Hospital gave very sick doctor a special PC for his personal, erm, pleasure
Support chap told to either allow blatant policy violations or find a new job
The Register
50 stories · RSS feed for this view
AI agents are a 'bane' for some website operators, says Cloudflare
CEO says sovereigns probably exploited PHP2SHELL ages ago, and suggests containers are dead
Threat actor targets Indian fintechs on weekends when defenders aren’t watching
CERT-IN warns of ‘significant escalation’ in AI-powered attacks, some after victims tried to improve defences
Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up
No documented attacks against American supermarkets…yet
The White House is apparently a popular residential proxy exit spot
How it got there is another matter entirely
Vulnerabilities
Get root on a musl Linux system by slamming it with an overly long password
Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin'
October crypto-tracker hack: Access cracked, law enforcement tokens packed
Agentic 'on-path attack' went after Chainalysis's tools, which are routinely called upon to assist police investigations
OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'
The latest bug hunting model 'avoided exploiting out-of-scope services over 99 percent of the time', claims House of Altman
Tobacco company got smoked by leaving secret recipes on a file share
They denied the data was real...then removed it
Vulnerabilities
Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
From EOP to RCE in six simple steps
Ransomware
New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark
No gang has claimed the attack on incredible neighborhood resource yet
Norway's aid agency pwned and all users' data is stolen
Norad said it cannot be sure that the details of those in 'conflict areas and authoritarian states' are safe or not
Cloud & Identity
Apple turns iCloud into spy cloud, will start looking at public share links
Content shared with anyone who has the URL will be scanned for 'harmful content,' though the iMaker hasn't defined that term
US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
Help desk technician agrees to minimum 10-year jail term after being caught copying files for more than 2 years
Cyberattack on French plasma stores is enough to make your blood boil
Attackers reportedly set cold-room controls to 110°C, but safeguards prevented stock losses
Phishing
North Korean fake job interview led to $6.3B Binance heist
'It was not a single isolated breach or a simple phishing incident,' exchange says
AI policy wonks declare 'sovereign agents' a threat to civilization
These are AI agents that operate outside of human control and 'pursue open-ended, evolving survival'
Password manager mSecure tells users to change passwords, won't say why
Customers left wondering what's been compromised after vendor advises resetting passwords, 2FA and passkeys
Ransomware
Britain on notice: AI-powered ransomware attacks to arrive by 2028
Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap'
Malware
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Your industrial IoT gateway isn't exposed to the internet, right? RIGHT?!
Malware
Cops bust botnet of 1.3M infected Android TV boxes
Videostrong accused of shipping devices with a backdoor baked in
Thieves pilfer environment variables from Trigger AI workflow tool
So, who's ready to clear the dust out of that server closet and move things back on-prem?
Token thieves costing companies $100K+ per day in illicit LLM charges
Don't let the LLMjackers hit you
Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
Within minutes of a ceasefire lifting in Kherson, Ukraine’s citizens were pummelled with threatening notifications
Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again
Let it go (bad): Dozens of stores report mass food wastage as managers start their week in puddles
FBI pins $6.3B Binance crypto heist on North Korean hackers
Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul
GM cracks the petty cash box for multistate driver tracking settlement
$220 million? For all of you? Yeah, we can probably dig that up ...
Supply Chain
Anthropic: That Claude Code extension compromise… couldn't be us
Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor
British intelligence agency misplaced 'thousands' of storage devices, years later still can't say how many
Other agency errors included an unchecked software bug that led to Terrorism Act detentions
