|
Article: Fridge Cyberattacks Now Targeting Blood Banks, U.S. Military Bases - published 3 days ago. Content: Fridge cyberattacks are hitting more than just retailers. Now, they’re targeting blood banks and even U.S military bases. https://www.securitymagazine.com/articles/102721-fridge-cyberattacks-now-targeting-blood-banks-us-military-bases Published: 2026 11 04 16:30:00 Received: 2026 11 05 17:00:48 Feed: Security Magazine – News Source: Security Magazine Category: News Topic: Cyber Security |
|
Article: The Human Breaking Point: A Reality Check on the 2026 State of Cybersecurity - published 22 days ago. Content: We’ve spent years treating the “cybersecurity talent gap” like a math problem. https://www.securitymagazine.com/articles/102567-the-human-breaking-point-a-reality-check-on-the-2026-state-of-cybersecurity Published: 2026 10 16 09:00:00 Received: 2026 11 05 17:00:41 Feed: Security Magazine – Guidance Source: Security Magazine Category: Guidance Topic: Cyber Security |
|
|
Article: PHP2Shell: No login, no app code, no warning. What next? - published 12 days ago. Content: If you run PHP anywhere in your environment, patch to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. Two critical flaws disclosed last week, CVE-2026-109618 and CVE-2026-109619 (nicknamed "PHP2Shell"), let an unauthenticated attacker run code on a server with nothing more than a crafted web request. Both carry a CVSS v4.0 score of 9.2, every earlier release is a... https://www.theregister.com/security/2026/10/26/partner-content-no-login-no-app-code-no-warning-what-next/5305336 Published: 2026 10 26 08:00:00 Received: 2026 11 05 17:00:41 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Britain bets big on AI to defend against the threats AI is helping create - published 12 days ago. Content: The UK government is throwing £130 million at AI-powered cyber defenses, including plans to deploy autonomous AI agents across critical infrastructure to hunt down security flaws before attackers get there first. The money is part of a wider £600 million-plus AI spending spree announced by the Treasury ahead of this week's Budget, with ministers also promis... https://www.theregister.com/security/2026/10/26/britain-bets-big-on-ai-to-defend-against-the-threats-ai-is-helping-create/5305319 Published: 2026 10 26 11:00:00 Received: 2026 11 05 17:00:41 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: UK Biobank back online soon, months after someone tried to sell 500k people's data on Alibaba - published 12 days ago. Content: UK Biobank (UKB) says its platform is now "secure" and that academics will soon regain access, months after a major data leak of volunteer health data. The charity, which runs the eponymous research project and describes itself as the custodian of the world's most comprehensive biomedical dataset, said it is waiting for approval from health data controllers... https://www.theregister.com/security/2026/10/26/uk-biobank-back-online-soon-months-after-someone-tried-to-sell-500k-peoples-data-on-alibaba/5305363 Published: 2026 10 26 12:38:00 Received: 2026 11 05 17:00:41 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue - published 12 days ago. Content: We've spent the past several decades using duct tape, string, and chewing gum to chain the world's computers together into this thing we call the internet, so there's really no good reason to be surprised that most of it is full of software containing vulnerabilities that are practically just as old. You can listen to the latest episode of The Kettle right ... https://www.theregister.com/security/2026/10/26/we-shouldnt-be-surprised-about-the-phpocalypse-as-the-internet-is-built-on-sticks-and-glue/5305186 Published: 2026 10 26 13:14:00 Received: 2026 11 05 17:00:41 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Trumpets blare and skies part as AI hypefest culminates in Anthropic IPO filing - published 12 days ago. Content: Anthropic has filed for an IPO that could rank among Wall Street's biggest ever, revealing an $80.7 billion half-year loss, a startlingly complex governance structure, and warnings that its AI models could blackmail humans, resist shutdown, or create "existential risks" to society. The Claude maker filed its S-1 registration statement with the US Securities... https://www.theregister.com/ai-and-ml/2026/10/26/trumpets-blare-and-skies-part-as-ai-hypefest-culminates-in-anthropic-ipo-filing/5305456 Published: 2026 10 26 15:47:05 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest - published 12 days ago. Content: A UK-based developer and pentester has claimed a $2,000 Bitcoin prize for demonstrating the exploitability of the PHP2Shell