Charity confirms slew of security improvements as it waits for UK.gov’s go-ahead
Category: www.theregister.com – Articles
Britain bets big on AI to defend against the threats AI is helping create
Whitehall wants agents guarding critical infrastructure as part of a wider £600M spending spree
Work to protect DNS from quantum decryption attacks is speeding up
PLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers
UK threatens subsea cable saboteurs with 14 years behind bars
Whitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
‘Coordinated vulnerability disclosure, unless there’s evidence of active exploits in the wild,’ Chainguard CEO tells The Reg
Autonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deeds
Designed to carry out 100,000 steps without human approval
PHP2Shell exploit bypasses protections designed to stop remote code execution
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
Max-severity GitLab bug allows remote code execution over 12 years of releases
Vendor ‘strongly recommends’ upgrading to a fixed version ‘as soon as possible’
Disgraced Indian cert issuer leaves the cert issuing business
We didn’t want to issue SSL/TLS certs anyway, eMudhra suggests after one private key turns out to be the number 4
There’s a third PHP2Shell bug, but it won’t get an emergency fix
Bad things (and software bugs?) come in threes
Signal bug could keep your mic – and camera – on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
PHP2Shell puts dozens of UK government services out of service
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
Monitoring was only partial and was easily bypassed
PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
Websites down as precaution as exploits have already been published
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours
AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers
Consider this the wake-up call
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
Nvidia picks OpenShell to tame AI gents
Give your agents freedom to do useful work by locking them down
EU wants Booking.com to check out of its scam problem
Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses ‘absolutely substandard’