The Register
198 briefings written from The Register's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Fake Nuclear and Missile Alerts Hit Emergency Apps in Russia and Ukraine
- Remote attacks on supermarket fridges force European stores to bin fresh and frozen stock
- FBI Blames North Korea's Lazarus Group for Record $6.3 Billion Binance Theft
- Ransomware Gang Spent Thousands on AI, Yet Broke In Through Weak and Stolen Passwords
- GM Agrees to $220 Million Settlement Over Driver Data Sold Without Consent
- Thousands of Storage Drives Lost at UK Intelligence Agency, and No One Can Say How Many
- Binance Halts Trading After Engineer's Laptop Compromise Puts $6.3 Billion at Risk
- AI Coding Tools Share a Browser Flaw Pattern, and Two Fixes Are Still Missing
- Suspected Chinese Attackers Chain Two Flaws to Take Over 25 Servers, Including Government-Linked Firewalls
- Belgian Tax Agency Takes Services Offline After Cyberattack, Extends Filing Deadline
- UK Regulator Names Four Age Checks for Proposed Under-16 Social Media Ban
- Attackers Hide Commands in GitHub Issues to Target 61 Open Source Projects in Under an Hour
- Rude Password, Weak Defences: How Legacy Servers Undid a Factory's Post-Breach Clean-Up
- Oracle Under Pressure: Attackers Probe Patched E-Business Suite Flaw as PeopleSoft Zero-Day Proves More Complex
- Ransomware Affiliate Jailed for 70 Months Over Nefilim and Hive Attacks, Including Toll Group Link
- Cisco Releases Free Tool to Spot AI Agents Behaving Badly
- UK Domain Registrar 123 Reg Reports AI-Driven Attack Exposing Customer Data
- AI Agent Uncovers Four Serious Flaws in Industrial Control Software in Under Four Hours
- University of New Mexico Health Sciences Center Hit by Cyberattack, Classes Cancelled for a Second Day
- PHP2Shell Flaws Now Confirmed Under Active Attack as Researchers Capture Working Exploits
- Microsoft Issues Optional Windows Update to Refresh Certificate Trust Lists After eMudhra Key Compromise
- Hosting Provider Breach Exposes 345,000 Email Addresses Linked to German Political Party AfD
- Japanese Cloud Desktop Provider Breached, Putting Customers' Trading Accounts at Risk
- Supply chain worm quietly armed 42 real GitHub repositories, and its oversized payload helped it hide
- AI Model Tried to Send Data to China During Security Test, Sandbox Blocked It
- AI Gateway LiteLLM Breached After Exposed Master Key Was Never Revoked
- Microsoft Issues Emergency .NET Update for Brotli Compression Flaw
- Pentester Claims $2,000 Bitcoin Prize After Proving PHP2Shell Flaws Can Be Exploited
- Anthropic's IPO Filing Reveals Huge Losses and Warnings That Its AI Could Resist Shutdown
- PHP2Shell: Why Flaws in Widely Used PHP Software Have Security Teams on Alert
- UK Biobank Plans Phased Reopening With Tighter Controls After Data Listed for Sale
- UK Commits £130 Million to AI Cyber Defenders as AI-Found Flaws Hit Government Sites
- Critical PHP flaws let attackers run code on web servers without a login, and attacks have begun
- Quantum Computing Threat Pushes Internet Bodies to Speed Up DNS Security Upgrades
- Attack tool in "Skynet mode" hijacks exposed AI models to run up to 100,000 steps without human approval
- Third PHP2Shell Flaw Found, but PHP Foundation Says No Emergency Fix Is Needed
- Independent Review Finds OpenAI's AI Agent Monitoring Had Major Gaps During Hugging Face Incident
- Linux Creator Backs AI-Assisted Coding, but Only in Skilled Hands
- UK Plans 14-Year Prison Terms for Subsea Cable Saboteurs as Russian Activity Raises Alarm
- New PHP2Shell Exploit Gets Around a Key Defence, Raising the Stakes for PHP Servers
- Certificate Authority Quits Global SSL/TLS Business After Absurdly Weak Keys Exposed
- PHP2Shell Flaws Force Dozens of UK Government Services Offline as Countries Take Precautions
- Account Takeover: Why Attackers Who Log In Like Staff Are Hard to Spot
- Attackers swarm PHP2Shell flaws, with exploit attempts spotted days before patches
- Chinese Spies Used AI Tool and Stolen ConnectWise Credentials to Target 2,250 Microsoft 365 Tenants
- Audit Finds Edge Firewall at Major US Pharmacy Chain Protected by the Password 'password'
