Of 225 flaws found by Glasswing and tracked by VulnCheck researcher, just one has confirmed exploitation in the wild
Tag: www.theregister.com – Articles
Meta Muse AI app flaw lets local malware redirect dictation traffic
Ad biz promises users control while bug could expose voice prompts
Treasury chief says AI bosses, not their bots, will carry the can for criminal acts
‘Humans are responsible, not the AI,’ argues Scott Bessent as he calls out OpenAI agents’ hack of Hugging Face
Clop gets a taste of its own medicine after ShinyHunters hijack leak site
Rival crew demands eight figures and threatens to expose companies that paid to keep quiet
Rustaceans warned of job interviews with a malicious payload
Attackers are courting crate owners with plausible company profiles and booby-trapped recruitment calls
Agentic security is the billion-dollar challenge for some clever startup to solve
High time to stop kicking the security can down the road, investor tells The Reg
Spain gets its first taste of AI-aided cyber attack
Data protection chiefs call for ‘immediate review’ of data protection models
Researchers used Claude to hack OpenAI employees’ ChatGPT accounts
Agentic exploits for the win (again)
North Korea’s fake job interviews infected 30,000 devices
WaterPlum recruiters used bogus coding tests to backdoor jobseekers and raid more than 7,000 crypto wallets
FBI: Fake cop and government impersonation scams cost victims $1.6B
AI, fake uniforms, and mock government offices help crooks sell the con
Ministry of Justice apologizes after court staff accessed Southport victims’ files
Sensitive personal data was involved, but there is no evidence it was shared with third parties
Mythos has made 2026 patching hell. It might make 2027 a breeze
Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner
USA’s Venezuela takeover comes with bonus exposure to Chinese AI surveillance tech
Think tank points out that companies banned by Washington will help run the regime that Uncle Sam now controls
AI coding agents’ 0-click RCE flaw could hand attackers keys to the kingdom
Plugin4Shell attack affects all the major coding agents, researchers say
Researchers find way to listen in on headphones from afar
Eve’s dropping in on Alice and Bob
China’s Salt Typhoon backdoors Latin American orgs with new snooping malware
Beware the SparroWocky, my son! The backdoor that bites…
London property manager breach may have exposed bank details and lockbox codes
City Relay says intruders accessed its Metabase Cloud instance twice and extracted customer data
The latest AI doomsayer is China’s intelligence boss
Beijing’s response is to ‘firmly grasp technological sovereignty’ and broad regulations
Cisco drops another exploited zero-day, this time a perfect 10
ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch
Test environment let anyone access live customer data
Even a temporary staging server needs to be locked down.