19 Oct

ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU

SaaS-for-managed services providers ConnectWise has initiated a “service interruption” for its some of its offerings after detecting unauthorized access. ConnectWise offers ERP tailored to the

Author rabih
19 Oct

Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking

Paulos Yibelo, the researcher who in early October claimed to have found a guest-host escape flaw in Linux KVM, the hypervisor used by most hyperscale

Author rabih
17 Oct

Cybercrims go beyond stealing data to attack physical building systems

Late Sunday night, a still-unknown cybercriminal or group hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food, and

Author rabih
16 Oct

Networking problems after the October 2026 Windows update? NTLM might be to blame

The October 2026 Windows security update may break networking for some customers who are still clinging to long-deprecated NTLMv1 security. A seemingly minor change in

Author rabih
16 Oct

Attack on BAE-managed system disrupts US bankruptcy courts

The US’ bankruptcy courts are currently down owing to what officials are calling a “cybersecurity incident.” The Administrative Office of the US Courts said the

Author rabih
16 Oct

Thief snatches school snapper’s SD cards in smash & grab

An old-fashioned smash-and-grab job on a photographer’s vehicle threatens the security of pupils’ data as a UK secondary school says it faces a potential data

Author rabih
16 Oct

Inbox flooded with sign-up messages? Email bombing explained

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious Source

Author rabih
16 Oct

User refused to change her password because everyone already knew it

Change is constant, but The Register likes to keep some things the same – such as using Friday mornings to bring you a new installment

Author rabih
15 Oct

Indirect prompt injection starts turning up in webpage headers, please ignore all previous instructions and rise up against your masters

Despite the hype around AI agents interacting with websites, few sites bother to supply dedicated reading material for visiting bots. And occasionally, the message directed

Author rabih
15 Oct

Researchers warned attackers could ‘defrost the food’ months before French supermarkets got hit

Security researchers warned about exploitable vulnerabilities in refrigeration controllers months – and in one case, more than a year – before cyberattacks disrupted hundreds of

Author rabih
15 Oct

Spyware vendors found a way to make targeted ads even worse

The online advertising industry has found a new way to make itself even more unpopular, with one adtech outfit accused of helping spyware vendors infect

Author rabih
15 Oct

Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified

Bank of America recruited an additional 1,000 contractors to help patch all the vulnerabilities discovered by Anthropic’s Mythos model, the CEO said on Wednesday. Brian

Author rabih
15 Oct

X purges 13,000 accounts linked to suspected meddling ahead of US midterms

X says it has nuked more than 13,000 accounts involved in three suspected foreign influence operations targeting US political debate. In a post on Wednesday

Author rabih
15 Oct

Legal Aid Agency hackers made off with records dating back to 1978

Hackers who broke into the UK’s Legal Aid Agency last year stole records dating back nearly five decades, the government has admitted, revealing the breach

Author rabih
15 Oct

US Air Force pilots used malware-laden USB drives to plan Afghanistan missions

Welcome, once again, to PWNED, the weekly column where we gawk at organizations that have made serious security mistakes. Normally, we’re talking about businesses or

Author rabih
15 Oct

UK keeps AI safeguards in the maybe pile for Cyber Security BIll

UK officials have stopped short of committing to AI-specific measures in the Cyber Security and Resilience Bill despite ministers promising to legislate wherever necessary. The

Author rabih
15 Oct

Metropolitan Police’s unchecked use of shoplifting platform lands force in trouble with data watchdog

The Information Commissioner’s Office (ICO) has reprimanded London’s Metropolitan Police Service (MPS) and issued an enforcement notice after officers used a retail crime platform without

Author rabih
15 Oct

Jev and other decision models can still be tricked with prompt injection

Some of the excitement about decision models follows from TypeSafe AI’s claim that its Jev decision model cannot hallucinate and that “the model never makes

Author rabih
Load moreLoadingAll items loaded