:10:15 Received: 2026 05 06 09:48:14 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Brace for the patch tsunami: AI is unearthing decades of buried code debt - published 6 months ago. Content: Britain's cyber agency is warning that AI-fuelled bug hunting is about to flush out years of buried flaws, leaving defenders scrambling to keep up. In a blog post on Friday, Ollie Whitehouse, CTO of the UK's National Cyber Security Center, said organizations should brace for a looming "patch wave," driven by a backlog of weaknesses now being exposed faster ... https://www.theregister.com/security/2026/05/02/ai-digs-up-decades-of-code-debt-patch-up/5219734 Published: 2026 05 02 08:30:09 Received: 2026 05 06 09:48:14 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Five Eyes spook shops warn rapid rollouts of agentic AI are too risky - published 6 months ago. Content: Information security agencies from the nations of the Five Eyes security alliance have co-authored guidance on the use of agentic AI that warns the technology will likely misbehave and amplifies organizations’ existing frailties, and therefore recommend slow and careful adoption of the tech. The agencies delivered that position last Friday in a guide titled... https://www.theregister.com/security/2026/05/04/five-eyes-warn-agentic-ai-is-too-dangerous-for-rapid-rollout/5229103 Published: 2026 05 04 02:35:29 Received: 2026 05 06 09:48:13 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: If the vote you rocked, your personal info can be grokked - published 6 months ago. Content: Your voter data could be used against you. A foreign intelligence service that wished to identify the family members of deployed military personnel could do so by cross-referencing public voter record data and social media posts. An employer who only wanted to hire employees with a specific political affiliation could do so by analyzing the primary ballot h... https://www.theregister.com/security/2026/05/04/public-voter-records-can-expose-personal-data-when-linked/5226708 Published: 2026 05 04 09:06:12 Received: 2026 05 06 09:48:13 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Shadow IT has given way to shadow AI. Enter AI-BOMs - published 6 months ago. Content: When it comes to securing enterprise supply chains, now heavily infused with AI applications and agents, a software bill of materials (SBOM) no longer provides a complete inventory of all the components in the environment. Enter AI-BOMs. While a traditional SBOM includes all of the software packages and dependencies in the organization, an AI-BOM aims to co... https://www.theregister.com/security/2026/05/04/ai-boms-replace-sboms-as-way-to-track-ai-agents-and-bots/5221716 Published: 2026 05 04 15:04:20 Received: 2026 05 06 09:48:13 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Kids say they can beat age checks by drawing on a fake mustache - published 6 months ago. Content: It’s been months since the UK government began requiring stronger age checks under the Online Safety Act, and recent research suggests those measures are falling short of keeping kids away from harmful content. In some cases, even drawing on a mustache has been reported as enough to fool age detection software. Like keeping booze away from teenagers or nudi... https://www.theregister.com/security/2026/05/04/kids-can-bypass-some-age-checks-with-a-drawn-on-mustache/5224601 Published: 2026 05 04 20:50:10 Received: 2026 05 06 09:48:13 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Singapore boffins get diverse SIEMs singing in harmony with agentic rule translation - published 6 months ago. Content: Academics from Singapore and China have found a way to make AI useful for cyber-defenders, by creating a technique that translates rules from diverse Security Information and Event Managements (SIEMs) so they’re easier to consume across multiple systems. SIEMs collect log files from many sources and allow users to set rules that trigger alerts that a securi... https://www.theregister.com/security/2026/05/05/singapore-boffins-get-diverse-siems-singing-in-harmony/5220619 Published: 2026 05 05 02:12:16 Received: 2026 05 06 09:48:12 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Romance scammers turn sweet talk into £102M payday - published 6 months ago. Content: Romance fraudsters scammed Britons out of £102 million ($138 million) last year, according to the latest police figures. That works out to roughly £280,000 ($379,000) a day, the City of London Police said Tuesday. The average victim loses around £9,500 ($12,866) per scam, though individual cases have reached £1 million ($1.35 million). The figures come