More JFrog Artifactory bugs under attack, and all 3 have patches
security If you're waiting for a sign to upgrade to a fixed version: this is it
Cyber-crime11 Sep 2026 | 1
Jessica is The Register's cybersecurity editor, leading our coverage of topics ranging from government IT to best practices for defenders. She also hosts video interviews with CxO-level veterans and other subject-matter experts on the challenges facing the IT industry. Jessica has more than 20 years of experience in publishing, with roles ranging from news editor to managing editor.
Latest Anthropic horror story chills with tales of kamikaze drone swarms and bioweapons research
security Everyone from ShinyHunters to Russian freelancers is in on the illicit model fun
AI and ML10 Sep 2026 | 23
Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script
security Human operator: don't touch CIS orgs. AI agents: look a squirrel!
Cyber-crime10 Sep 2026 | 7
Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits
Security Mind the patch gap, please and thank you
Research09 Sep 2026 | 1
Serial Microsoft 0-day hunter drops yet another Defender exploit
security A bypass of a bypass of a bypass
Security09 Sep 2026 | 20
Microsoft breaks Patch Tuesday record with 974-CVE deluge
security Adobe also brought goodies to the patch party and they deserve immediate attention
Security09 Sep 2026 | 25
OpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attack
Security Researchers disclosed the cross-account trick the same day rogue agents exploited another zero-day for admin access
Security08 Sep 2026 | 3
Extortion crews have their eyes on high-value AI data, Google warns
RESEARCH Companies 'don't want their IP exposed, so they're willing to pay'
Research08 Sep 2026 | 2
ASCII smuggling isn't just an AI security risk
security Phishers find a new use for invisible Unicode tag characters
Cyber-crime04 Sep 2026 | 19
OpenAI commits $1B in AI credits to frontline cyber defenders
Security Daybreak program brings subsidized models, training, and support to under-resourced teams
Security03 Sep 2026 | 7
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Security A shared security 'Nightmare'
Security03 Sep 2026 | 13
Claude Mythos only model to complete full cyber kill chain, experts say
security Cyber Weapon Index finds AI attacks 'imminent'
Security02 Sep 2026 | 12
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
security Adding insult to injury
Security02 Sep 2026 | 27
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
cyber-crime 23-year-old botnet down
Cyber-crime01 Sep 2026 | 4
Another Artifactory CVE under attack by AI agents or humans
security Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit
Cyber-crime01 Sep 2026 |
Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks
Security The model provider gave METR the credits for free. An actual customer would not have been so lucky
Security01 Sep 2026 | 6
Healthcare cyberattacks hit pacemakers and millions of patient records
Security McKesson admits breach as ShinyHunters demands $55.2M
Cyber-crime31 Aug 2026 | 9
Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines
security Next-level ClickFix wave sets off multi-stage attack chain
Security31 Aug 2026 | 27
Researcher shows how Claude Code can be tricked simply by asking it to summarize a website
security More prompt-injection hijinks from wunderwuzzi
Research28 Aug 2026 | 31
CRPx0 hacking service for dummies claims victim count more than quintupled
CYBER-CRIME It's 'built to be operated by a human with no technical background'
Cyber-crime27 Aug 2026 | 3
ATF responds to 'major' cybersecurity incident after ransomware gang's claims
security US Justice Department investigating the breach
Security27 Aug 2026 | 5
FBI seizes hacking tools it says China used to attack NASA, DOE, US Senate and other critical networks
Security Beijing's botnets busted
Security27 Aug 2026 | 3
More than 100 water systems were hit in July cyberattacks
Security 'These are test runs for a larger-scale attack'
Cyber-crime26 Aug 2026 | 34
Boston Scientific discloses 'global disruption' in ongoing cyberattack
Security No timeline to restore IT systems as probe remains ongoing
Cyber-crime26 Aug 2026 | 4
You don't want this Sleepwalker backdoor on your Windows machine
Security Its own command language, 23 instructions - signs point to 'well-resourced operation rather than an opportunistic one'
Security24 Aug 2026 | 8
Iran-linked cyberattack shut down a UK power plant
Security No risk to wider energy system, government tells The Reg
Cyber-crime24 Aug 2026 | 30
If you're not using AI to attack your own systems, your adversaries will
security Agents are also the new attack surface - cue defenders' existential angst
Security22 Aug 2026 | 16
Russian snoops add OAuth abuse to targeted phishing campaigns
Security Don't click on that State Department meeting invite
Security21 Aug 2026 | 2
US Bank investigates LockBit's claims as ransomware crims set pay-or-leak deadline
