No timeline to restore IT systems as probe remains ongoing
Tag: www.theregister.com – Articles
Carhartt data breach affects 12.9M, half of what ShinyHunters claimed
One AI and two trained eyes delved into the heavily padded leaks
You could’ve applied all 1,449 Oracle patches and still been hit by this attack
Attackers now ready to exploit how things work, rather than just break them, says Oracle support expert
CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw
Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap
Crooks push Mac malware through fake OpenAI Codex ads
Sponsored search results lead developers straight into a ClickFix malware trap
You don’t want this Sleepwalker backdoor on your Windows machine
Its own command language, 23 instructions – signs point to ‘well-resourced operation rather than an opportunistic one’
Browser fingerprint tool shows how easy you are to track using the latest sneaky tricks
Glassbox dev admits he had some help from Claude to build locally running tool
Iran-linked cyberattack shut down a UK power plant
No risk to wider energy system, government tells The Reg
AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev’s headphones
Sawtooth waves you can’t hear still mess with your Bluetooth. Firefox and Brave say they’ve got you covered
Security vets rally around $4 paper password books for sale in Australia
Once shunned by the IT crowd, pen-and-paper password vaults are getting the love they deserve in 2026
If you’re not using AI to attack your own systems, your adversaries will
Agents are also the new attack surface – cue defenders’ existential angst
AWS Security makes an inscrutable choice
Quarantining leaked credentials is not good enough
Homeland security cybercops say patch TrueConf (Russia’s Zoom) if you’re using it
Ukrainian hacktivists exploiting the bugs, but TrueConf’s reach stretches well beyond home turf
Australian hotel chain leaks guests’ PII after breach at third-party database operator
Unknown parties know where you stayed last summer, down under, across 120 Quest properties
OpenAI’s overhead will rise 20 percent for some workloads as it hardens security
Expanded multistage chain of thought monitoring makes frontier model work more expensive
Hackers poison popular Rust crates to steal developers’ credentials
Malicious updates turned routine builds into a delivery system for infostealer malware
Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.
Secure Workload Software has five nasty flaws and even SaaS users have updates to install
Russian snoops add OAuth abuse to targeted phishing campaigns
Don’t click on that State Department meeting invite
US Bank investigates LockBit’s claims as ransomware crims set pay-or-leak deadline
Follow the money
Researcher tricks Apple’s Find My into sharing location data with Linux
Clever protocol wrangling gets iBiz-only people tracking working on a non-iGadget