from... https://www.theregister.com/security/2026/05/05/romance-fraudsters-fleeced-uk-victims-of-102m-in-2025/5227963 Published: 2026 05 05 11:43:51 Received: 2026 05 06 09:48:12 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: ShinyHunters claims dump puts 119K Vimeo emails in the wild - published 6 months ago. Content: More than 119,000 Vimeo users's email addresses were extracted in a breach traced to a third-party analytics vendor, according to Have I Been Pwned. The incident first surfaced in April when the ShinyHunters crew added Vimeo to its growing "pay or leak" hit list, claiming it had pulled hundreds of gigabytes of data and threatening to dump the lot unless a d... https://www.theregister.com/security/2026/05/05/shinyhunters-claims-119k-vimeo-emails-in-the-wild/5227389 Published: 2026 05 05 12:15:34 Received: 2026 05 06 09:48:12 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking - published 6 months ago. Content: Real estate giant Cushman & Wakefield has confirmed a data breach after two cybercrime groups, ShinyHunters and Qilin, separately claimed responsibility for attacks on the company. A spokesperson told The Register the attack was "limited" in scope and stemmed from vishing (voice phishing), suggesting an employee was socially engineered. The representati... https://www.theregister.com/security/2026/05/05/cushman-wakefield-confirms-vishing-cyberattack/5228718 Published: 2026 05 05 13:34:25 Received: 2026 05 06 09:48:12 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Attackers are cashing in on fresh 'CopyFail' Linux flaw - published 6 months ago. Content: CISA is warning that a newly-disclosed Linux kernel bug dubbed "CopyFail" is already being exploited, just days after researchers dropped a working root-level exploit. Tracked as CVE-2026-31431, the bug sits in the Linux kernel and gives low-level users a way to take full control of a system by modifying data they should only be able to read, effectively tu... https://www.theregister.com/security/2026/05/05/copyfail-attackers-start-cashing-in-on-linux-flaw/5226930 Published: 2026 05 05 15:01:08 Received: 2026 05 06 09:48:11 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: ServiceNow clears agents for landing with new AI control tower - published 6 months ago. Content: ServiceNow announced an expansion of its AI Control Tower, transforming what began last year as a governance dashboard into what the company now describes as a command center for managing AI assets across an entire enterprise, including those running outside ServiceNow's own platform. The updated AI Control Tower, shipping as part of ServiceNow's Australia ... https://www.theregister.com/software/2026/05/05/servicenow-adds-agent-kill-switches-to-ai-control-tower/5228579 Published: 2026 05 05 17:00:10 Received: 2026 05 06 09:48:11 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: India orders infosec red alert in case Mythos sparks crime spree - published 6 months ago. Content: India’s Securities and Exchange Board has advised participants in the nation’s equities industry to immediately revisit their information security systems and practices, in case Anthropic’s Mythos bug-finding AI sparks a cyberattack spree. The Board is India’s equivalent of the USA’s Securities and Exchange Commission, or the UK’s Financial Conduct Authorit... https://www.theregister.com/security/2026/05/06/india-orders-infosec-red-alert-in-case-mythos-sparks-crime/5224961 Published: 2026 05 06 02:32:56 Received: 2026 05 06 09:48:11 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs - published 6 months ago. Content: https://thehackernews.com/2026/05/windows-phone-link-exploited-by-cloudz.html Published: 2026 05 06 08:34:00 Received: 2026 05 06 09:45:38 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Google's Android Apps Get Public Verification to Stop Supply Chain Attacks - published 6 months ago. Content: https://thehackernews.com/2026/05/android-apps-get-public-verification.html Published: 2026 05 06 09:13:00 Received: 2026 05 06 09:45:38 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs - published 6 months ago. Content: https://thehackernews.com/2026/05/windows-phone-link-exploited-by-cloudz.html Published: 2026 05 06 08:34:00 Received: 2026 05 06 09:42:27 Feed: The Hacker News Source: The Hacker News Category: News Topic: Cyber Security |
|
Article: Google's Android Apps Get Public Verification to Stop Supply Chain Attacks - published 6 months ago. Content: https://thehackernews.com/2026/05/android-apps-get-public-verification.html Published: 2026 05 06 09:13:00 Received: 2026 05 06 09:42:27 Feed: The Hacker News Source: The Hacker News Category: News Topic: Cyber Security |
