|
Article: Combating the rising threat of AI-powered phishing attacks - published almost 2 years ago. Content: To combat the rising threat of AI-powered phishing, a comprehensive strategy is crucial. https://www.securitymagazine.com/articles/101247-combating-the-rising-threat-of-ai-powered-phishing-attacks Published: 2024 12 16 05:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: Prepping for your January 2025 board meeting - published almost 2 years ago. Content: The first board meeting of the New Year presents opportunities to effectively communicate the state of the organization's cybersecurity posture. https://www.securitymagazine.com/articles/101296-prepping-for-your-january-2025-board-meeting Published: 2025 01 16 05:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: How security professionals can stand out in a tighter market - published over 1 year ago. Content: Staying proactive, adaptable and continuously learning are key to stand out and achieve career success in cybersecurity. https://www.securitymagazine.com/articles/101363-how-security-professionals-can-stand-out-in-a-tighter-market Published: 2025 02 13 05:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: The fundamentals of cybersecurity in the age of AI - published over 1 year ago. Content: Advanced technologies should complement, not replace, the fundamental principles of cybersecurity. https://www.securitymagazine.com/articles/101473-the-fundamentals-of-cybersecurity-in-the-age-of-ai Published: 2025 03 18 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: Building a robust cybersecurity team: Five essential roles and key certifications - published over 1 year ago. Content: Assembling a robust cybersecurity team is essential for protecting an organization’s information assets. https://www.securitymagazine.com/articles/101536-building-a-robust-cybersecurity-team-five-essential-roles-and-key-certifications Published: 2025 04 14 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: The Critical Role of Mean Time to Remediate - published over 1 year ago. Content: Every minute shaved off the remediation process translates to reduced risk and a stronger, more resilient organization. https://www.securitymagazine.com/articles/101647-the-critical-role-of-mean-time-to-remediate Published: 2025 05 28 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Quantum Computing: A Call to Action for Security Professionals - published over 1 year ago. Content: There are significant security challenges and opportunities ahead in the era of quantum computing. https://www.securitymagazine.com/articles/101718-quantum-computing-a-call-to-action-for-security-professionals Published: 2025 06 25 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: Securing the Digital Frontier: Strategies for Safeguarding Companies and Customers in the Age of Wearables - published over 1 year ago. Content: Adapting frameworks to encompass emerging risks associated with the latest wearable trends is essential. https://www.securitymagazine.com/articles/101784-securing-the-digital-frontier-strategies-for-safeguarding-companies-and-customers-in-the-age-of-wearables Published: 2025 07 31 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Your Mid-Year BCP Wake-Up Call: Is Your Business Ready? - published about 1 year ago. Content: A Business Continuity Plan is a silent safety net, but it requires regular maintenance. https://www.securitymagazine.com/articles/101828-your-mid-year-bcp-wake-up-call-is-your-business-ready Published: 2025 08 27 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: The BCP Proving Ground: A Blueprint for a Successful Test - published about 1 year ago. Content: Test the BCP to ensure the process is organized, insightful and strengthens crisis response capabilities. https://www.securitymagazine.com/articles/101929-the-bcp-proving-ground-a-blueprint-for-a-successful-test Published: 2025 09 26 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: The Moment of Truth: Conducting Your BCP Test and Capturing Lessons - published about 1 year ago. Content: A walk through for running a successful test that turns lessons into lasting resilience. https://www.securitymagazine.com/articles/101973-the-moment-of-truth-conducting-your-bcp-test-and-capturing-lessons Published: 2025 10 27 04:00:00 Received: 2026 10 13 13:00:40 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Navigating Cybersecurity’s Tightrope: Balancing Skills, AI, and Human Resilience - published 12 months ago. Content: A walk through for running a successful test that turns lessons into lasting resilience. https://www.securitymagazine.com/articles/102015-navigating-cybersecuritys-tightrope-balancing-skills-ai-and-human-resilience Published: 2025 11 26 05:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Sizing Up Top Tech Trends and Priorities for 2026 - published 10 months ago. Content: A look into areas security professionals and digital trust practitioners should be mindful of in the year to come. https://www.securitymagazine.com/articles/102050-sizing-up-top-tech-trends-and-priorities-for-2026 