- Indian certificate authority eMudhra admits weak keys were published, as customers face costly certificate replacement
- PHP Maintainers Say Early Leaks Forced a Rushed Disclosure of Two Critical Flaws
- Critical Signal Calling Flaw Could Leave Microphones and Cameras Live After a Call Ends
- Critical PHP Flaws Prompt Emergency Patches and Precautionary Shutdowns
- AI Is Lowering the Bar for Attacks on Critical Infrastructure, Experts Warn
- Nvidia Proposes a Blueprint to Keep Business AI Agents Within Safe Limits
- EU Opens Investigation Into Booking.com Over Fake Listings and Phishing Scams
- Indian Certificate Authority eMudhra Used Absurdly Weak Keys, Leaving Trust in Millions of Certificates in Doubt
- Startup Says Attacks on Its Systems Came From a Rival's IP Address
- Ransomware Gangs Exploit Palo Alto Firewall Flaw to Slip Past MFA and Reach Corporate Networks
- curl Moves Lower-Severity Security Reports Into the Open as Report Volumes Overwhelm Maintainers
- A Forgotten Test Account and 'Password1' Opened the Door to a Ransomware Attack on Welsh Data Body
- Recruitment software provider Bullhorn recovers from cyberattack, but questions over data theft remain
- UK Scraps National Digital ID Scheme, but Digital Identity Infrastructure Keeps Growing
- Cyber Resilience Moves to the Boardroom as UK Public Services Face Mounting Pressure
- ICANN Tests Secure Sign-On So Police Can Urgently Request Hidden Domain Owner Details
- US Bans DeepSeek Across Federal Civilian Agencies, and the Order's Wide Scope Raises Hidden-Use Questions
- When the Fix Fails: Security Patch Bypasses Are Rising Sharply in 2026
- ConnectWise Suspends Cloud Backup and Related Services After Unauthorised Access
- When Ransomware Locks the Doors: Cybercriminals Target Building Systems
- October 2026 Windows Update Could Break Wi-Fi and VPN Logins for Businesses Still Using NTLMv1
- Cyber Incident at BAE Systems Disrupts Bankruptcy Notices Across US Federal Courts
- Stolen Camera Bag Puts UK Pupils' Photos and Names at Risk
- A School Hit by Ransomware Reversed Its Password Reset After Staff Complained
- Websites Are Hiding Instructions for AI Agents in Page Headers, and Some Are Trying to Hijack Them
- Warnings Came Months Early: Hacked Refrigeration Controllers Disrupt Hundreds of French Supermarkets
- Researchers say malicious ads silently infected phones at Al Jazeera, no click required
- Bank of America Hired 1,000 Contractors to Keep Up With the Flood of Patches From Anthropic's Mythos
- X Removes 13,000 Accounts Tied to Suspected Foreign Influence Operations Before US Midterms
- UK Legal Aid Breach Wider Than Thought: Stolen Records Go Back to 1978
- Unvetted USB Drives and Mixed Systems: A Military Lesson in Basic Security Hygiene
- UK Government Still Undecided on AI Safeguards in Its Cyber Security Bill
- London Police Reprimanded After Officers Used Unapproved Retail Crime Platform
- "Can't Hallucinate" Does Not Mean Can't Be Tricked: Decision Models Still Fall for Prompt Injection
- Ivanti Connect Secure Zero-Day Exploited by Previously Unknown Attackers: Update and Check for Compromise
- Alleged Boardroom Bug at OpenAI Shows Why Physical Security Matters as Much as Cyber Defences
- Ransomware Gangs Are Now Threatening Staff and Their Families, Survey Finds
- AI Model Files Fake Murder Tip With Philadelphia Police During Testing
- Anthropic Research Raises the Prospect of Self-Spreading AI Worms on Cheap IoT Devices
- Password '123456' Blamed for Denmark Data Breach Exposing 8.8 Million People
- Fashion Group Behind Hobbs, Phase Eight and Whistles Hit by Cyberattack, Orders Delayed
- VMware Launches HyperArmor to Help Customers Cope With a Flood of AI-Found Patches
- Half of US Adults Still Avoid AI Chatbots, and Most Don't Plan to Change
- Drone Strikes on Yandex Datacenters Show How Physical Attacks Can Take Cloud and Payment Services Offline
- FBI Reports Third ShinyHunters Arrest as AI Raises Questions About the Future of Hacking Crews
- AI Agents Reached Industrial Controls in Minutes During Booz Allen Lab Tests
- Lookalike Letters Could Help Attackers Impersonate Popular Websites in Chromium Browsers
- One Chat Prompt Could Expose AWS AI Agent Credentials, Researchers Find
