Researchers used Claude to hack OpenAI employees' ChatGPT accounts
Agentic exploits for the win (again)
Security18 Sep 2026 | 14
Security
North Korea's fake job interviews infected 30,000 devices
WaterPlum recruiters used bogus coding tests to backdoor jobseekers and raid more than 7,000 crypto wallets
Cyber-crime18 Sep 2026 | 11
FBI: Fake cop and government impersonation scams cost victims $1.6B
AI, fake uniforms, and mock offices help crooks sell the con
Cyber-crime18 Sep 2026 | 9
USA’s Venezuela takeover comes with bonus exposure to Chinese AI surveillance tech
Think tank points out that companies banned by Washington will help run the regime that Uncle Sam now controls
Security18 Sep 2026 | 29
AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom
Plugin4Shell attack affects all the major coding agents, researchers say
Security17 Sep 2026 | 3
Researchers find way to listen in on headphones from afar
Eve's dropping in on Alice and Bob
Security17 Sep 2026 | 38
China's Salt Typhoon backdoors Latin American orgs with new snooping malware
Beware the SparroWocky, my son! The backdoor that bites…
Security17 Sep 2026 | 3
Cisco drops another exploited zero-day, this time a perfect 10
ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch
Security17 Sep 2026 | 7
Test environment let anyone access live customer data
pwned Even a temporary staging server needs to be locked down.
Security17 Sep 2026 | 31
Ofcom discovers issuing Online Safety Act fines is easier than collecting them
security Platforms comply just enough to avoid being blocked, leaving the regulator chasing debt
Security17 Sep 2026 | 50
London property manager breach may have exposed bank details and lockbox codes
EXCLUSIVE City Relay says intruders accessed its Metabase Cloud instance twice and extracted customer data
Security17 Sep 2026 | 10
AI agents can modify themselves without humans telling them to do so
security This is a test - it is only a test
Security16 Sep 2026 | 17
CISA decides weekly vulnerability bulletin isn't necessary anymore
security Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28
Security16 Sep 2026 | 6
Google Pixel phones pwned in zero-click attacks
security CISA gives federal agencies just 3 days to patch
Security16 Sep 2026 | 21
Spain gets its first taste of AI-aided cyber attack
cyber-crime Data protection chiefs call for 'immediate review' of data protection models
Cyber-crime16 Sep 2026 | 6
Ministry of Justice apologizes after court staff accessed Southport victims' files
Security Sensitive personal data was involved, but there is no evidence it was shared with third parties
Security16 Sep 2026 | 13
Mythos has made 2026 patching hell. It might make 2027 a breeze
Security Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner
Patches16 Sep 2026 | 13
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Security September Patch Tuesday part 2?
Patches15 Sep 2026 | 11
Low-quality casino sites conceal highly dangerous threat actors
security Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites
Security15 Sep 2026 | 11
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
security 'Enemies of the regime' on notice
Cyber-crime15 Sep 2026 | 24
Cisco email security boxes can be rooted by... an email
security Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in
Security15 Sep 2026 | 16
Who's governing your AI? A trust framework for enterprise agents and models
SPONSORED FEATURE: DigiCert wants to hand every agent a passport, complete with an expiry date and a named human owner
Security15 Sep 2026 |
CenterPoint Energy confirms intruder helped themselves to customer information
cyber-crime Forum post claims 7.49 million files up for grabs as Texas utility investigates breach
Cyber-crime15 Sep 2026 | 2
Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler
security The man allegedly wrote the code that powered the Lockergoga, MegaCortex, and Nefilim operations
Security15 Sep 2026 | 12
The latest AI doomsayer is China’s intelligence boss
AI AND ML Beijing’s response is to ‘firmly grasp technological sovereignty’ and broad regulations
AI and ML15 Sep 2026 | 3
HBO Max Reddit account compromised to serve ClickFix attacks
cyber-crime Part of a 'massive 48-hour malvertising blitz' targeting macOS and Windows machines with malware
Cyber-crime14 Sep 2026 | 3
New hardware device can RAM into encrypted memory, expose your data
SECURITY Attackers would need physical access to the server to pull off the DDR5 trick
Security14 Sep 2026 | 10
OpenAI's malicious bot swarm attacked RubyGems
Security Ruby are you ok? Ruby are you ok? Are you ok Ruby?