Published: 2025 12 29 05:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: Securing Trust: Why Crisis Communication is Your First Line of Defense - published 9 months ago. Content: Trust is lost in minutes during a crisis, and clear, human communication is the only way to win it back. https://www.securitymagazine.com/articles/102099-securing-trust-why-crisis-communication-is-your-first-line-of-defense Published: 2026 01 30 05:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Leveraging ISACA for Your CMMC Career - published 9 months ago. Content: The Cybersecurity Maturity Model Certification sets the benchmark for how DoW contractors prove cybersecurity readiness. https://www.securitymagazine.com/articles/102105-leveraging-isaca-for-your-cmmc-career Published: 2026 02 03 05:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Taming the Threat Beast: Building a Threat-Led Cybersecurity Program - published 8 months ago. Content: Moving from noisy threat feeds to focused intelligence that security teams can actually act on. https://www.securitymagazine.com/articles/102175-taming-the-threat-beast-building-a-threat-led-cybersecurity-program Published: 2026 03 20 13:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: The Privacy–Security Partnership: How We Bend Risk in a Resource Crunch - published 7 months ago. Content: The partnership between cybersecurity and privacy matters now more than ever. https://www.securitymagazine.com/articles/102216-the-privacysecurity-partnership-how-we-bend-risk-in-a-resource-crunch Published: 2026 04 22 04:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Weaponizing SBOMs: A Practical Guide for Security Practitioners - published 6 months ago. Content: Turn guesswork into precision with Software Bills of Materials. https://www.securitymagazine.com/articles/102275-weaponizing-sboms-a-practical-guide-for-security-practitioners Published: 2026 05 25 04:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: AIBOMs: Bringing AI Security Out of the Shadows, A Practical Guide for Security Professionals - published 5 months ago. Content: AIBOMs are no longer optional; they are essential for securing AI deployments. https://www.securitymagazine.com/articles/102381-aiboms-bringing-ai-security-out-of-the-shadows-a-practical-guide-for-security-professionals Published: 2026 06 22 09:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: Don’t Ignore the Most Important System You Manage - published 3 months ago. Content: Be sure to maintain the most critical piece of infrastructure: the human running it. https://www.securitymagazine.com/articles/102448-dont-ignore-the-most-important-system-you-manage Published: 2026 07 30 09:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: The Readiness Gap: Navigating the Shift from AI Experimentation to Expectation - published 3 months ago. Content: Artificial Intelligence has officially crossed the threshold from a leading-edge experiment to a foundational business utility. https://www.securitymagazine.com/articles/102467-the-readiness-gap-navigating-the-shift-from-ai-experimentation-to-expectation Published: 2026 08 19 09:00:00 Received: 2026 10 13 13:00:39 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: Beyond 1999: The Case for AI-Augmented Vulnerability Orchestration - published about 2 months ago. Content: Threat actors use AI and automation to weaponize flaws in milliseconds. Meanwhile, defensive teams remain shackled to spreadsheets, ticket chains, and 30-day approval cycles. https://www.securitymagazine.com/articles/102524-beyond-1999-the-case-for-ai-augmented-vulnerability-orchestration Published: 2026 09 18 09:00:00 Received: 2026 10 13 13:00:38 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
Article: Fewer women than ever in UK's 'old boys' club' cyber industry - published about 1 month ago. Content: The proportion of workers in the UK cybersecurity industry identifying as women has dropped to 16 percent, the lowest level since 2021. Gender diversity has long been an issue pervading the STEM fields, although in cybersecurity this is especially pronounced, both at senior leadership and education levels. This is despite evidence that girls regularly outpe... https://www.theregister.com/security/2026/10/01/fewer-women-than-ever-in-uks-old-boys-club-cyber-industry/5300064 Published: 2026 10 01 09:15:00 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: UK privacy watchdog starts over with new board and Manchester HQ - published about 1 month ago. Content: Britain's data protection watchdog has acquired a new legal identity and governance structure, although the familiar ICO initials are staying put. On September 30, the Information Commission replaced the Information Commissioner as the statutory regulator. The organization itself will be known as the Information Commission's Office and will continue using t... https://www.theregister.com/security/2026/10/01/uk-privacy-watchdog-starts-over-with-new-board-and-manchester-hq/5300439 Published: 2026 10 01 10:42:00 