Fortunately, they were professional red teamers. Unfortunately, they pwned the network This article has been indexed from www.theregister.com – Articles Read the original article: Hackers shoveled snow for company, were rewarded with network admin access
Category: www.theregister.com – Articles
Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy
Safer, cheaper, and nothing to do with cybersecurity This article has been indexed from www.theregister.com – Articles Read the original article: Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy
EvilTokens device-code phishing kit totally more evil than we all thought
It’s a ‘complete BEC operations environment,’ Talos researcher says This article has been indexed from www.theregister.com – Articles Read the original article: EvilTokens device-code phishing kit totally more evil than we all thought
Somebody told DeepSeek to build in-browser ransomware and it gleefully complied
‘The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,’ Check Point researcher tells The Reg This article has been indexed from www.theregister.com – Articles Read the original article: Somebody told DeepSeek to build…
Red teamers turned Claude Desktop into a double agent to do their evil bidding
People trust their AI assistants and it’s easy to abuse this trust This article has been indexed from www.theregister.com – Articles Read the original article: Red teamers turned Claude Desktop into a double agent to do their evil bidding
Infosec professionals sour on automated pentesting tools
29% of security pros were open to fully autonomous pentesting last year; now only 9% are This article has been indexed from www.theregister.com – Articles Read the original article: Infosec professionals sour on automated pentesting tools
Huntress CEO says threat hunter used ‘poor judgment’ in alerting ransomware crim about law enforcement probe
Ex-employee claims this ‘meets the definition of an insider threat’ This article has been indexed from www.theregister.com – Articles Read the original article: Huntress CEO says threat hunter used ‘poor judgment’ in alerting ransomware crim about law enforcement probe
Microsoft builds a bouncer to keep bots out of Teams meetings
Allows ISVs to put their names on the door so desirable bots always get in This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft builds a bouncer to keep bots out of Teams meetings
India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info
Open API leaked everything an attacker needs to impersonate bank officials This article has been indexed from www.theregister.com – Articles Read the original article: India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked…
Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection
If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day This article has been indexed from www.theregister.com – Articles Read the original article: Security researchers tricked LLMs into giving them cocaine recipes by abusing…
Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe
Not today, Putin This article has been indexed from www.theregister.com – Articles Read the original article: Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe
Anonymous researcher drops 0-day ‘exploitarium’ repo
At least two vulnerabilities are already under attack This article has been indexed from www.theregister.com – Articles Read the original article: Anonymous researcher drops 0-day ‘exploitarium’ repo
AI may be good at finding security vulnerabilities, but it can’t beat human stupidity
You don’t need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world’s password habits are so sloppy This article has been indexed from www.theregister.com – Articles Read the original article: AI may be good at finding security…
Microsoft keeps Windows Server 2022 hotpatching alive into 2027
In the Azure Edition, of course This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft keeps Windows Server 2022 hotpatching alive into 2027
Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs
Carmaker points finger at an ‘unknown’ flaw as customer fallout continues This article has been indexed from www.theregister.com – Articles Read the original article: Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs
It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns
Time to start praying to the goddess of wisdom and war This article has been indexed from www.theregister.com – Articles Read the original article: It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden…
Even the Secret Service won’t use company-issued phones
Personal cell phones on protective missions, no threat detection on government-issued devices among the litany of sins This article has been indexed from www.theregister.com – Articles Read the original article: Even the Secret Service won’t use company-issued phones
Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
Researchers warn many AI coding assistants now execute commands from project configurations This article has been indexed from www.theregister.com – Articles Read the original article: Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers This article has been indexed from www.theregister.com – Articles Read the original article: Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
Security boss thought MFA would be too much security
One rule for the workers, another for execs This article has been indexed from www.theregister.com – Articles Read the original article: Security boss thought MFA would be too much security