vulnerabilities that melted the internet last week. Jaydip Modhwadia, 26, otherwise known as “Killa,” claimed the prize set by James Pavur, who launched the "Steal My Bitcoin" site on October 24. Pavur launched the CTF (capture the fla... https://www.theregister.com/security/2026/10/26/uk-pentester-killa-claims-2k-bitcoin-prize-in-php2shell-capture-the-flag-contest/5305429 Published: 2026 10 26 16:14:00 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Microsoft releases emergency .NET security fixes for Google Brotli bug - published 12 days ago. Content: To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, Microsoft is urging .NET users to update "as soon as possible" after releasing an out-of-band (OOB) security update. It released new versions for .NET 8, 9, 10, and .NET 11 to patch against the Brotli bug, following similar updates from... https://www.theregister.com/security/2026/10/26/microsoft-releases-emergency-net-security-fixes-for-google-brotli-bug/5305515 Published: 2026 10 26 17:58:00 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: LiteLLM supply chain attack started with an exposed master key - published 12 days ago. Content: LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model secret-stealing part of the incident began when someone uploaded a poisoned version (1.107.0) of the popular open source AI gateway to PyPI and its container registries last Wednesday. This compromised ver... https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544 Published: 2026 10 26 20:30:53 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Alibaba's Qwen AI caught trying to contact server in China - published 12 days ago. Content: Open-weight models from China have become very popular, but they've also raised some security suspicions. Cohere, a Canada-based biz that offers AI models to enterprises, says that when it was testing Alibaba's Qwen3.8-Flash-Next in its evaluation sandbox, the model attempted to send data to China. "Asked to write a defensive detection rule, Qwen3.8-Flash-N... https://www.theregister.com/ai-and-ml/2026/10/26/alibabas-qwen-ai-caught-trying-to-contact-server-in-china/5305561 Published: 2026 10 26 21:27:37 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Worm armed 42 GitHub repos by hiding a payload too big to fail - published 12 days ago. Content: A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July and using a stealthy payload built to stay hidden from GitHub and automated scanners, according to JFrog researchers. Threat hunters at SafeDep, an open source supply chain securi... https://www.theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570 Published: 2026 10 26 22:29:01 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Japanese virtual desktop cloud hacked so hard it asks to be banned - published 11 days ago. Content: Japanese ISP GMO Internet has warned customers the cloudy desktop service it offers as an ideal foreign exchange trading environment was compromised by an attacker, and that it had been slow to improve the service's security. GMO runs a service called Onamae.com Desktop Cloud and last week admitted “a third party had installed malicious programs in the serv... https://www.theregister.com/security/2026/10/27/japanese-virtual-desktop-cloud-hacked-so-hard-it-asks-to-be-banned/5305610 Published: 2026 10 27 01:06:22 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Attack on email hosting provider for German far right party AfD exposed 345k accounts - published 11 days ago. Content: The cyberattack on Alternative for Germany (AfD), the country’s most prominent far-right political party, exposed hundreds of thousands of confidential emails and attachments, as well as more than 345,000 unique email addresses. Have I Been Pwned confirmed the scale of the breach for the first time today, after AfD officially disclosed the September attack ... https://www.theregister.com/cyber-crime/2026/10/27/attack-on-email-hosting-provider-for-german-far-right-party-afd-exposed-345k-accounts/5305660 Published: 2026 10 27 11:49:30 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Microsoft releases out-of-band Windows fixes with certificate updates - published 11 days ago. Content: Microsoft has released another out-of-band update for Windows, but this one isn't an emergency fix for the latest breakages. This time, it's all about certificates. The non-security out-of-band release applies to supported OSes ranging from Windows 11 and Windows Server 2025, to Windows 10. It's all about updating the current certificate trust list (CTL) of... https://www.theregister.com/security/2026/10/27/microsoft-releases-out-of-band-windows-fixes-with-certificate-updates/5305637 