Your industrial IoT gateway isn’t exposed to the internet, right? RIGHT?!
Tag: www.theregister.com – Articles
Cops bust botnet of 1.3M infected Android TV boxes
Videostrong accused of shipping devices with a backdoor baked in
Thieves pilfer environment variables from Trigger AI workflow tool
So, who’s ready to clear the dust out of that server closet and move things back on-prem?
Token thieves costing companies $100K+ per day in illicit LLM charges
Don’t let the LLMjackers hit you
Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
Within minutes of a ceasefire lifting in Kherson, Ukraine’s citizens were pummelled with threatening notifications
Frozen part II: Hackers remotely defrost produce in Euro supermarkets … again
Let it go (bad): Dozens of stores report mass food wastage as managers start their week in puddles
FBI pins $6.3B Binance crypto heist on North Korean hackers
Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul
Admin dropped the F-bomb in a password to show hackers who was really 1337
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
Binance freezes funny money after compromise of engineer’s laptop linked to $6.3 billion of unauthorized trades
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Embedded browsers are at the heart of the problem
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
n0n-existent security
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Snoops ‘likely still’ have access to US government-affiliated network
GM cracks the petty cash box for multistate driver tracking settlement
$220 million? For all of you? Yeah, we can probably dig that up …
Anthropic: That Claude Code extension compromise… couldn’t be us
Claudeshop fingers ‘malicious actor’ in targeted supply-chain attack on Cursor
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic
Cisco open sources tool for detecting AI agents on hacking sprees
Project Quarry aims to provide a ‘shared language’ for evaluating agent behavior
123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus
Company chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants
Belgium’s tax agency confirms cyberattack, pulls services offline
Officials confirm this week’s tax deadlines extended to November as a result
British intelligence agency misplaced ‘thousands’ of storage devices, years later still can’t say how many
Other agency errors included an unchecked software bug that led to Terrorism Act detentions