Security14 Sep 2026 | 12
Cyberattack sends International Meteor Organization crashing back to Earth
cyber-crime Attack dealt a 'critical blow' to aging infrastructure, with several weeks of disruption expected
Cyber-crime14 Sep 2026 | 11
Perfect-10 GitLab bug under attack days after patch lands
security CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
Security14 Sep 2026 | 7
Revolut falls for fake government requests, hands over customer data
cyber-crime Passports, selfies, transaction histories exposed as self-proclaimed culprits demand 10,000 Bitcoin
Cyber-crime14 Sep 2026 | 60
UK.gov begins killing off passwords for 23 million users
Security Passkeys promise fewer phishing headaches – and £600 a day off Whitehall's SMS bill
Security14 Sep 2026 | 69
Security through obscurity is dead, and AI delivered the fatal blow
security RIP, you won't be mourned
Security13 Sep 2026 | 73
More JFrog Artifactory bugs under attack, and all 3 have patches
security If you're waiting for a sign to upgrade to a fixed version: this is it
Cyber-crime11 Sep 2026 | 2
AT&T store worker gets 16 months inside for SIM-swap side hustle
cyber-crime Phone shop staffer claimed he was paid less than $4,000 for attacks leading to combined intended losses of $600,000
Cyber-crime11 Sep 2026 | 4
Ukrainian lawyer's second career as a Conti coder earns him 4 years behind bars
CYBER-CRIME Swapping legal work for malware development ended in extradition and a guilty plea
Cyber-crime11 Sep 2026 | 9
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
Security Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform
Security11 Sep 2026 | 8
Latest Anthropic horror story chills with tales of kamikaze drone swarms and bioweapons research
security Everyone from ShinyHunters to Russian freelancers is in on the illicit model fun
AI and ML10 Sep 2026 | 28
Watch out: Apple timepiece can grab snippets of conversation without both speakers' consent
SECURITY War is peace. Freedom is slavery. Privacy is surveillance
Security10 Sep 2026 | 46
Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script
security Human operator: don't touch CIS orgs. AI agents: look a squirrel!
Cyber-crime10 Sep 2026 | 7
ShinyHunters expose 6.4M in attack on medical supplier McKesson
Security Have I Been Pwned logs leaked records spanning patients, staff, and providers
Security10 Sep 2026 |
Trezor, BitBox users targeted in newsletter phishing spree
cyber-crime Attackers exploit legitimate mailing channels to demand crypto wallet backups
Cyber-crime10 Sep 2026 | 7
Dental contractor set up secret account with access to 4,000 patient records then left the company
SECURITY Toothless security
Security10 Sep 2026 | 19
Anthropic reveals fourth likely crime committed by its AI
ai and ml Claude's Felony Bench rap sheet is now as long as OpenAI's
AI and ML09 Sep 2026 | 40
Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits
Security Mind the patch gap, please and thank you
Research09 Sep 2026 | 1
Serial Microsoft 0-day hunter drops yet another Defender exploit
security A bypass of a bypass of a bypass
Security09 Sep 2026 | 20
Cryptocrook ringleader, 22, who met crew on Minecraft admits role in $245M heist
cyber-crime Stolen funds bought mansions, private jets, and supercars – now he faces up to 20 years
Cyber-crime09 Sep 2026 | 16
WeChat worm could pwn a friend before they even answered the call
Security Calif says AI helped turn a VoIP memory bug into cross-platform RCE before Tencent shut it down
Security09 Sep 2026 | 1
Security boffin claims airport group left API keys in client-side JavaScript for four years
cyber-crime Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion
Cyber-crime09 Sep 2026 | 16
Microsoft breaks Patch Tuesday record with 974-CVE deluge
security Adobe also brought goodies to the patch party and they deserve immediate attention
Security09 Sep 2026 | 25
OpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attack
Security Researchers disclosed the cross-account trick the same day rogue agents exploited another zero-day for admin access
Security08 Sep 2026 | 3
Boston Scientific left nursing its bottom line after cyberattack
SECURITY Medical device giant warns August intrusion will hit Q3 and full-year sales and earnings as recovery drags on
Security08 Sep 2026 | 4
How to secure hybrid meeting rooms without sacrificing user experience
SPONSORED FEATURE: With regulators tightening rules and attack surfaces widening, meeting-room kit must bake in security without pushing users toward workarounds
Security08 Sep 2026 |
LG accused of 'egregious invasion of privacy' over TV data collection
Security Claims follow scrutiny over monitors installing adware without user consent
Security08 Sep 2026 | 125
BigBear phishing crew nets thousands of Microsoft 365 credentials
SECURITY Researchers got inside the crooks' admin panel and found 5,137 stolen records tied to 461 organizations
Security08 Sep 2026 | 1
Extortion crews have their eyes on high-value AI data, Google warns
RESEARCH Companies 'don't want their IP exposed, so they're willing to pay'
Research08 Sep 2026 | 2
Britain reboots its space strategy with £7.8B already on the launchpad
PUBLIC SECTOR Cross-government plan combines civil ambitions with an increasingly military view of orbit
Public Sector08 Sep 2026 | 21
Nightwing CEO has a Labor Day message for staff – and apparently The Register
security Nothing says ‘For internal use only’ quite like emailing it to the press
Security07 Sep 2026 | 50
Hackers drain $320M in Bitcoin from Liquid Network, claim they're the good guys
SECURITY Self-described white hats promise to return 'most' of the 4,000 BTC once the vulnerability is fixed
Security07 Sep 2026 | 9
Welsh environment regulator's FoI blunder exposes diversity data of 2,000 staff
Security NRW says it has found no evidence data was misused after spreadsheet published in error five years ago
Security07 Sep 2026 | 21