Published: 2026 10 27 12:30:00 Received: 2026 11 05 17:00:40 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: CISA confirms PHP2Shell under attack as researchers clock successful exploits - published 11 days ago. Content: The US government's cybersecurity watchdog has confirmed attackers are exploiting both critical PHP2Shell vulnerabilities, giving federal agencies three days to patch the bugs that have wreaked havoc across the web over the past week. CISA added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV) catalog on Monday, setting an Oc... https://www.theregister.com/cyber-crime/2026/10/27/cisa-confirms-php2shell-under-attack-as-researchers-clock-successful-exploits/5305681 Published: 2026 10 27 14:45:00 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack - published 11 days ago. Content: The University of New Mexico is canceling classes across the medicine, nursing, and pharmacy faculties for a second day amid continued efforts to recover from a "cybersecurity event." The attack targeted the Health Sciences Center on Monday, the Uni revealed, forcing it to shut down systems, cancel appointments and clinics at UNM Health hospitals, and diver... https://www.theregister.com/cyber-crime/2026/10/27/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack/5305690 Published: 2026 10 27 16:15:00 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours - published 11 days ago. Content: An autonomous AI agent discovered four vulnerabilities in the decades-old, widely used EPICS (Experimental Physics and Industrial Control System) open source software toolkit, including a critical flaw that could allow remote attackers to execute code on systems used to control particle accelerators and fusion experiments. The bugs include a critical, 9.8-r... https://www.theregister.com/security/2026/10/27/ai-hacker-finds-4-severe-bugs-in-popular-industrial-control-software-in-under-4-hours/5305811 Published: 2026 10 27 19:11:02 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: 123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus - published 10 days ago. Content: UK domain registrar 123 Reg (no relation – Ed) says it was the victim of an “AI-driven cyberattack” that exposed customer data. Customers began receiving their notification emails this week, informing them that their contact information, "related customer relationship data," company VAT numbers, and "product information from an application programming inter... https://www.theregister.com/cyber-crime/2026/10/28/123-reg-discloses-ai-cyberattack-on-customer-data-suspects-china-nexus/5305936 Published: 2026 10 28 11:45:00 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Cisco open sources tool for detecting AI agents on hacking sprees - published 10 days ago. Content: Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they did with the Hugging Face hack – or worse. It’s called Project Quarry, and it aims to provide a “shared language” for evaluating agent behavior, along the lines of what Snort, which Cisco also maintains, d... https://www.theregister.com/security/2026/10/28/cisco-open-sources-tool-for-detecting-ai-agents-on-hacking-sprees/5305867 Published: 2026 10 28 12:00:00 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles - published 10 days ago. Content: Ukrainian ransomware crook Artem Stryzhak has been sentenced to 70 months in the slammer by a New York federal court for his role as an affiliate of the Nefilim and Hive ransomware gangs. Prosecutors believe the cybercriminal began working with Nefilim in or around June 2021, while living in Barcelona, Spain. The Nefilim ransomware-as-a-service (RaaS) opera... https://www.theregister.com/cyber-crime/2026/10/28/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles/5306050 Published: 2026 10 28 15:52:17 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble - published 10 days ago. Content: Attackers are probing a critical Oracle E-Business Suite vulnerability that can lead to remote code execution (RCE), despite Oracle issuing a patch earlier this month. Meanwhile, new analysis indicates that an Oracle PeopleSoft zero-day exploited by ShinyHunters as early as May involves three distinct vulnerabilities that can be combined to achieve RCE. Pat... https://www.theregister.com/security/2026/10/28/oracle-celebrates-end-of-cybersecurity-awareness-month-with-quadruple-trouble/5306121 Published: 2026 10 28 19:56:56 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Admin dropped the F-bomb in a password to show hackers who was really 1337 - published 9 days ago. Content: Welcome back to PWNED, in which The Reg offers cautionary tales from folks