|
|
Article: Weak security means attackers could disable all of a city's public EV chargers - published 7 months ago. Content: BLACK HAT ASIA Developers of rented internet of things infrastructure – stuff like public EV chargers and shared e-bikes – are prioritizing user convenience over security, and leaving themselves exposed to wide-scale denial of service attacks on their services. That frightening thesis was the subject of a Friday talk at the Black Hat Asia conference, delive... https://www.theregister.com/security/2026/04/24/attackers-could-disable-all-of-a-citys-public-ev-chargers/5222307 Published: 2026 04 24 04:10:33 Received: 2026 05 06 09:41:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Researchers find cyber-sabotage malware that may predate Stuxnet by five years - published 7 months ago. Content: BLACK HAT ASIA Infosec outfit SentinelOne found malware that tries to induce errors in engineering and physics simulation software and therefore represents an attempt at sabotage, and suggests it was created years before the Stuxnet worm that aimed to destroy Iran’s uranium enrichment centrifuges. The company’s Vitaly Kamluk discussed the malware in a talk ... https://www.theregister.com/security/2026/04/24/researchers-find-sabotage-malware-that-may-predate-stuxnet/5221340 Published: 2026 04 24 06:56:22 Received: 2026 05 06 09:41:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Greece relaxes Euro biometric border entry rules amid airport chaos - published 7 months ago. Content: Greece is taking a flexible approach to introducing the European Union's biometric Entry/Exit System (EES), after some British passport holders missed flights home following the system's implementation on 10 April. On 20 April, the Hellenic Police said it had started to fully deploy EES and Greece will use all necessary measures to manage traffic at border ... https://www.theregister.com/security/2026/04/24/greeces-flexible-approach-to-europe-biometric-entry-system/5224710 Published: 2026 04 24 09:15:13 Received: 2026 05 06 09:41:34 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: It's a myth that you need Mythos to find bugs: Open source models can do it just as well - published 7 months ago. Content: BLACK HAT ASIA Open source models can find bugs as effectively as Anthropic's Mythos, according to Ari Herbert-Voss, CEO of AI-powered security startup RunSybil and OpenAI's first security hire. Speaking at the Black Hat Asia conference in Singapore today, Herbert-Voss said Mythos excels at finding both "shallow" bugs - well-described flaws that are and eas... https://www.theregister.com/security/2026/04/24/open-source-models-can-find-bugs-as-well-as-mythos/5224166 Published: 2026 04 24 11:41:54 Received: 2026 05 06 09:41:34 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Intel bets the farm on AI inference to drag CPU back to the top table - published 7 months ago. Content: Intel is betting on AI to reverse its fortunes, wagering that inference and agentic workloads will restore the CPU to the center of compute - even as its chip manufacturing struggles persist. Speaking to analysts on its Q1 2026 earnings call, CEO Lip-Bu Tan said AI is pushing the total addressable chip market towards $1 trillion, and he reckons Intel is wel... https://www.theregister.com/security/2026/04/24/intel-expects-ai-inference-to-drive-demand-for-its-cpus/5227642 Published: 2026 04 24 12:50:36 Received: 2026 05 06 09:41:34 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Governments on high alert after CISA snuffs out Firestarter backdoor on fed network - published 7 months ago. Content: A US federal agency was successfully targeted by a previously unknown backdoor malware called Firestarter, according to CISA cybersnoops and their UK counterparts – neither of which disclosed the agency's name. FederalCivilianExecutiveBranch(FCEB)agencies include NASA; Homeland Security itself (cyberworkers at CISA are part of an operational unit in Homelan... https://www.theregister.com/security/2026/04/24/cisa-ncsc-issue-firestarter-backdoor-warning/5221148 Published: 2026 04 24 14:46:07 Received: 2026 05 06 09:41:33 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: ShinyHunters claim they have cruise giant Carnival's booty as 7.5M emails surface - published 7 months ago. Content: Carnival Corporation, the world's largest cruise company, is dealing with choppy waters after Have I Been Pwned flagged what it claimed were 7.5 million unique email addresses all allegedly tied to one of its subsidiaries. According to HIBP, the haul totals 8.7 million records and appears