Office workers without AI experience warned to watch for prompt injection attacks – good luck with that Anthropic’s tendency to wave off prompt-injection risks is rearing its head in the company’s new Cowork productivity AI, which suffers from a Files…
Category: The Register – Security
A simple CodeBuild flaw put every AWS environment at risk – and pwned ‘the central nervous system of the cloud’
And it’s ‘not unique to AWS,’ researcher tells The Reg A critical misconfiguration in AWS’s CodeBuild service allowed complete takeover of the cloud provider’s own GitHub repositories and put every AWS environment in the world at risk, according to Wiz…
US regulator tells GM to hit the brakes on customer tracking
Smart Driver pitched as safety app, but feds claim it’s a data-harvesting scheme that jacked up premiums The Federal Trade Commission has banned General Motors and subsidiary OnStar from sharing drivers’ precise location and behavior data with consumer reporting agencies…
Woman bailed as cops probe doctor’s surgery data breach
Suspect assisting West Midlands Police over alleged theft at Walsall GP practice The UK’s West Midlands Police has released a woman on bail as part of an investigation into a data breach at a Walsall general practitioner’s (GP) surgery.… This…
Microsoft taps UK courts to dismantle cybercrime host RedVDS
Redmond says cheap virtual desktops powered a global wave of phishing and fraud Microsoft has taken its cybercrime fight to the UK in its first major civil action outside the US, moving to shut down RedVDS, a virtual desktop service…
Ofcom keeps X under the microscope despite Grok ‘nudify’ fix
Cold milk poured over ‘spicy mode,’ but it might not be enough to escape a huge fine Ofcom is continuing with its investigation into X, despite the social media platform saying it will block Grok from digitally undressing people.… This…
AWS flips switch on Euro cloud as customers fret about digital sovereignty
EU-only ops, German subsidiaries, and a pinky promise your data won’t end up in Uncle Sam’s hands Amid continued trade and geopolitical volatility between Europe and the US, Amazon Web Services is making its European Sovereign Cloud generally available today…
New Linux malware targets the cloud, steals creds, and then vanishes
Cloud-native, 37 plugins … an attacker’s dream A brand-new Linux malware named VoidLink targets victims’ cloud infrastructure with more than 30 plugins that allow attackers to perform a range of illicit activities, from silent reconnaissance and credential theft to lateral…
France fines telcos €42M for sub-par security prior to 24M customer breach
Three major GDPR violations, including a lack of basic security controls, lead to hefty dent in profits The French data protection regulator, CNIL, today issued a collective €42 million ($48.9 million) fine to two French telecom companies for GDPR violations…
‘Imagination the limit’: DeadLock ransomware gang using smart contracts to hide their work
New crooks on the block get crafty with blockchain to evade defenses Researchers at Group-IB say the DeadLock ransomware operation is using blockchain-based anti-detection methods to evade defenders’ attempts to analyze their tradecraft.… This article has been indexed from The…
Eurail passengers taken for a ride as data breach spills passports, bank details
Travel biz tells customers to change passwords beyond its own services Eurail has confirmed customer information was stolen in a data breach, according to notification emails sent out this week.… This article has been indexed from The Register – Security…
Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients
Attack enters second day with major disruption to healthcare provision Two hospitals in Belgium have cancelled surgeries and transferred critical patients to other facilities after shutting down servers following a cyberattack.… This article has been indexed from The Register –…
UK backtracks on digital ID requirement for right to work
U-turn leaves questions on costs, funding, and benefits unanswered The UK government has backed down from making digital ID mandatory for proof of a right to work in the country, adding to confusion over the scheme’s cost and purpose.… This…
Spanish power giant sparks breach probe amid claims of massive data grab
Endesa says payment info stolen after alleged crook boasted of 1 TB-plus haul Spanish energy giant Endesa is warning customers about a data breach after a cybercrim claimed to have walked off with a vast cache of personal information allegedly…
Anthropic finds $1.5 million to help Python Foundation improve security
AI upstart also upscales its Labs to find the next frontier The Python Software Foundation (PSF) has an extra $1.5 million heading its way, after AI upstart Anthropic entered into a partnership aimed at improving security in the Python ecosystem.……
Windows info-disclosure 0-day bug gets a fix as CISA sounds alarm
First Patch Tuesday of 2026 goes big Microsoft and Uncle Sam have warned that a Windows bug disclosed today is already under attack.… This article has been indexed from The Register – Security Read the original article: Windows info-disclosure 0-day…
Popular Python libraries used in Hugging Face models subject to poisoned metadata attack
The open-source libraries were created by Salesforce, Nvidia, and Apple with a Swiss group Vulnerabilities in popular AI and ML Python libraries used in Hugging Face models with tens of millions of downloads allow remote attackers to hide malicious code…
AI and automation could erase 10.4 million US roles by 2030
Forrester models slow, structural shift rather than sudden employment collapse AI-pocalypse AI and automation could wipe out 6.1 percent of jobs in the US by 2030 – equating to 10.4 million fewer positions that are held by humans today.… This…
Dutch cops cuff alleged AVCheck malware kingpin in Amsterdam
33-year-old was under surveillance for some time before returning home from the UAE Dutch police believe they have arrested a man behind the AVCheck online platform – a service used by cybercrims that Operation Endgame shuttered in May.… This article…
Federal agencies told to fix or ditch Gogs as exploited zero-day lands on CISA hit list
Git server flaw that attackers have been abusing for months has now caught the attention of US cyber cops CISA has ordered federal agencies to stop using Gogs or lock it down immediately after a high-severity vulnerability in the self-hosted…