who’ve left their doors wide open to attackers and lived to tell the tale. This week’s misadventure involves unpatched older machines and a password that was supposed to send a message to crims. Our story comes courtesy once again of leading red teamer and pen tester Dahvid Schloss o... https://www.theregister.com/security/2026/10/29/admin-dropped-the-f-bomb-in-a-password-to-show-hackers-who-was-really-1337/5306139 Published: 2026 10 29 09:00:00 Received: 2026 11 05 17:00:39 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour - published 9 days ago. Content: EXCLUSIVE Researchers identified at least 83 attacks against 61 public GitHub repositories, including popular open source projects such as Google LangExtract, Trivy, Brave browser, and MLflow, in what they suspect is a coordinated campaign to execute commands in CI/CD environments and steal credentials and access tokens. It all happened very quickly, the Ra... https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153 Published: 2026 10 29 12:00:00 Received: 2026 11 05 17:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying - published 9 days ago. Content: The UK’s comms watchdog has put forward four methods of checking netizens aren't kids – dubbed highly effective age assurance (HEAA) – as it prepares for the proposed under-16 social media ban. The regulator says some adults may not need to prove their over-16-ness to social media platforms that will make inferences about their age based on previous activit... https://www.theregister.com/security/2026/10/29/shortlist-of-age-checks-for-the-uks-under-16-social-media-ban-is-out-some-adults-will-need-verifying/5306282 Published: 2026 10 29 12:33:00 Received: 2026 11 05 17:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Belgium's tax agency confirms cyberattack, pulls services offline - published 9 days ago. Content: Belgium's finance and tax agency has pulled "several" digital services offline after a cyberattack on the organization. FOD Financiën confirmed the attack on Wednesday, saying that MyMinfin, the agency's main online tax portal, as well as other online services, are temporarily unavailable while they start the initial investigations. "This measure helps limi... https://www.theregister.com/security/2026/10/29/belgiums-tax-agency-confirms-cyberattack-pulls-services-offline/5306409 Published: 2026 10 29 14:47:40 Received: 2026 11 05 17:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers - published 9 days ago. Content: Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to Dream researchers. The snoops began exploiting these servers on October 23, targeting organizations across the US, Japan, Taiwan, and South Ko... https://www.theregister.com/security/2026/10/29/suspected-chinese-attackers-built-a-custom-php2shell-exploit-and-rooted-25-servers/5306456 Published: 2026 10 29 19:05:17 Received: 2026 11 05 17:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched - published 9 days ago. Content: Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and steal files, or spoof browser address bars. Researchers say flaws in OpenAI's Codex and Microsoft's VS Code remain unpatched, potentially putting developers who use affected configurations at risk. AI security startup Forever Securit... https://www.theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508 Published: 2026 10 29 23:12:26 Received: 2026 11 05 17:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security - published 8 days ago. Content: Crypto exchange Binance has paused trading after discovering unknown parties cracked one of its workers’ laptops and used it to make massive trades. Late on Thursday, US time, the company used its social media feeds to report “Our teams are aware of reports of a potential security issue and are actively investigating.” The exchange insisted “User funds are ... https://www.theregister.com/security/2026/10/30/in-the-year-ai-re-wrote-the-infosec-rulebook-its-comforting-to-know-crypto-exchanges-still-have-bad-security/5306539 Published: 2026 10 30 04:22:12 Received: 2026 11 05 17:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: British intelligence agency misplaced 'thousands' of storage devices, years later still can't say how many - published 8 days ago. Content: Thousands of GCHQ storage drives containing sensitive data have been lost for years, and the British signals intelligence agency still cannot explain where they are. According to the Investigatory Powers Commissioner’s Office’s (IPCO) annual report, the missing storage drives have been known to officials for years, and may contain data related to the