security Follow the money
Security20 Aug 2026 | 5
'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers
security 'It is an active threat'
Security19 Aug 2026 | 33
ICE boss to agents: Leave the Meta spy glasses at home
security 'Personally owned body-worn cameras are prohibited,' ICE tells The Reg. Because the last thing DHS needs is more proof of misconduct
Security19 Aug 2026 | 50
Copilot tricked into telling reseachers how to hack itself
Security How to social engineer an AI's reasoning engine
Research18 Aug 2026 | 6
An AI broke Snowflake's code. Then another AI agent exploited it
Security Don't worry, this one was via a bug bounty program
Security17 Aug 2026 | 2
Stopping a cyberattack while walking your dog - defensive AI security CEO says it's not ruff to do
security Corma CEO tells The Reg it's building 'One ring to rule them all, for the defenders to have this power'
Security16 Aug 2026 | 12
1.6M RingCentral accounts' data dumped after ShinyHunters extortion attack
CYBER-CRIME Another one bites the dust
Cyber-crime14 Aug 2026 | 10
Autonomous AI attacks pose 'clear and present danger' to critical infrastructure
SECURITY Weaponized agents could turn digital intrusions into kinetic disasters, experts warn
Security14 Aug 2026 | 40
'Near-autonomous' AI agents attack Taiwan's nuclear safety agency
Security Some say the world will end in fire, some say an agentic swarm
Security12 Aug 2026 | 17
Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows
CYBER-CRIME Exploit Wednesday's back, baby
Cyber-crime12 Aug 2026 | 52
Akira ransomware scum blocked victim's security tools – and broke their own encryptor
Security Gives a whole new meaning to Safe Mode
Research12 Aug 2026 | 5
421 bugs in Microsoft's Patch Tuesday release, and the Norks have already attacked one
security Sysadmins, welcome to your new norm
Security11 Aug 2026 | 15
DEF CON hackers add new muscle to water utility protection
Security Franklin project adds new security providers, employs digital twins and AI
Security10 Aug 2026 | 11
North Korean spies are running local LLMs to cause AI mischief
Security Kimsuky's phishing attacks get an AI boost
Security10 Aug 2026 | 1
Water system controllers don't belong on the internet, says ex-NSA chief after suspected Iran attacks
Security Calling all defenders
Cyber-crime07 Aug 2026 | 98
'Asimov was right' about rules for robots, says ex-US Cyber Director
Security Humans will get the AI models they deserve
Security07 Aug 2026 | 91
OpenAI reveals its rogue agent swarm went a little bit Borg ahead of Hugging Face hack
Security It started with an 'impossible task' and led to AI deciding it needed to act as a collective intelligence
Security06 Aug 2026 | 38
Prompt injection isn't the bug, AI agent frameworks are
Security Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat attendees what they found
Security05 Aug 2026 | 10
This one time, at Hacker Summer Camp …
Security What to expect as BSides, Black Hat, and DEF CON descend on Las Vegas
Security04 Aug 2026 | 15
Google dev kit spurs first-ever agent-on-agent violence
Security Poisoned pull requests contain prompt injection that allows one to control another
Security03 Aug 2026 | 5
AI is 'both the weapon and the target' in latest wave of cyberattacks
security CrowdStrike tracks 89% surge in machine-assisted activity as patch windows shrink to 48 hours
Cyber-crime03 Aug 2026 | 2
Excuses like 'AI did it' don't exist in the eyes of the law
LEGAL If your AI goes rogue, better have a good lawyer
Legal30 Jul 2026 | 25
JFrog's 0-days let OpenAI's models hack Hugging Face
Security OpenAI confirms the link
Security28 Jul 2026 | 10
Microsoft and Wiz mind-meld agents catch more than 90% of bugs
Security Secret to their success: Using the right model for the right security job
Security28 Jul 2026 | 2
Microsoft's solution to AI security: more AI and more acronyms
Security MDASH stuffed with MAI-Cyber-1-Flash and a side of GPT-5.4
Security27 Jul 2026 | 1
Pope's official prayer app commits cardinal sin, leaks 700K+ users' info
Security (Security) hole-ier than thou
Security24 Jul 2026 | 55
Europol flags 4,340 'horrific' URLs linked to The Com
Security Stop the spread (of online recruiting and propaganda)
Cyber-crime24 Jul 2026 | 8
OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be
Security Attack models gonna attack
Security23 Jul 2026 | 31
Year-long Russian attacks infect users as soon as they look at an email
PATCHES Phishing for dummies
Patches23 Jul 2026 | 24
Sneaky Windows stealer targets 300+ apps, gives crims an AI profiler to maximize profits
Security Move over Flipper. There's a new Dophin X in town
Security22 Jul 2026 | 1
Cisco's open-weight bug busters take on Google and OpenAI
Security Don't call them chatbots
Security21 Jul 2026 | 4
Attackers pummel critical WordPress vuln to create all sorts of mischief
security Plus dozens of PoCs in the public domain
Cyber-crime20 Jul 2026 | 6