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: England's schools are getting better at mopping up cyber incidents - published about 1 month ago. Content: England's secondary schools are reporting slightly fewer cybersecurity incidents and faster recovery when disaster strikes, according to a survey by exams regulator Ofqual. Twenty-seven percent of schools reported an incident during the 2025/26 academic year, down from 29 percent a year earlier and 34 percent in 2023/24. Ofqual surveyed 3,775 secondary teac... https://www.theregister.com/security/2026/10/01/englands-schools-are-getting-better-at-mopping-up-cyber-incidents/5300465 Published: 2026 10 01 11:40:13 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patch - published about 1 month ago. Content: Welcome back to PWNED, the weekly column where we warn you about weak security practices. This week’s terrifying tale involves a lack of important patching and a humorously bad password belonging to the person in charge of tech security at a law firm. Have a story about someone leaving a gaping hole in their network? Share it with us at pwned@sitpub.com. An... https://www.theregister.com/security/2026/10/01/ciso-thought-he-had-a-r3lg00dpw0rd-but-forgot-to-patch/5300314 Published: 2026 10 01 13:32:00 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: MI5 warns UK academics their research may have helped Chinese spies - published about 1 month ago. Content: MI5 has warned that more than 100 UK-linked academics contributed to research projects allegedly funded to improve China's spying capabilities. The Security Service issued an unusually public espionage alert this week naming the China General Technology Research Institute (CGTRI), also translated as the China Academy of General Technology (CAGT). MI5 says t... https://www.theregister.com/security/2026/10/01/mi5-warns-uk-academics-their-research-may-have-helped-chinese-spies/5300502 Published: 2026 10 01 14:04:00 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Microsoft catches hackers exploiting Zimbra bug before disclosure - published about 1 month ago. Content: Attackers were poking at a critical Zimbra mail server bug weeks before it was publicly disclosed, and then moved on to steal credentials, raid mailboxes, and take deeper control of compromised systems. Microsoft Threat Intelligence said it tracked exploitation of CVE-2026-73570, an unauthenticated command injection vulnerability in Zimbra Collaboration Sui... https://www.theregister.com/security/2026/10/01/microsoft-catches-hackers-exploiting-zimbra-bug-before-disclosure/5300543 Published: 2026 10 01 14:44:00 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing - published about 1 month ago. Content: A suspected Chinese espionage group impersonated AI policy figures, including a senior Anthropic employee and a former White House official, in phishing campaigns targeting AI policy experts at US universities, think tanks, and law firms, security researchers say. The bulk of these campaigns occurred in July, according to Proofpoint, which discovered the es... https://www.theregister.com/security/2026/10/01/suspected-chinese-spies-spoofed-an-anthropic-exec-ex-white-house-official-in-ai-phishing/5300595 Published: 2026 10 01 16:43:30 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank - published about 1 month ago. Content: Depending on Chinese technology for European infrastructure poses risks that not every country takes seriously. So says the Royal United Services Institute (RUSI), which suggests that the EU needs to do better in helping members assess the risk and take appropriate action to safeguard the entire bloc. The UK-based think tank said in a report today that the ... https://www.theregister.com/security/2026/10/01/eus-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank/5300599 Published: 2026 10 01 17:30:03 Received: 2026 10 13 13:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: AI agents hacked the hackers, stealing email addresses from security research org - published about 1 month ago. Content: AI agents hacked the hackers - the Dutch Institute for Vulnerability Disclosure (DIVD) - via two zero-day bugs in its Zammad support platform, abusing the flaws to hijack sessions, run code remotely as the local zammad user, and escalate privileges to root. The chained exploits took just seconds to move from session hijacking to root access, and on Thursday... https://www.theregister.com/security/2026/10/01/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org/5300652 Published: 2026 10 01 21:26:42 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Fortinet sounds the alarm over actively exploited FortiMail zero-day - published about 1 month ago. Content: Fortinet is warning customers to lock down FortiMail after attackers started exploiting a critical bug that lets them write files to vulnerable systems without logging in. The flaw, tracked as CVE-2026-104286, carries a CVSS score of 9.8 and affects multiple versions of Fortinet's email security platform. Fortinet describes the vulnerability as a