to relate to the Mariner Society loyalty program run by Holland Amer... https://www.theregister.com/security/2026/04/24/shinyhunters-claim-they-have-cruise-giant-carnivals-booty/5224615 Published: 2026 04 24 15:35:52 Received: 2026 05 06 09:41:33 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Crime crew impersonates help desk, abuses Microsoft Teams to steal your data - published 7 months ago. Content: A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and helpdesk staff impersonation - is also using custom malware in its data-stealing attacks, according to Google's Threat Intelligence Group. The threat hunters say they spotted a "large email campaign" in late December 2025. The attack st... https://www.theregister.com/security/2026/04/25/crime-crew-impersonates-help-desk-abuses-teams-chats/5221505 Published: 2026 04 25 09:28:13 Received: 2026 05 06 09:41:33 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: AI's not going to kill open source code security - published 7 months ago. Content: OPINION Cal.com has closed its commercial codebase, abandoning years of AGPL-3.0 licensing in a move that has alarmed the developer community that helped build it and sent ripples through the broader open source world. "Open source is dead," says Cal.com co-founder and CEO Bailey Pumfleet. But my conversations with top open source developers such as Linux k... https://www.theregister.com/security/2026/04/26/ais-not-going-to-kill-open-source-code-security/5220745 Published: 2026 04 26 09:28:09 Received: 2026 05 06 09:41:32 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Anthropic's magic code-sniffer: More Swiss cheese than cheddar, for now - published 7 months ago. Content: OPINION In retrospect, calling it Mythos made it a hostage to fortune. Anthropic may have hoped that the name implied its AI code security model had mythical god-like powers, but there's an alternate reading. Another definition for Mythos is a set of beliefs of obscure origin which are incompatible with reality. That reality is trickling in, and it’s lookin... https://www.theregister.com/security/2026/04/27/mythos-sniffs-out-your-bugs-cant-fix-your-bloody-idiots/5228719 Published: 2026 04 27 08:30:15 Received: 2026 05 06 09:41:32 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt - published 7 months ago. Content: A home security biz getting digitally burgled is not a great look - but that's exactly where ADT finds itself. The company has confirmed a cyber intrusion following an extortion attempt by the ShinyHunters crew, which claims to have made off with more than 10 million records. US-based ADT is one of the world's largest providers of monitored home alarm syste... https://www.theregister.com/security/2026/04/27/burglar-alarm-biz-gets-burgled-shinyhunters-pursues-ransom/5226645 Published: 2026 04 27 11:34:09 Received: 2026 05 06 09:41:32 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Cybersec is a thankless job: expanding workload and shrinking pay packet - published 7 months ago. Content: Cybersecurity professionals were the most overlooked workers in IT when it came to pay rises in 2025, according to new figures from recruiter Harvey Nash. The trend was especially stark in the UK, where 77 percent of all security staff saw no salary increase, although the pattern was observed globally too with 71 percent of infoseccers experiencing wage sta... https://www.theregister.com/security/2026/04/27/cybersecurity-professional-getting-more-work-and-less-pay/5220174 Published: 2026 04 27 12:22:58 Received: 2026 05 06 09:41:31 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Medical and utility tech companies admit digital breakins - published 7 months ago. Content: Digital intruders recently broke into two major tech suppliers - utility-technology firm Itron and medical-device maker Medtronic - according to filings with federal regulators. Itron, in a late Friday US Securities and Exchange Commission (SEC) filing, said it was notified about the unauthorized third-party break-in on April 13. The $4 billion company tha... https://www.theregister.com/security/2026/04/27/medical-and-utility-tech-companies-admit-digital-breakins/5221046 Published: 2026 04 27 17:53:16 Received: 2026 05 06 09:41:31 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Cursor-Opus agent snuffs out startup’s production database - published 7 months ago. Content: Jer (Jeremy) Crane, the founder of automotive SaaS platform PocketOS, spent the weekend recovering from a data extinction event caused by the company's AI coding agent in less than 10 seconds. Not one to let a crisis go to waste, Crane wrote up a post-mortem of the