29 Sep

FBI to ShinyHunters: ‘We know how to find you’

The FBI’s cyber chief has a message for the criminals that hacked the bureau’s jobs portal last week: “We know how to find you,” so

Author rabih
29 Sep

Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services

The public still doesn’t know who is abusing a critical Citrix vulnerability exploited as a zero-day weeks before disclosure, but we now know that the

Author rabih
29 Sep

AI models keep posting screenshots showing sensitive data from inside tech companies

Amid the growing concern about AI models escaping security simulations to hack websites comes word that these “superintelligent” blobs of code have no understanding of

Author rabih
29 Sep

Apple patches CoreGraphics zero-day already exploited in targeted attacks

Apple has patched a CoreGraphics zero-day after warning that attackers may already have used the bug to compromise a small number of carefully chosen targets.

Author rabih
29 Sep

OpenAI benches GPT-6.1 Astra for overstepping the mark

OpenAI has killed off the planned release of GPT-6.1 Astra after the model got better at doggedly pursuing tasks but worse at knowing when it

Author rabih
29 Sep

Former X-Force hackers chase the offensive cyber gold rush

Two former leaders of IBM’s X-Force Red team have launched RemoteThreat, an offensive cybersecurity startup backed by $7 million in pre-seed funding. CEO Chris Thompson

Author rabih
29 Sep

Timeshare exit scams: From fake buyers to recovery fraud

Con artists are targeting timeshare owners who want out – and some victims are hit twice Source

Author rabih
29 Sep

OpenAI’s dirty deeds Down Under included security bypass attempts, using exposed keys, source code siphon

OpenAI has detailed the extent of the dirty deeds its agents indulged in Down Under in a Tuesday blog post titled How we will do

Author rabih
28 Sep

JadePuffer crims hijacked Azure identities and used them to blow up cloud resources

The cyber criminal behind JadePuffer, the first known agentic ransomware infection reported over the summer, has also used stolen Azure identities to conduct destructive attacks

Author rabih
28 Sep

Ex-soldier’s telecom hacking spree earns him 70 months

A former US Army soldier has been sentenced to 70 months in prison for hacking telecoms companies, stealing sensitive records, and trying to extort more

Author rabih
28 Sep

The devil is still in the email – but wearing a new mask

When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack Source

Author rabih
28 Sep

Certainties in life: Death, taxes, and critical Citrix vulns under attack

Death and taxes are said to be the only certainties in life. Perhaps it’s time to add attackers targeting newly discovered critical flaws in Citrix’s

Author rabih
28 Sep

OpenAI pauses some training amid allegations its rogue agents behaved more badly than first thought

The AI safety debate advanced at high speed over the weekend, amid new allegations that rogue agents have behaved more badly than first thought –

Author rabih
25 Sep

Fake Google Security Team ad says ‘no script reading’ in voice phishing – then prints the script

Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam told applicants that they

Author rabih
25 Sep

ShinyHunters tells The Reg: We hacked the FBI to ‘protect our business’

ShinyHunters, the data theft and extortion crew that has stolen sensitive information belonging to millions of cancer patients, university and K-12 students, and Carnival cruisers,

Author rabih
25 Sep

Crooks use fake desktop apps to fool HR staff into giving them remote access

You work in your company’s human resources department and use HR software to check employee information, benefits, and payroll. So, when you see a downloadable

Author rabih
25 Sep

Bitget blames North Korea for $387.5M crypto wallet raid

The CEO of crypto exchange Bitget has confirmed that a cyberattack with all the hallmarks of a North Korean operation resulted in approximately $387.5 million

Author rabih
25 Sep

Which copy of that file is the real one? Dinner, off the record, in Midtown

EVENT: The Register is hosting a private dinner in New York on Tuesday 27 October for senior technology, infrastructure and data leaders, with LucidLink. Joe

Author rabih
Load moreLoadingAll items loaded