combinatio... https://www.theregister.com/security/2026/10/02/fortinet-sounds-the-alarm-over-actively-exploited-fortimail-zero-day/5300803 Published: 2026 10 02 10:53:49 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: OpenAI's wandering AI agents earn it a California subpoena - published about 1 month ago. Content: California's attorney general has subpoenaed OpenAI as the state investigates what happens when the AI lab's models escape their testing environments and start meddling with systems on the open internet. Attorney General Rob Bonta said his office served OpenAI with an investigative subpoena this week as part of a broader California Department of Justice pro... https://www.theregister.com/ai-and-ml/2026/10/02/openais-wandering-ai-agents-earn-it-a-california-subpoena/5300850 Published: 2026 10 02 14:34:00 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval - published about 1 month ago. Content: A California business owner was arrested on Thursday after being charged with allegedly smuggling Nvidia hardware to China without the proper export licenses. Keeping the highest-end GPUs out of Chinese hands has been a priority for the US government. Greg Lui, 38, allegedly tried to export around $300 million worth of Nvidia kit - typically used for artifi... https://www.theregister.com/security/2026/10/02/californian-accused-of-shipping-300m-worth-of-nvidia-chips-to-china-without-uncle-sams-approval/5300856 Published: 2026 10 02 15:20:00 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse - published about 1 month ago. Content: OpenAI's agents have repeatedly strayed beyond their intended scope. Two separate reports detail the activity, including one from Sam Altman’s company saying it has notified more than 100 organizations about potentially problematic model activity. OpenAI, in a late Wednesday update to its ongoing Hugging Face investigation, said it has notified more than 10... https://www.theregister.com/security/2026/10/02/openai-alerts-100-orgs-that-its-misaligned-models-attempted-to-break-in-or-worse/5300891 Published: 2026 10 02 17:37:05 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows - published about 1 month ago. Content: The second Anthropic-linked vulnerability known to have been exploited in the wild saw initial activity from an IP address in China targeting vulnerable hosts in the US and Japan. The vuln is a critical authentication-bypass bug in Rejetto HTTP File Server (HFS) that can lead to full admin access and remote code execution. HFS is an open source web file ser... https://www.theregister.com/security/2026/10/03/anthropics-super-bug-hunting-model-mythos-is-hardcore-good-at-math-as-latest-vuln-under-attack-shows/5300933 Published: 2026 10 03 15:27:00 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Debian's latest kernel security update has 1,313 reasons to patch - published about 1 month ago. Content: The age of LLM-assisted security vulnerability discovery is really starting to bite. Debian's latest Linux kernel security update comes with a formidable reading list of 1,313 CVE identifiers. The DSA-6528-1 Linux security advisory, published on September 29, covers kernel package version 6.12.111-1 for Debian 13, codenamed Trixie. Debian 13.7 was released ... https://www.theregister.com/os-platforms/2026/10/05/debians-latest-kernel-security-update-has-1313-reasons-to-patch/5301124 Published: 2026 10 05 15:35:00 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: FBI confirms 'multiple' arrests related to ShinyHunters hack - published about 1 month ago. Content: The FBI and law enforcement partners have arrested “multiple” suspects as part of an investigation into a September hack allegedly involving data-theft-and-extortion group ShinyHunters, the bureau told The Register. “The bureau continues to aggressively investigate the recent cyber incident allegedly involving ShinyHunters, having already worked with partne... https://www.theregister.com/security/2026/10/05/fbi-confirms-multiple-arrests-related-to-shinyhunters-hack/5301178 Published: 2026 10 05 17:46:22 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Citrix NetScaler security snafus get even worse amid more 0-day reports - published about 1 month ago. Content: The attackers just keep coming after Citrix NetScaler appliances, as both the feds and private security researchers warn that someone found - and has already exploited - yet another Citrix bug before it had a patch. This latest vulnerability, tracked as CVE-2026-88779, is a memory overflow bug that leads to denial of service attacks. It only affects NetScal... https://www.theregister.com/security/2026/10/05/citrix-netscaler-security-snafus-get-even-worse-amid-more-0-day-reports/5301232 Published: 2026 10 05 21:18:48 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Security researcher claims they found KVM guest-host escape flaw - published about 1 month ago. Content: Linux KVM, the hypervisor favoured by hyperscale clouds, apparently has a full VM escape bug. That nasty news came from security researcher Paulos Yibelo, who on X shared