deletion incident in a social media post that tests the saying, "there's no such thing as ba... https://www.theregister.com/software/2026/04/27/cursor-opus-agent-snuffs-out-startups-production-database/5224442 Published: 2026 04 27 21:29:25 Received: 2026 05 06 09:41:31 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Ongoing supply-chain attack 'explicitly targeting' security, dev tools - published 7 months ago. Content: Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool providers. The biz said data posted online appears to have come from one of its GitHub repositories after the Lapsus$ extortion crew claimed to have dumped the company’s source code, secrets, and other sensitive data. In a Sunday upd... https://www.theregister.com/security/2026/04/28/ongoing-supply-chain-attack-targets-security-dev-tools/5226665 Published: 2026 04 27 23:33:51 Received: 2026 05 06 09:41:31 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak - published 7 months ago. Content: UPDATED Logistics technology company Pitney Bowes, which makes franking machines for US postage, is the latest scalp claimed by ShinyHunters and its ongoing spree of pay-or-leak attacks against major organizations. Data breach tracker Have I Been Pwned (HIBP) confirmed the breach on April 27, with 8.2 million unique email addresses included in the dump alon... https://www.theregister.com/security/2026/04/28/pitney-bowes-the-latest-victim-of-shinyhunters-breach-spree/5222896 Published: 2026 04 28 14:15:07 Received: 2026 05 06 09:41:30 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Don't pay Vect a ransom - your data's likely already wiped out - published 7 months ago. Content: Organizations hit by the wave of Trivy and LiteLLM supply-chain compromises that paid Vect in hopes of recovering their data likely did not get much back, according to Check Point Research. That's because the ransomware Vect uses isn't actually ransomware at all, but a wiper that destroys any file larger than 128KB. Vect's leak site lists 25 organizations s... https://www.theregister.com/security/2026/04/28/dont-pay-vect-a-ransom-your-big-files-are-likely-gone/5227697 Published: 2026 04 28 18:36:31 Received: 2026 05 06 09:41:30 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: 30 ClawHub skills secretly turn AI agents into a crypto swarm - published 6 months ago. Content: Thirty ClawHub skills published by a single author are silently co-opting AI agents and creating a mass cryptocurrency mining swarm – without any malware or user consent. Agentic AI security outfit Manifold's research lead Ax Sharma spotted the skills on ClawHub, a registry and marketplace for OpenClaw skills. A ClawHub user who goes by "imaflytok" publishe... https://www.theregister.com/security/2026/04/29/30-clawhub-skills-secretly-turn-ai-agents-into-crypto-swarm/5226209 Published: 2026 04 29 06:32:14 Received: 2026 05 06 09:41:30 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: GitHub: Zounds, a genuinely helpful AI-assisted bug report that isn't total slop! Here, Wiz, take this wad of cash - published 6 months ago. Content: Wiz researchers are set for a tidy payday thanks to their discovery of a high-severity flaw in GitHub's git infrastructure that handed remote attackers full read/write access to private GitHub repositories using a single command. In disclosing the bug this week, the Google-owned security shop also said its findings could represent a turning point in the way... https://www.theregister.com/security/2026/04/29/wiz-hands-github-ai-aided-bug-report-that-isnt-total-slop/5227744 Published: 2026 04 29 13:02:16 Received: 2026 05 06 09:41:30 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: CISA flags data-theft bug in NSA-built OT networking tool - published 6 months ago. Content: The Cybersecurity and Infrastructure Security Agency (CISA) is warning anyone who uses GrassMarlin, a tool developed by the National Security Agency (NSA), about a new vulnerability that attackers can use to snoop on sensitive information. First reported by Grady DeRosa, senior industrial pentester at Dragos, the weak spot affects all versions of GrassMarli... https://www.theregister.com/security/2026/04/29/cisa-flags-data-theft-bug-in-nsa-built-ot-networking-tool/5225947 Published: 2026 04 29 15:35:04 Received: 2026 05 06 09:41:29 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Yet another experiment proves it's too damn simple to poison large language models - published 6 months ago. Content: Unlike search engines that let you judge competing sources, search-backed AI chatbots can turn shaky web material into confident answers. Case in point: A security engineer