Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit
Tag: www.theregister.com – Articles
Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks
The model provider gave METR the credits for free. An actual customer would not have been so lucky
Firefox helps iPhone users bypass ads on web sites while making money showing its own ads
Baked-in Firefox ad blocking on iOS begins rolling out slowly today, and is off by default
Anthropic pledges to try harder to keep models under control, asks partners to chip in
Security … this time it will be different
33-hour BGP hijack of Softaculous traffic prompts security scramble
Hosting software vendor tells customers to reset credentials and hunt for malicious packages
Healthcare cyberattacks hit pacemakers and millions of patient records
McKesson admits breach as ShinyHunters demands $55.2M
OpenClaw 2.0 pours glitter on slow-burning security dumpster fire
Making installation easier and putting a new wrapper on the interface while leaving most of the security to users is a recipe for more trouble with the…
Attack hides malware in PNGs and drops custom reverse tunnel on victims’ machines
Next-level ClickFix wave sets off multi-stage attack chain
Anthropic cracks down on hijacked user accounts mining AI tokens
Commodity malware steals authenticated sessions, letting thieves freeload on victims’ paid usage
Turns out Brits would quite like their private messages to stay private
Polling finds two-thirds don’t trust this government, or any future one, with access to their encrypted chats
Researcher shows how Claude Code can be tricked simply by asking it to summarize a website
More prompt-injection hijinks from wunderwuzzi
US government snitch-finder pleads guilty to leaking state secrets to foreign spies
The IT specialist began contacting a foreign government within days of being assigned to the DIA’s Insider Threat Division
CISA: Most exploited vulnerabilities should have been eradicated decades ago
Organizational culture and systemic gaps in Secure by Design adoption blamed for sorry state of affairs
Industry that built the problem offers to sell you the solution
100+ tech giants warn AI attacks are coming, skip the part where they pay for defenses
Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood
The fix is either an unvalidated and unofficial emergency patch or taking the server offline
Australian cops cuff alleged TeamPCP masterminds
Alleged crew behind the Shai-Hulud worm and other supply chain attacks nabbed with help from the FBI
CRPx0 hacking service for dummies claims victim count more than quintupled
It’s ‘built to be operated by a human with no technical background’
AI girlfriend review site’s secrets were exposed to the world for three weeks
Even testing and staging sites need protection from prying eyes
Omarchy distro gains serious backing
Polarizing opinions while tech heavyweights put up $10M
ATF responds to ‘major’ cybersecurity incident after ransomware gang’s claims
US Justice Department investigating the breach