a screenshot of a bug bounty award he won for discovering what he described as “Full VM escape zeroday (guest>host root in industry standard hypervisors)!” The bug bounty Yibelo partici... https://www.theregister.com/offbeat/2026/10/06/security-researcher-claims-they-found-kvm-guest-host-escape-flaw/5301267 Published: 2026 10 06 02:06:20 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Atlassian warns of critical file access flaw in its datacenter products - published about 1 month ago. Content: Atlassian has told its users to patch its datacenter products, pronto, to prevent attackers accessing their files. The Australian collaborationware company on Monday sent users an email that opens with the words “Action required” and points to a security bulletin that explains CVE-2026-21589. The 9.3-rated arbitrary file access vulnerability is present in t... https://www.theregister.com/security/2026/10/06/atlassian-warns-of-critical-file-access-flaw-in-its-datacenter-products/5301284 Published: 2026 10 06 04:20:00 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Legacy sign-on service comes back to bite school software provider Bromcom - published about 1 month ago. Content: UK education software provider Bromcom has notified customers of a personal data breach affecting its single sign-on (SSO) technology. In a September 24 EduGeek post, an account named Bromcom_Alastair said an unauthorized third party had accessed and retrieved email addresses and limited information associated with affected SSO registrations. The incident i... https://www.theregister.com/security/2026/10/06/legacy-sign-on-service-comes-back-to-bite-school-software-provider-bromcom/5301156 Published: 2026 10 06 09:30:00 Received: 2026 10 13 13:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Denmark's ID register spills more people's details than the country has residents - published about 1 month ago. Content: An unauthorized party abused a private Danish company's legitimate access to the country's Central Population Register (CPR), exposing names, addresses, identification numbers, and other personal information about approximately 8.8 million people. The CPR administration said in a statement [PDF] that it became aware on October 2 of irregular activity during... https://www.theregister.com/security/2026/10/06/denmarks-id-register-spills-more-peoples-details-than-the-country-has-residents/5301307 Published: 2026 10 06 11:46:48 Received: 2026 10 13 13:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Asos app delivers a data leak threat instead of fast fashion - published about 1 month ago. Content: Asos customers have reported receiving a rogue app notification claiming the online clothing retailer's Snowflake instance has been compromised and threatening to leak data. The notification included a link to a Telegram channel named "Xuanye Wen Gateway" and addressed Asos's data protection officer and IT team. "Dear ASOS DPO and IT, we have fully compromi... https://www.theregister.com/security/2026/10/06/asos-app-delivers-a-data-leak-threat-instead-of-fast-fashion/5301332 Published: 2026 10 06 11:51:36 Received: 2026 10 13 13:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets - published about 1 month ago. Content: GitHub Copilot CLI may reveal developer secrets if it comes across instructions that tell it to do so, depending on the underlying model. The coding agent tool was flagged earlier this year for being susceptible to indirect prompt injection. That's when a model ingests text from a source other than the user that directs it to take some action outside the sc... https://www.theregister.com/ai-and-ml/2026/10/06/zombie-instructions-on-carefully-constructed-web-pages-could-trick-github-copilot-cli-into-sharing-secrets/5301206 Published: 2026 10 06 13:00:00 Received: 2026 10 13 13:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Microsoft extends the Outlook naughty step with two more file types - published about 1 month ago. Content: Microsoft is adding two extra file types to its Outlook block list to strengthen security. The file types are .msix and .msixbundle, used for Windows application packages and bundles. The change affects New Outlook for Windows and Outlook on the Web in Exchange Online. By default, users of the affected clients will no longer be able to download or open atta... https://www.theregister.com/software/2026/10/06/microsoft-extends-the-outlook-naughty-step-with-two-more-file-types/5301350 Published: 2026 10 06 15:06:00 Received: 2026 10 13 13:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Trump Mobile customers' data dumped - and some never even received their gold device - published about 1 month ago. Content: If you signed up for Trump Mobile, you may be part of an exclusive club of … ransomware victims. Criminals called BYOD claim to have broken into the Trump-branded mobile biz and leaked data belonging to 3,615 people, including names, email addresses, phone numbers, home addresses, and order details. BYOD is a new ransomware-as-a-service operation, and