convinced several bots that he was the reigning world champion of a popular German card game, even though no such championship exists. If you were to check Wikipedia up until the end of ... https://www.theregister.com/software/2026/04/29/fooling-large-language-models-just-keeps-getting-simpler/5229286 Published: 2026 04 29 17:00:18 Received: 2026 05 06 09:41:29 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Legacy TLS tour continues with Exchange Online blocking old versions from July 2026 - published 6 months ago. Content: Microsoft has warned users still clinging to legacy TLS versions that the end is nigh for TLS 1.0 and 1.1 on POP3 and IMAP4 connections to Exchange Online. Redmond warned, "We will start to block legacy version connections starting in July 2026." The move is long overdue, and the Windows giant has been warning users for years that it was coming. Support for... https://www.theregister.com/security/2026/04/29/exchange-online-blocks-legacy-tls-from-july-2026/5227378 Published: 2026 04 29 18:35:11 Received: 2026 05 06 09:41:29 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Microsoft's patch for a 0-day exploited by Russian spies fell short. Another Windows flaw is under attack - published 6 months ago. Content: Microsoft and the US Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are exploiting a zero-click Windows flaw that can expose sensitive information on vulnerable systems. While we don't know who is attacking this one, tracked as CVE-2026-32202, we'd suggest betting it all on Putin's goons. The flaw stems from an incomplete fix ... https://www.theregister.com/security/2026/04/29/microsoft-patch-fell-short-new-windows-flaw-exploited/5227153 Published: 2026 04 29 19:15:07 Received: 2026 05 06 09:41:28 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Researchers move in the right direction, develop powerful GPS interference alarm - published 6 months ago. Content: GPS spoofing, which sends fake satellite-like signals, and GPS jamming, which drowns receivers in noise, are increasingly serious problems. Researchers at Oak Ridge National Laboratory in Tennessee have created what they say is the most effective system yet for detecting GPS interference, which could help blunt such attacks. ORNL said Wednesday that a group... https://www.theregister.com/security/2026/04/29/ornl-builds-more-sensitive-gps-interference-detector/5223865 Published: 2026 04 29 20:11:05 Received: 2026 05 06 09:41:28 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Linux cryptographic code flaw offers fast route to root - published 6 months ago. Content: Developers of major Linux distributions have begun shipping patches to address a local privilege escalation (LPE) vulnerability arising from a logic flaw. The newly disclosed LPE, dubbed Copy Fail (CVE-2026-31431), comes from a vulnerability in the Linux kernel's authencesn cryptographic template. "An unprivileged local user can write four controlled bytes ... https://www.theregister.com/software/2026/04/30/linux-cryptographic-code-flaw-offers-fast-route-to-root/5229187 Published: 2026 04 30 00:01:50 Received: 2026 05 06 09:41:28 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Finance company stores DB credentials in helpfully labeled spreadsheet - published 6 months ago. Content: PWNED Welcome, once again, to PWNED, the weekly column where we recount the adventures of IT explorers who found their own pile of quicksand and then jumped right into it. This week's story involves keeping sensitive information in a very vulnerable place and then not protecting it adequately. The tale comes to us courtesy of Stanislav Kazanov, head of stra... https://www.theregister.com/security/2026/04/30/finance-company-stored-their-db-credentials-in-spreadsheet/5224248 Published: 2026 04 30 08:00:12 Received: 2026 05 06 09:41:27 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Bug of the year (so far): Nasty cPanel vulnerability probably exploited as a 0-day - published 6 months ago. Content: Emergency patches are available for a critical vulnerability in cPanel and WHM that allows attackers to bypass authentication and gain root access to servers managed using it. Given that cPanel and WebHost Manager (WHM) control panel help manage properties for 70 million domains, by some estimates, and the critical severity of CVE-2026-41940 (9.8), the vul... https://www.theregister.com/security/2026/04/30/critical-cpanel-whm-flaw-probs-exploited-as-0-day-pros-say/5228744 Published: 2026 04 30 10:14:07 Received: 2026 05 06 09:41:27 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia - published 6 months ago. Content: EXCLUSIVE A novel