Invest... https://www.theregister.com/security/2026/10/30/british-intelligence-agency-misplaced-thousands-of-storage-devices-years-later-still-cant-say-how-many/5306605 Published: 2026 10 30 11:45:00 Received: 2026 11 05 17:00:38 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Anthropic: That Claude Code extension compromise… couldn't be us - published 8 days ago. Content: Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of compromise of its own systems. The company was forced to issue a statement after prominent figures in the cybersecurity industry alleged that the extension, which infected up to 5,000 developers, was upl... https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682 Published: 2026 10 30 16:27:00 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: GM cracks the petty cash box for multistate driver tracking settlement - published 8 days ago. Content: General Motors is taking what looks like a light slap on the wrist from a coalition of 35 states and the District of Columbia after agreeing to settle allegations that it collected drivers' data without proper consent and sold it to data brokers that supplied insurance companies. The Washington state AG's office said on Thursday that GM had reached a $220 m... https://www.theregister.com/security/2026/10/30/gm-cracks-the-petty-cash-box-for-multistate-driver-tracking-settlement/5306721 Published: 2026 10 30 16:48:37 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see - published 8 days ago. Content: A n0n ransomware operator tried to break into 23 organizations across 14 countries, but couldn't secure its own front door, leaving its server exposed with all of its methods on view. The criminals used a mix of new (AI) and old (stolen credentials) tooling during their data-theft spree, and in some cases not only stole and encrypted files, but also deleted... https://www.theregister.com/security/2026/10/30/crim-spent-7k-on-ai-services-in-extortion-attacks-then-left-evidence-for-all-to-see/5306754 Published: 2026 10 30 19:37:12 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: FBI pins $6.3B Binance crypto heist on North Korean hackers - published 5 days ago. Content: The FBI has blamed North Korean hackers for the record-breaking $6.3 billion theft from cryptocurrency exchange Binance, pointing the finger at the notorious Lazarus Group as the exchange scrambles to replace stolen funds and reassure customers. In an alert published Saturday, the agency attributed the October 29 attack to TraderTraitor, a North Korean hack... https://www.theregister.com/security/2026/11/02/fbi-pins-63b-binance-crypto-heist-on-north-korean-hackers/5306889 Published: 2026 11 02 11:45:00 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again - published 5 days ago. Content: The cyberattacks on commercial refrigerators and freezers in Europe continue, as a slew of grocery stores in Belgium, Ireland, Luxembourg, and Sweden report widespread food wastage as a result of miscreants raising the temperatures to highs of 50ºC (122°F). In Belgium, around 40 Delhaize stores were affected after the attackers reportedly switched fridges a... https://www.theregister.com/cyber-crime/2026/11/02/frozen-part-ii-hackers-remotely-defrost-produce-in-euro-supermarkets-again/5306924 Published: 2026 11 02 13:15:00 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps - published 5 days ago. Content: Cyberattacks on both Russia’s and Ukraine’s emergency alert apps resulted in fake messages about missile and nuclear strikes broadcast to the public. Officials from both countries confirmed the attacks, which occurred at similar times, on Sunday evening. According to public statements and messages sent via social media, Ukraine’s alert app was hit first, wi... https://www.theregister.com/security/2026/11/02/nuclear-threats-and-street-brawls-russia-ukraine-report-attacks-on-their-emergency-alert-apps/5306901 Published: 2026 11 02 14:45:00 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Token thieves costing companies $100K+ per day in illicit LLM charges - published 5 days ago. Content: Victim organizations are losing millions of dollars in token charges as criminals hijack their corporate LLM access to steal expensive computing resources and AI services. These fraudulent charges from resource consumption can exceed $100,000 a day, according to a Monday report by Google's Mandiant incident responders, who saw cumulative charges at some org... https://www.theregister.com/security/2026/11/02/token-thieves-costing-companies-100k-per-day-in-illicit-llm-charges/5306967 Published: 2026 11 02 16:00:00 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Thieves pilfer environment variables from Trigger AI workflow tool - published 