Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug
Tag: www.theregister.com – Articles
Citrix NetScaler security snafus get even worse amid more 0-day reports
The new vuln, CVE-2026-88779, is a memory overflow bug that leads to denial of service
Attackers hijacked top-level domains, minted fake security certs for Google and other orgs
Trusted brand impersonation without the usual browser certificate warnings spells trouble
FBI confirms ‘multiple’ arrests related to ShinyHunters hack
Another few bite the dust
Legacy sign-on service comes back to bite school software provider Bromcom
Intruders retrieved email addresses from superseded tech kept running for an internal system
Debian’s latest kernel security update has 1,313 reasons to patch
AI-assisted bug hunting adds to maintainers’ workload, while broad CVE rules help explain the sprawling tally
AWS launches open-source AI agent sandbox to prevent YOLO mode disasters
Strands Box is the latest open source AI control tool from the cloud giant; like its predecessors, it promises tighter reins on autonomous agents
US states sue popular kitmaker TP-Link over China risks
Router maker rejects allegations it misled buyers about protection and its reliance on Chinese suppliers
Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
Quoth the LLM, ‘More and more’
FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks
Tens of thousands more victims and more ransomware groups getting in on the act
South Korean president calls for creation of tools that stop all cyber-attacks
‘Complete security paradigm refresh’ needed for the AI era
Asos app delivers a data leak threat instead of fast fashion
Rogue notification claims Snowflake instance compromised, but customer info theft remains unverified
Trump Mobile customers’ data dumped – and some never even received their gold device
All that glitters …
Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets
Run the CLI in autopilot mode and take your chances
Denmark’s ID register spills more people’s details than the country has residents
Abuse of private firm’s access exposed 8.8M records, including those of people who had died or moved abroad
Microsoft extends the Outlook naughty step with two more file types
You didn’t really want to be sending around .msix and .msixbundle files, did you?
Anthropic reconfigures its cool kids security program
Company’s Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club
Atlassian warns of critical file access flaw in its datacenter products
Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug
Security researcher claims they found KVM guest-host escape flaw
Firecracker MicroVMs, which started at AWS, seem to be the problem
Security researcher claims to they found KVM guest-host escape flaw
Firecracker MicroVMs, which started at AWS, seem to be the problem