Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released
Attackers appear to have reverse-engineered Big Red's patch [...]
Showing only posts by The Register. Show all posts.
Hackers shoveled snow for company, were rewarded with network admin access
Fortunately, they were professional red teamers. Unfortunately, they pwned the network [...]
EvilTokens device-code phishing kit totally more evil than we all thought
It's a 'complete BEC operations environment,' Talos researcher says [...]
Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy
Safer, cheaper, and nothing to do with cybersecurity [...]
Somebody told DeepSeek to build in-browser ransomware and it gleefully complied
'The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,' Check Point researcher tells The Reg [...]
Red teamers turned Claude Desktop into a double agent to do their evil bidding
People trust their AI assistants and it's easy to abuse this trust [...]
Infosec professionals sour on automated pentesting tools
29% of security pros were open to fully autonomous pentesting last year; now only 9% are [...]
Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware crim about law enforcement probe
Ex-employee claims this 'meets the definition of an insider threat' [...]
Microsoft builds a bouncer to keep bots out of Teams meetings
Allows ISVs to put their names on the door so desirable bots always get in [...]
India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info
Open API could reveal everything an attacker needs to impersonate bank officials [...]
Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection
If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day [...]
Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe
Not today, Putin [...]
Anonymous researcher drops 0-day 'exploitarium' repo
At least two vulnerabilities are already under attack [...]
AI may be good at finding security vulnerabilities, but it can't beat human stupidity
You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy [...]
Microsoft keeps Windows Server 2022 hotpatching alive into 2027
In the Azure Edition, of course [...]
Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs
Carmaker points finger at an 'unknown' flaw as customer fallout continues [...]
It's looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns
Time to start praying to the goddess of wisdom and war [...]
Even the Secret Service won't use company-issued phones
Personal cell phones on protective missions, no threat detection on government-issued devices among the litany of sins [...]
Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
Researchers warn many AI coding assistants now execute commands from project configurations [...]
Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers [...]
Security boss thought MFA would be too much security
One rule for the workers, another for execs [...]
Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder
Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models [...]
Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs
Spotted in intrusions targeting insurance, education, IT, and professional services sectors [...]
Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues
Former employee accuses company of prioritizing pending IPO over client security [...]
UK school’s network left wide open for invasion, student found
And the admin password was right in the Active Directory description field [...]
« newer articles | page 14 | older articles »