24 Aug

Iran-linked cyberattack shut down a UK power plant

Security No risk to wider energy system, government tells The Reg A suspected Iran-linked cyberattack shut down a small UK power plant around the time

Author rabih
24 Aug

AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev’s headphones

Developer Matt Callaghan claims he caught Alibaba trying to track web users by playing sounds through browsers vulnerable to audio fingerprinting. The software engineer drew

Author rabih
24 Aug

Security vets rally around $4 paper password books for sale in Australia

security Once shunned by the IT crowd, pen-and-paper password vaults are getting the love they deserve in 2026 Are you sick and tired of maintaining

Author rabih
22 Aug

If you’re not using AI to attack your own systems, your adversaries will

AI agents excel at hacking organizations, as they’ve demonstrated in real-life attacks multiple times over the past few weeks. They also expose a whole new

Author rabih
21 Aug

AWS Security makes an inscrutable choice

security Quarantining leaked credentials is not good enough One of the best ways to lower your AWS bill by 99 percent or more is by

Author rabih
21 Aug

Homeland security cybercops say patch TrueConf (Russia’s Zoom) if you’re using it

PATCHES Ukrainian hacktivists exploiting the bugs, but TrueConf’s reach stretches well beyond home turf  CISA has ordered US federal agencies to patch two exploited flaws

Author rabih
21 Aug

Hackers poison popular Rust crates to steal developers’ credentials

SECURITY Malicious updates turned routine builds into a delivery system for infostealer malware Hackers slipped malware into several popular Rust packages this week, turning routine

Author rabih
21 Aug

Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.

security Secure Workload Software has five nasty flaws and even SaaS users have updates to install Cisco has revealed its Secure Workload Software, a micro-segmentation

Author rabih
21 Aug

Russian snoops add OAuth abuse to targeted phishing campaigns

Google is tracking three distinct suspected Russian cyber-spy groups that are targeting individuals in academia, aerospace, defense, government agencies, and think tanks across Europe and

Author rabih
20 Aug

US Bank investigates LockBit’s claims as ransomware crims set pay-or-leak deadline

security Follow the money US Bank says that it’s investigating ransomware crew LockBit’s claims that it breached the financial institution and stole data, which the

Author rabih
20 Aug

Researcher tricks Apple’s Find My into sharing location data with Linux

Security Clever protocol wrangling gets iBiz-only people tracking working on a non-iGadget A young security researcher figured out a way to enroll a Linux device

Author rabih
20 Aug

Ransomware crook poses as recovery firm to steal payments from fellow extortionists

CYBER-CRIME Because apparently even ransomware gangs can’t trust the people they do business with A ransomware affiliate appears to have found a new way to

Author rabih
20 Aug

Grok chat duped into swallowing injected instructions

xAI’s Grok web chat agent is currently vulnerable to a novel form of prompt injection, according to security researchers with Adversa AI. The technique allows

Author rabih
20 Aug

French tax authority says break-in exposed data of 600K, including some private messages

Security Stolen details range from contact information to household finances and withholding rates France’s tax authority says attackers may have stolen the contents of messages

Author rabih
20 Aug

AI agent suggested installing a malware package. Engineer almost took its advice

SECURITY Fortunately, the company had a policy of checking source code on GitHub first PWNED Welcome back to PWNED, the column where we make fun

Author rabih
19 Aug

‘Not a theoretical risk,’ feds warn as attackers use AI-made code to hack critical infrastructure controllers

Attackers are using AI-generated exploitation scripts to break into internet-exposed Siemens S7 Series programmable logic controllers (PLCs) at water, manufacturing, energy, and other critical facilities,

Author rabih
19 Aug

ICE boss to agents: Leave the Meta spy glasses at home

security ‘Personally owned body-worn cameras are prohibited,’ ICE tells The Reg. Because the last thing DHS needs is more proof of misconduct Some ICE employees

Author rabih
19 Aug

Flock surveillance backlash mounts as fiendish Halloween plans circulate

Security CEO apologizes for police misuse as activists call for vandal action against license plate cameras Surveillance tech company Flock has struggled with its public

Author rabih
Load moreLoadingAll items loaded