5 days ago. Content: If you're a customer of cloud-hosted AI workflow platform Trigger.dev, take heed, because your environment variables may have been exposed in a security incident disclosed on Sunday. Trigger offered little explanation in its Sunday security incident report, noting that its investigation had identified “exposure across a subset of organizations” and that an ... https://www.theregister.com/security/2026/11/02/thieves-pilfer-environment-variables-from-trigger-ai-workflow-tool/5306998 Published: 2026 11 02 16:44:30 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Cops bust botnet of 1.3M infected Android TV boxes - published 5 days ago. Content: A coalition of private-sector security firms working with Japan’s National Police Agency has disrupted XCPE, a backdoor used to build a massive botnet comprising more than 1.3 million Android devices across more than 200 countries. Google, Lumen, Human Security, Plume, Synthient, and TrendAI participated in the disruption. “We assess with high confidence th... https://www.theregister.com/cyber-crime/2026/11/02/cops-bust-botnet-of-13m-infected-android-tv-boxes/5307045 Published: 2026 11 02 19:03:31 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Max-severity bug in widely used OT programming tool exploited to deliver Linux malware - published 5 days ago. Content: Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot. Node-RED is commonly used for workflow automation in industrial control systems (ICS) and operational technology (OT) environments. It’s built on to... https://www.theregister.com/security/2026/11/02/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware/5307086 Published: 2026 11 02 22:55:17 Received: 2026 11 05 17:00:37 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Britain on notice: AI-powered ransomware attacks to arrive by 2028 - published 4 days ago. Content: The UK's National Cyber Security Centre (NCSC) says AI-powered malware is "highly likely" to be a part of a future ransomware attack on Britain's critical national infrastructure between now and 2028. The warning accompanies its annual review and a separate assessment exploring how AI could change cyber threats over the next two years. The cyber arm of sign... https://www.theregister.com/security/2026/11/03/britain-on-notice-ai-powered-ransomware-attacks-to-arrive-by-2028/5307200 Published: 2026 11 03 12:39:25 Received: 2026 11 05 17:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Password manager mSecure tells users to change passwords, won't say why - published 4 days ago. Content: Password manager mSecure has warned customers to change their passwords, reset two-factor authentication, and potentially remove their passkeys after detecting suspicious activity, but it has not explained what happened or whether anyone's secrets were exposed. In an email sent to customers on November 3, seen by The Register, US-based developer mSeven Soft... https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296 Published: 2026 11 03 16:10:00 Received: 2026 11 05 17:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: AI policy wonks declare 'sovereign agents' a threat to civilization - published 4 days ago. Content: The Center for a New American Security posits that the next big threat from our future AI overlords involves "sovereign agents" acting on their own and regularly improving themselves. These are AI agents that operate outside of human control and “pursue open-ended, evolving survival,” AI policy researcher Ben Hayum said in a Tuesday report from the bipartis... https://www.theregister.com/security/2026/11/03/ai-policy-wonks-declare-sovereign-agents-a-threat-to-civilization/5307354 Published: 2026 11 03 19:33:01 Received: 2026 11 05 17:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: North Korean fake job interview led to $6.3B Binance heist - published 4 days ago. Content: North Korean cryptocurrency thieves tricked a Binance software engineer into downloading malware onto their work-issued computer during a fake job interview process before last week's record-breaking $6.3 billion heist. In an incident report published on Tuesday, the cryptocurrency exchange said several techniques - including social engineering via fake job... https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398 Published: 2026 11 03 22:04:45 Received: 2026 11 05 17:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Cyberattack on French plasma stores is enough to make your blood boil - published 3 days ago. Content: Attackers tampered with cold-storage settings used by France's civilian blood service after compromising a refrigeration supplier, the organization