‘Coordinated vulnerability disclosure, unless there’s evidence of active exploits in the wild,’ Chainguard CEO tells The Reg
Tag: www.theregister.com – Articles
Autonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deeds
Designed to carry out 100,000 steps without human approval
PHP2Shell exploit bypasses protections designed to stop remote code execution
“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
Max-severity GitLab bug allows remote code execution over 12 years of releases
Vendor ‘strongly recommends’ upgrading to a fixed version ‘as soon as possible’
Disgraced Indian cert issuer leaves the cert issuing business
We didn’t want to issue SSL/TLS certs anyway, eMudhra suggests after one private key turns out to be the number 4
There’s a third PHP2Shell bug, but it won’t get an emergency fix
Bad things (and software bugs?) come in threes
Signal bug could keep your mic – and camera – on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
PHP2Shell puts dozens of UK government services out of service
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
Monitoring was only partial and was easily bypassed
PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
Websites down as precaution as exploits have already been published
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours
AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers
Consider this the wake-up call
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
Nvidia picks OpenShell to tame AI gents
Give your agents freedom to do useful work by locking them down
EU wants Booking.com to check out of its scam problem
Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses ‘absolutely substandard’
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using ‘password’ on Cisco firewall
Misaligned incentives led to an intractable argument
Certification authority eMudhra defends its laughably weak private keys
Says it passed audits and made just a minor mystery error
Torvalds: AI is fine for competent devs, but spare us the ‘drive-by’ patches
Kernel maintainers stop asking who used AI, as long as the code is good
UK threatens subsea cable saboteurs with 14 years behind bars
Whitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm