Securities regulator urges market players to develop new strategies and nail cyber-basics before AI models fuel mass attacks India’s Securities and Exchange Board has advised participants in the nation’s equities industry to immediately revisit their information security systems and practices,…
Tag: The Register – Security
Attackers are cashing in on fresh ‘CopyFail’ Linux flaw
Researchers dropped a reliable root exploit and it didn’t sit idle for long CISA is warning that a newly-disclosed Linux kernel bug dubbed “CopyFail” is already being exploited, just days after researchers dropped a working root-level exploit.… This article has…
Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking
Cushman & Wakefield activated incident response protocols after serial extortionists issued separate threats Real estate giant Cushman & Wakefield has confirmed a data breach after two cybercrime groups, ShinyHunters and Qilin, separately claimed responsibility for attacks on the company.… This…
ShinyHunters claims dump puts 119K Vimeo emails in the wild
Vimeo points finger at analytics supplier Anodot, says no logins or card data were touched More than 119,000 Vimeo users’s email addresses were extracted in a breach traced to a third-party analytics vendor, according to Have I Been Pwned.… This…
Romance scammers turn sweet talk into £102M payday
Victims losing £280K a day to fake profiles and sob stories Romance fraudsters scammed Britons out of £102 million ($138 million) last year, according to the latest police figures.… This article has been indexed from The Register – Security Read…
NHS to close-source hundreds of GitHub repos over AI, security concerns
Healthcare giant’s maintainers handed May deadline to enact the change The UK’s National Health Service (NHS) is ordering all of its technology leaders to temporarily wall off the organization’s open source projects over concerns relating to advanced AI and Anthropic’s…
Microsoft’s bad obsession is showing up in shabby services and slipshod software. Here’s proof
If you can’t bother to keep GitHub running, why should we bother with you? Opinion It’s been another shabby week for Microsoft, and a shabbier one for its users. We learnt that Windows 11’s epic habit of trying to corral…
Singapore boffins get diverse SIEMs singing in harmony with agentic rule translation
Vendors all use different formats. This tech translates them all so you can smooth your SOC Academics from Singapore and China have found a way to make AI useful for cyber-defenders, by creating a technique that translates rules from diverse…
Kids say they can beat age checks by drawing on a fake mustache
46% say age checks are easy to bypass, and nearly a third admit getting around them It’s been months since the UK government began requiring stronger age checks under the Online Safety Act, and recent research suggests those measures are…
Shadow IT has given way to shadow AI. Enter AI-BOMs
‘If you don’t have visibility, you can’t understand what to protect’ When it comes to securing enterprise supply chains, now heavily infused with AI applications and agents, a software bill of materials (SBOM) no longer provides a complete inventory of…
If the vote you rocked, your personal info can be grokked
Even limited voter rolls can be linked to identify people, research shows Your voter data could be used against you. A foreign intelligence service that wished to identify the family members of deployed military personnel could do so by cross-referencing…
Five Eyes spook shops warn rapid rollouts of agentic AI are too risky
Prioritize resilience over productivity, say CISA, NCSC and their friends from Oz, NZ, Canada Information security agencies from the nations of the Five Eyes security alliance have co-authored guidance on the use of agentic AI that warns the technology will…
Five Eyes spook shops warn agentic is too wonky for rapid rollout
Prioritize resilience over productivity, say CISA, NCSC and their friends from Oz, NZ, Canada Information security agencies from the nations of the Five Eyes security alliance have co-authored guidance on the use of agentic AI that warns the technology will…
Brace for the patch tsunami: AI is unearthing decades of buried code debt
Britain’s cyber agency says the bill for years of technical shortcuts is coming due, and it’s arriving all at once Britain’s cyber agency is warning that AI-fuelled bug hunting is about to flush out years of buried flaws, leaving defenders…
First reports come in of victims of critical cPanel vuln as ‘millions’ of sites potentially exposed
Exploitation was underway before patches landed, at least one victim reports ransomware demand CISA has added a critical cPanel bug to its known-exploited list, confirming that attackers are already poking holes in one of the internet’s most widely used hosting…
OpenAI locks GPT-5.5-Cyber behind velvet rope despite slamming Anthropic for doing exactly that
Altman’s crew now doing the same gatekeeping it recently mocked OpenAI is lining up a limited release of its new GPT-5.5-Cyber model to a handpicked circle of “cyber defenders,” just weeks after taking a swipe at Anthropic for doing almost…
Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down
313 Team tells Canonical: pay up or the packets keep coming Canonical says its web infrastructure is under attack after a pro-Iran hacktivist group instructed its members to target the open source giant.… This article has been indexed from The…
Passport to £££: Home Office adds £216M to travel doc contract before a single bid’s been placed
Start date pushed back a year, annual cost up a third, and UK’s now handing out eight million passports a year The Home Office has increased the annual value and overall duration of its new passport production contract, increasing it…
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
Mini Shai-Hulud caught spreading credential-stealing malware The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.… This article has been indexed from…
Bot her emails: most modern phishing campaigns are AI-enabled
KnowBe4 says 86% of phishing it tracked used AI, and inboxes are only the start Give a man a phishing kit and he might get lucky a couple of times; teach an AI to phish and it’ll change the landscape,…