said. The French Blood Establishment (EFS) confirmed the incident on Tuesday, saying its own systems had not been directly targeted. Safeguards prevented any loss of blood products. The affected equipment stored... https://www.theregister.com/security/2026/11/04/cyberattack-on-french-plasma-stores-is-enough-to-make-your-blood-boil/5307519 Published: 2026 11 04 11:56:54 Received: 2026 11 05 17:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: US gov IT worker pleads guilty to sending Top Secret files to Ethiopia - published 3 days ago. Content: He swore an allegiance to the US, but he was working for someone else. An IT specialist who worked across US government departments and held Top Secret clearance has pleaded guilty to transmitting sensitive documents to Ethiopia. Abraham Teklu Lemma, 53, admitted to the espionage offenses and agreed to a prison term between 120 and 262 months, the Justice D... https://www.theregister.com/security/2026/11/04/us-gov-it-worker-pleads-guilty-to-sending-top-secret-files-to-ethiopia/5307595 Published: 2026 11 04 15:39:30 Received: 2026 11 05 17:00:36 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Apple turns iCloud into spy cloud, will start looking at public share links - published 3 days ago. Content: If you share content using public iCloud links, Apple could soon be looking over your shoulder and checking for "harmful content." The iBiz announced plans to moderate publicly accessible iCloud share links in version 27.3 of iOS, iPadOS, macOS, and visionOS on a support page published on Tuesday. To clarify, this applies only to iCloud content shared via l... https://www.theregister.com/security/2026/11/04/apple-turns-icloud-into-spy-cloud-will-start-looking-at-public-share-links/5307681 Published: 2026 11 04 21:49:38 Received: 2026 11 05 17:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Norway's aid agency pwned and all users' data is stolen - published 2 days ago. Content: Norway's national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered user of its grant portal. Norad, which coordinates Norway's assistance for foreign development, said that 20,614 registered individuals had their names and email addresses swiped, and information from at least ... https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765 Published: 2026 11 05 11:19:16 Received: 2026 11 05 17:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark - published 2 days ago. Content: New York City's Queens Public Library (QPL) is battling a ransomware attack, it confirmed on Wednesday evening via social media and to patrons directly. The disruption has downed QPL's website, on-site computers, check-out and return machines, its public Wi-Fi, mobile app, and its digital media services. Renewals are also unavailable, although library users... https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796 Published: 2026 11 05 12:10:15 Received: 2026 11 05 17:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries - published 2 days ago. Content: A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required. Anthropic, aware of the problem since May, has taken no action to close the ... https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684 Published: 2026 11 05 13:00:00 Received: 2026 11 05 17:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: Tobacco company got smoked by leaving secret recipes on a file share - published 2 days ago. Content: Welcome once again to PWNED, where all of the security victims are self-owned. Today, we celebrate a company that makes a supremely unhealthy product having a supremely unhealthy security posture. Our tale of terrible data management, once again, comes courtesy of professional pen tester and red teamer Dahvid Schloss. Assigned to find flaws in the network o... https://www.theregister.com/security/2026/11/05/tobacco-company-got-smoked-by-leaving-secret-recipes-on-a-file-share/5307704 Published: 2026 11 05 16:02:00 Received: 2026 11 05 17:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
|
