Give your agents freedom to do useful work by locking them down
Category: www.theregister.com – Articles
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours
EU wants Booking.com to check out of its scam problem
Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses ‘absolutely substandard’
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using ‘password’ on Cisco firewall
Misaligned incentives led to an intractable argument
Certification authority eMudhra defends its laughably weak private keys
Says it passed audits and made just a minor mystery error
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Massive clean-up job under way because this mess makes it possible to impersonate any website or service
Auto tech startup claims it traced hack attempt back to rival’s IP address
IQ.Lvbs implies that rival Comma.ai isn’t playing fair
Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June
Unit 42 investigates network compromises across numerous industries
Swamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’
From October 26, only high and critical cases stay private as project seeks help sharing the workload
‘Password1’ and a forgotten test account land Welsh outfits in hot water
ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
‘Coordinated vulnerability disclosure, unless there’s evidence of active exploits in the wild,’ Chainguard CEO tells The Reg
Whitehall shuts the front door on digital ID but leaves the back open
Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive
Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
UK finance watchdog wants firms to report AI failures and close calls
FCA seeks clear accountability as financial services embrace increasingly autonomous agents
LiteLLM supply chain attack hoovers up passwords and secrets
Plus a RAT for good measure – get threat hunting now
Why cyber resilience is now a boardroom priority for UK public services
PARTNER CONTENT: What happens after the inflection point?
Signal bug could keep your mic – and camera – on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
DeepSeek deep-sixed at all US federal civilian agencies
Order disallowing use of Chinese AI service is unhelpfully vague and broad
ICANN testing tech to let law enforcement access non-public WHOIS info
Single sign-on to help address imminent threats to life, critical infrastructure, or kids
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Second security snafu in two years