PLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers
Tag: www.theregister.com – Articles
AI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hours
One critical, three high-severity EPICS bugs could disrupt research experiments
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
Microsoft releases out-of-band Windows fixes with certificate updates
Did you hear the one about eMudhra and the power of 4? Time to get connected to certificate trust list updates
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Alternative für Deutschland swats away scandals as reporters swarm leaked email tranche
Cisco open sources tool for detecting AI agents on hacking sprees
Project Quarry aims to provide a ‘shared language’ for evaluating agent behavior
Japanese virtual desktop cloud hacked so hard it asks to be banned
CEO admits service used for foreign exchange trading had holes company was slow to fix
123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus
Company chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants
Worm armed 42 GitHub repos by hiding a payload too big to fail
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
Alibaba’s Qwen AI caught trying to contact server in China
But there’s not much evidence this is anything more than echoes of unsanitized training data
LiteLLM supply chain attack started with an exposed master key
A ‘strong illustration of the risks associated with failing to rotate a potentially exposed key’
Microsoft releases emergency .NET security fixes for Google Brotli bug
Redmond joins growing list of software maintainers scrambling to patch compression flaw
PHP2Shell: No login, no app code, no warning. What next?
PARTNER CONTENT: Learn what the flaws are, how far exploitation has gone, and how to get to full coverage fast with Tanium
Trumpets blare and skies part as AI hypefest culminates in Anthropic IPO filing
Claude maker reveals financials and warns investors its AI models could blackmail humans, resist shutdown, or go rogue
UK pentester ‘killa’ claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
Jaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours
We shouldn’t be surprised about the PHPocalypse, as the internet is built on sticks and glue
What better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire?
UK Biobank back online soon, months after someone tried to sell 500k people’s data on Alibaba
Charity confirms slew of security improvements as it waits for UK.gov’s go-ahead