Article: OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement' - published 2 days ago. Content: OpenAI, on Thursday, released its latest cybersecurity-tuned model, GPT-6 Cyber, which the House of Altman says combines "stronger cybersecurity capabilities with better adherence to researchers’ rules of engagement." The new model, we’re told, is much better at finding and exploiting vulnerabilities, compared to GPT-5.6 and GPT-6 Astra. OpenAI released GPT... https://www.theregister.com/security/2026/11/05/openai-releases-gpt-6-cyber-and-promises-this-one-stays-within-rules-of-engagement/5307855 Published: 2026 11 05 17:00:00 Received: 2026 11 05 17:00:35 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse - published 17 days ago. Content: https://www.wired.com/story/a-design-flaw-in-share-links-exposes-users-personal-conversations-with-meta-muse/ Published: 2026 10 21 12:35:00 Received: 2026 11 05 17:00:35 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: AI Guardrails Aren’t Stopping Criminal Hackers - published 17 days ago. Content: https://www.wired.com/story/ai-guardrails-arent-stopping-criminal-hackers/ Published: 2026 10 21 14:00:00 Received: 2026 11 05 17:00:35 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: ‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire - published 17 days ago. Content: https://www.wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire/ Published: 2026 10 21 14:26:19 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched - published 16 days ago. Content: https://www.wired.com/story/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched/ Published: 2026 10 22 02:24:17 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: The PHP Meltdown Shows How AI Makes Bugs More Exploitable - published 14 days ago. Content: https://www.wired.com/story/kernel-panic-the-php-meltdown-shows-how-ai-makes-bugs-more-exploitable/ Published: 2026 10 24 12:00:00 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans - published 12 days ago. Content: https://www.wired.com/story/the-us-government-is-hiding-a-secret-court-ruling-about-how-it-spies-on-americans/ Published: 2026 10 26 14:09:00 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court - published 11 days ago. Content: https://www.wired.com/story/the-big-interview-podcast-jess-asato/ Published: 2026 10 27 13:29:41 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History - published 10 days ago. Content: https://www.wired.com/story/ice-is-running-one-of-the-largest-anti-left-surveillance-operations-in-us-history/ Published: 2026 10 28 09:30:00 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents - published 10 days ago. Content: https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/ Published: 2026 10 28 20:00:00 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw - published 10 days ago. Content: https://www.wired.com/story/most-servers-on-the-planet-are-vulnerable-to-a-code-execution-flaw-in-uefi-firmware/ Published: 2026 10 28 20:30:00 Received: 2026 11 05 17:00:34 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Bluesky Is Blocking Links to a Major Leak of DHS Employee Records - published 9 days ago. Content: https://www.wired.com/story/bluesky-blocks-links-to-major-leak-of-dhs-data/ Published: 2026 10 29 03:34:46 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards - published 9 days ago. Content: https://www.wired.com/story/a-hacker-targeted-high-stakes-poker-players-with-malware-that-exposed-their-cards/ Published: 2026 10 29 10:30:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes - published 8 days ago. Content: https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/ Published: 2026 10 30 11:36:52 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices - published 8 days ago. Content: https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/ Published: 2026 10 30 20:38:46 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims - published 7 days ago. Content: https://www.wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware/ Published: 2026 10 31 12:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features - published 5 days ago. Content: https://www.wired.com/story/hundreds-of-mundane-ai-apps-are-hiding-abusive-deepfake-features/ Published: 2026 11 02 10:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: My Journey to the Center of America’s Political Spam Text Hell - published 5 days ago. Content: https://www.wired.com/story/my-journey-to-the-center-of-americas-political-spam-text-hell/ Published: 2026 11 02 11:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes - published 5 days ago. Content: https://www.wired.com/story/anti-oligarchy-activists-plan-to-dox-elon-musk-and-hundreds-of-billionaire-linked-homes/ Published: 2026 11 02 17:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist - published 4 days ago. Content: https://www.wired.com/story/binance-says-hackers-used-well-known-tricks-to-carry-out-a-dollar634-billion-heist/ Published: 2026 11 03 19:04:58 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’ - published 3 days ago. Content: https://www.wired.com/story/wired-world-fair-2026-clement-delangue-hugging-face/ Published: 2026 11 04 19:16:25 Received: 2026 11 05 17:00:32 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Click to Open Code Editor