ShinyHunters hacked 100+ orgs by exploiting an Oracle PeopleSoft 0-day
University of Nottingham is first of many, Shiny tells The Reg [...]
Showing only posts by The Register. Show all posts.
Microsoft's worst 'Nightmare' unleashes BitLocker bypass 0-day
Another day, another Windows exploit code [...]
VRChat says somebody faked a breach notice with the Maine AG's office
'We have no reason to believe that our data or systems have been compromised. We are in the process of contacting the Maine Attorney General's office to have this removed.' [...]
Every employee’s password was stored in a single Excel file
The CEO thought this was the best way to deal with some email issues [...]
Chinese agents caught rebuilding botnets and stirring the pot on AI datacenter debate
PRC eyes are watching you [...]
Angry bug hunter with Microsoft beef drops new Windows 0-day
Revenge is a dish best served code [...]
GitHub pulls pin on npm's auto-run scripts
Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors [...]
Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9
Remote, unauthenticated RCE with root privileges is about as bad as it gets [...]
AI is making Patch Tuesday (kinda) fun again
Unless you're an admin or vulnerability manager – then you're totally screwed [...]
Miasma worms its way onto GitHub as attack kit goes open source
As if there weren't enough package poisonings to worry about [...]
Apple’s iOS 27 goes all agentic on compromised passwords, promises to change them with one tap
iBiz might not win the AI race, but analysts say it's focusing on features people may actually use [...]
Signal says UK plan to scan devices for nude images 'endangers us all'
Encrypted messaging app warns device-level checks could be repurposed for censorship [...]
Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year
Google paid researcher a tidy $55K bounty for its discovery [...]
France probes compromise of gov messaging platform after account hijack
Authorities say the breach only exposed public chat rooms, but alleged attacker claims to have accessed far more data [...]
Qilin NHS breach tally grows as Essex trust confirms stolen records
Two years on from ransomware attack, hospitals are still trying to identify and warn patients [...]
Norks blast 250+ fake job offers to developers over 6 weeks to try and snarf creds and crypto
When an unsolicited job offer sounds too good to be true... [...]
Ransomware crims got a month-long head start on Check Point VPN 0-day that now has a fix
Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7 [...]
Ransomware sends Illinois high school on an early summer vacation
Meanwhile, 13 schools in Wales affected by separate attack [...]
GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections
Miasma worm shapeshifts, but cloud secret-scouting remains the goal [...]
NSO Group back in Meta's crosshairs after alleged WhatsApp targeting
Zuckercorp says surveillance-for-hire vendor was still running phishing operations after federal court told it to knock it off [...]
Oxford Uni student data pwned yet again - this time via career platform breach
Totally different attack from the break-in last month. Oh so that's OK then [...]
If you don't fall for these extortionists' calls, they'll show up with USB sticks
When 'Chatty Spider' morphs into tech services cosplay spider [...]
Yet another Cisco SD-WAN 0-day under attack, and no patch in sight
Good luck, sys admins [...]
World Food Programme breach exposes data of 600k vulnerable Gazan families
Those receiving aid in the famine-threatened, war-torn territory told support will remain [...]
Council in UK's City of York outs hundreds of disabled residents with a single email blunder
Blue Badge holders exposed to each other after BCC function proves too complex [...]
« newer articles | page 17 | older articles »