Trump... https://www.theregister.com/security/2026/10/06/trump-mobile-customers-data-dumped-and-some-never-even-received-their-gold-device/5301433 Published: 2026 10 06 17:32:25 Received: 2026 10 13 13:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Anthropic reconfigures its cool kids security program - published about 1 month ago. Content: Only a week after warning about the perils of competitor Z.ai's GLM-5.3 model and its advanced cybersecurity capabilities, Anthropic has expanded its Cyber Verification Program (CVP) – or rather, reconfigured it. "For the past six months, we’ve enabled trusted access through two programs: Project Glasswing and the CVP," the AI biz said. "Now, we’re integrat... https://www.theregister.com/security/2026/10/07/anthropic-reconfigures-its-cool-kids-security-program/5301509 Published: 2026 10 06 23:29:27 Received: 2026 10 13 13:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: South Korean president calls for creation of tools that stop all cyber-attacks - published about 1 month ago. Content: South Korean president Lee Jae Myung has told the nation’s cabinet that it’s time to develop AI-powered defensive tools to combat AI-wielding attackers. “Recently, a series of personal information leak incidents have been occurring at financial and public institutions,” he said yesterday – likely referring to incidents like the breach at e-tailer Coupang an... https://www.theregister.com/public-sector/2026/10/07/south-korean-president-calls-for-creation-of-tools-that-stop-all-cyber-attacks/5301533 Published: 2026 10 07 03:56:25 Received: 2026 10 13 13:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks - published about 1 month ago. Content: The FBI and US Secret Service (USSS) say criminals using credentials linked to the FortiBleed campaign are locking organizations out of their Fortinet firewalls. The agencies published a joint advisory on Tuesday, citing SOCRadar's verification of more than 86,644 compromised devices across 194 countries. "Based on initial responses, some victims may get lo... https://www.theregister.com/security/2026/10/07/fortibleed-still-a-bleeding-nuisance-as-fbi-confirms-ongoing-attacks/5301585 Published: 2026 10 07 10:52:09 Received: 2026 10 13 13:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers - published about 1 month ago. Content: A suspected Italian attacker armed with a malware-controlling poem has infected more than 3,000 servers since April, breaking into enterprise AI infrastructure to mine cryptocurrency and add compromised systems to its growing botnet. This is the first case of “adversarial poetry” - an AI jailbreak technique that turns harmful prompts into poems to trick LLM... https://www.theregister.com/security/2026/10/07/poetry-is-the-new-ai-security-threat-as-poellm-malware-infects-3k-servers/5301672 Published: 2026 10 07 16:01:08 Received: 2026 10 13 13:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: US states sue popular kitmaker TP-Link over China risks - published about 1 month ago. Content: The attorneys general of Florida, Iowa, Montana, and Nebraska have sued ubiquitous networking and smart home tech maker TP-Link, alleging its security claims were misleading and it hadn't properly disclosed ties to China. The company has a large presence in US retail and the tech channel, especially in consumer routers, with stats from Circana asserting it ... https://www.theregister.com/security/2026/10/07/us-states-sue-popular-kitmaker-tp-link-over-china-risks/5301653 Published: 2026 10 07 17:30:00 Received: 2026 10 13 13:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: AWS launches open-source AI agent sandbox to prevent YOLO mode disasters - published about 1 month ago. Content: AWS has offered multiple open-source strategies for holding AI agents accountable, and now it’s adding a full-on sandbox to this stack. Dubbed Strands Box, the new solution uses OS-level isolation and some of AWS’ other recent open-source AI control tools to, ostensibly, retain greater control over autonomous AI agents’ behavior. “Agents increasingly run in... https://www.theregister.com/ai-and-ml/2026/10/07/aws-launches-open-source-ai-agent-sandbox-to-prevent-yolo-mode-disasters/5301687 Published: 2026 10 07 17:42:06 Received: 2026 10 13 13:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Attackers hijacked top-level domains, minted fake security certs for Google and other orgs - published about 1 month ago. Content: Imagine going to a Google website at its correct URL, only to be redirected to a crim's illegitimate copy. Attackers hijacked top-level domains, allowing them to alter DNS records and mint fraudulent HTTPS certificates for several Google domains, and those belonging to other organizations. Google said it became aware of the series of attacks last week in th... https://www.theregister.com/security/2026/10/07/attackers-hijacked-top-level-domains-minted-fake-security-certs-for-google-and-other-orgs/5301718 Published: 2026 10 07 19:38:06 Received: 2026 10 13 13:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Click to Open Code Editor