Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours [...]
Showing only posts in The Register. Show all posts.
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall
Misaligned incentives led to an intractable argument [...]
Certification authority eMudhra defends its laughably weak private keys
Says it passed audits and made just a minor mystery error [...]
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg [...]
LiteLLM supply chain attack hoovers up passwords and secrets
Plus a RAT for good measure - get threat hunting now [...]
Signal bug could keep your mic - and camera - on after hangup
Careful what you say after goodbye, or better yet, update your messaging app [...]
PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched
Websites down as precaution as exploits have already been published [...]
AI has 'potential' to turn script kiddies into sophisticated infrastructure attackers
Consider this the wake-up call [...]
Nvidia picks OpenShell to tame AI gents
Give your agents freedom to do useful work by locking them down [...]
EU wants Booking.com to check out of its scam problem
Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses 'absolutely substandard' [...]
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Massive clean-up job under way because this mess makes it possible to impersonate any website or service [...]
Auto tech startup claims it traced hack attempt back to rival's IP address
IQ.Lvbs implies that rival Comma.ai isn't playing fair [...]
Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
Unit 42 investigates network compromises across numerous industries [...]
Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'
From October 26, only high and critical cases stay private as project seeks help sharing the workload [...]
'Password1' and a forgotten test account land Welsh outfits in hot water
ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children [...]
Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft [...]
Whitehall shuts the front door on digital ID but leaves the back open
Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive [...]
UK finance watchdog wants firms to report AI failures and close calls
FCA seeks clear accountability as financial services embrace increasingly autonomous agents [...]
Why cyber resilience is now a boardroom priority for UK public services
PARTNER CONTENT: What happens after the inflection point? [...]
ICANN testing tech to let law enforcement access non-public WHOIS info
Single sign-on to help address imminent threats to life, critical infrastructure, or kids [...]
DeepSeek deep-sixed at all US federal civilian agencies
Order disallowing use of Chinese AI service is unhelpfully vague and broad [...]
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Second security snafu in two years [...]
Security patches need patches now that attackers have AI
Terra finds sharp rise in GitHub security fixes reported broken within 90 days [...]
ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
Huntress alleges takeover of M365 accounts [...]
Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape [...]
« newer articles | page 3 | older articles »