China-linked threat group infiltrated more than a dozen critical networks in Poland, Asian countries, and possibly beyond, beginning in December 2024 and with activity uncovered as recently as this month. In a report shared exclusively with The Register, TrendAI researchers say the new group, which they track as Shadow-Earth-053, targeted ... https://www.theregister.com/security/2026/04/30/chinese-spy-group-caught-lurking-in-poland-asia-networks/5227509 Published: 2026 04 30 11:00:08 Received: 2026 05 06 09:41:27 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Nearly half of UK businesses pwned last year as phishing keeps doing the job like it's 2005 - published 6 months ago. Content: Nearly half of UK businesses are still getting breached, and in many cases, the attacker's big breakthrough is an employee clicking "sure, why not" on a fake login page. The UK government's latest Cyber Security Breaches Survey, released on Thursday, puts the hit rate at 43 percent of businesses and 28 percent of charities reporting a cyber incident in the ... https://www.theregister.com/security/2026/04/30/uk-business-breach-rate-stuck-at-43-blame-the-phishing/5220326 Published: 2026 04 30 11:35:10 Received: 2026 05 06 09:41:26 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: French prosecutors link 15-year-old to mega-breach at state’s secure document agency - published 6 months ago. Content: French prosecutors say police detained a 15-year-old on April 25 over the alleged theft of millions of records from France Titres (ANTS), the agency handling secure documents. The Paris Prosecutor's Office announced on Thursday that the minor, suspected of using the online alias "breach3d" and not named because French law protects minors, faces two computer... https://www.theregister.com/security/2026/04/30/french-prosecutors-link-15-year-old-to-gov-mega-breach/5221613 Published: 2026 04 30 16:39:22 Received: 2026 05 06 09:41:26 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Google's fix for critical Gemini CLI bug might break your CI/CD pipelines - published 6 months ago. Content: If you use Gemini CLI, watch out: Google has patched a CVSS 10.0 vulnerability in its command-line AI tool and is warning anyone running it in headless mode, or through GitHub Actions, to review their workflows. The update to Gemini CLI and the run-gemini-cli GitHub Action, published last week but largely unnoticed until one of the two credited research tea... https://www.theregister.com/security/2026/04/30/google-fixes-cvss-100-vulnerability-in-gemini-cli/5225768 Published: 2026 04 30 17:15:13 Received: 2026 05 06 09:41:25 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: FBI cyber boss: China's hacker-for-hire ecosystem 'out of control' - published 6 months ago. Content: China's "hacker-for-hire ecosystem has gotten out of control," according to Brett Leatherman, assistant director of the FBI's cyber division. This ecosystem includes private technology companies operating at the behest of the PRC's intelligence agencies while allowing Beijing to maintain plausible deniability. "Motivated by profit, this network of private ... https://www.theregister.com/security/2026/04/30/fbi-chinas-hacker-for-hire-ecosystem-out-of-control/5227748 Published: 2026 04 30 19:30:53 Received: 2026 05 06 09:41:24 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Bot her emails: most modern phishing campaigns are AI-enabled - published 6 months ago. Content: Give a man a phishing kit and he might get lucky a couple of times; teach an AI to phish and it'll change the landscape, if KnowBe4's latest phishing trends report is accurate. The cybersecurity and phishing awareness outfit released the seventh edition of its Phishing Threat Trends report on Thursday, and it appears that the internet's legions of phisherme... https://www.theregister.com/security/2026/04/30/most-phishing-now-uses-ai-says-knowbe4/5220579 Published: 2026 04 30 20:26:27 Received: 2026 05 06 09:41:24 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: The never-ending supply chain attacks worm into SAP npm packages, other dev tools - published 6 months ago. Content: The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package. The newly compromised packages as of Thursday include intercom-client@7.0.5 (according to Google-owned Wiz) and intercom-client@7.0.4 (says supply-chain security firm Socket) and lightning@... https://www.theregister.com/security/2026/05/01/ongoing-supply-chain-attacks-worm-into-sap-npm-packages/5228837 Published: 2026 04 30 23:21:53 Received: 2026 05 06 09:41:24 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Click to Open Code Editor