Misaligned incentives led to an intractable argument
Category: www.theregister.com – Articles
Certification authority eMudhra defends its laughably weak private keys
Says it passed audits and made just a minor mystery error
Torvalds: AI is fine for competent devs, but spare us the ‘drive-by’ patches
Kernel maintainers stop asking who used AI, as long as the code is good
UK threatens subsea cable saboteurs with 14 years behind bars
Whitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
‘Coordinated vulnerability disclosure, unless there’s evidence of active exploits in the wild,’ Chainguard CEO tells The Reg
PHP2Shell exploit bypasses protections designed to stop remote code execution
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
LiteLLM supply chain attack hoovers up passwords and secrets
Plus a RAT for good measure – get threat hunting now
UK finance watchdog wants firms to report AI failures and close calls
FCA seeks clear accountability as financial services embrace increasingly autonomous agents
Why cyber resilience is now a boardroom priority for UK public services
PARTNER CONTENT: What happens after the inflection point?
Max-severity GitLab bug allows remote code execution over 12 years of releases
Vendor ‘strongly recommends’ upgrading to a fixed version ‘as soon as possible’
Disgraced Indian cert issuer leaves the cert issuing business
We didn’t want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
Signal bug could keep your mic – and camera – on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
DeepSeek deep-sixed at all US federal civilian agencies
Order disallowing use of Chinese AI service is unhelpfully vague and broad
eMudhra signs off certificate biz after embarrassing key exposure
We didn’t want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
PHP2Shell puts dozens of UK government services out of service
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
ICANN testing tech to let law enforcement access non-public WHOIS info
Single sign-on to help address imminent threats to life, critical infrastructure, or kids
PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
Websites down as precaution as exploits have already been published
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers
Consider this the wake-up call