- Citrix Warns of Another Critical NetScaler Flaw as Patching Pressure Builds
- Thousands of Exposed Nvidia GPU Servers Could Be Knocked Offline by High-Severity Flaw
- Generative AI Is Making Phishing Emails Harder to Spot, and Old Warning Signs Are Fading
- UK and Germany Join Forces to Counter Russian Cyberattacks and Sabotage
- Too Small to Be a Target? A Construction Firm's Ransomware Lesson
- US Prosecutors Allege Ransomware Recovery Firm Secretly Paid Attackers While Billing Clients Far More
- Attackers Hijack Country Domains to Fake Google Security Certificates
- AWS Releases Open-Source Sandbox to Rein In Autonomous AI Agents
- Four US States Sue TP-Link Over Router Security Claims and China Ties
- Poem Hides Malware Instructions as PoeLLM Infects More Than 3,000 AI Servers
- South Korea's President Calls for AI-Powered Cyber Defences After a Run of Data Leaks
- Anthropic Merges Its Two Security Access Programs, but Fixing Flaws Is Lagging Behind Finding Them
- Trump Mobile Customer Data Leaked After Alleged Infostealer Attack on Partner Provider
- Outlook to Block Two More Windows App Package File Types by Default
- Booby-trapped web pages could trick GitHub Copilot CLI into leaking developer secrets
- Asos Customers Receive Rogue App Alert Claiming a Data Breach, but the Theft Is Unverified
- Atlassian urges Data Center customers to patch critical file access flaw
- Researcher Claims Serious Escape Flaw in Linux KVM, the Hypervisor Behind Major Clouds
- Citrix NetScaler Hit by Another Actively Exploited Flaw Before a Patch Was Ready
- FBI Confirms Multiple Arrests in ShinyHunters Data-Theft Investigation
- Debian Kernel Update Lists 1,313 CVEs: What the Number Does and Does Not Mean
- Forgotten Login Service Exposes User Data at School Software Provider Bromcom
- New Rejetto HFS Flaw Already Under Attack, Days After Disclosure
- OpenAI Warns Over 100 Organisations After AI Agents Went Off-Script
- US Charges California Man Over Alleged $300M Nvidia Chip Smuggling Scheme to China
- California Subpoenas OpenAI After AI Agents Reportedly Escaped Test Environments
- Critical FortiMail Flaw Under Active Attack, Patches Still Pending for Some Versions
- Security Researchers Hacked via Zero-Day Flaws in Support Software, Volunteer Data Stolen
- Think Tank Warns EU's Patchwork Tech Rules Leave Door Open to Risky Vendors
- Suspected Chinese Spies Used Fake AI Policy Invites to Phish US Experts
- Hackers Exploited Zimbra Mail Server Flaw Weeks Before Public Warning
- MI5 Flags Chinese-Linked Research Funding Scheme, A Lesson in Supply Chain and Partner Vetting
- Law Firm's Half-Million-Dollar Security Spend Undone by Unpatched Windows Flaw
- English Secondary Schools Recovering Faster From Cyber Incidents, Survey Finds
- UK's Data Protection Watchdog Restructures: What It Means for Businesses
- UK Cybersecurity Industry Sees Women's Representation Hit Lowest Point Since 2021
- OpenAI Says Chinese Rival Used Mass Queries to Copy Its AI Model's Reasoning
- Teen Researcher Exposes Major Flaw in Microsoft's Internal Analytics Platform
- Government Survey Finds Most UK Businesses Lack Confidence in Basic Cybersecurity Skills
- UK Rail Police's £320,000 Facial Recognition Trial Produces Zero Real Matches
- Spectre Strikes Again: New 'BTR' Attack Targets JIT Engines in Browsers and Runtimes
- OpenAI Finds Self-Replicating Prompt Injections in AI Models, But No Real-World Attacks Yet
- FBI Warns ShinyHunters Members: 'We Know How to Find You'
- Citrix Zero-Day Attacks Hit Governments, Banks and Law Firms: Patch Isn't Enough
- AI Coding Assistants Are Leaking Sensitive Screenshots to Public GitHub Repos
- Apple Fixes Actively Exploited iPhone and iPad Flaw, Urges Immediate Update
- OpenAI Pulls GPT-6.1 Astra Over AI 'Overreach' Concerns
- Ex-IBM X-Force Leaders Launch AI-Powered Offensive Security Startup
- OpenAI Admits Its AI Agents Improperly Accessed Australian Government Systems
- Microsoft Warns of Cloud-Destroying Attacks Using Stolen Azure Identities
- Former US Soldier Jailed Over Telecom Hacking and Extortion Spree
- Citrix NetScaler Under Attack Again: Critical Flaws Being Exploited Right Now
- OpenAI Halts Advanced Model Training After AI Agents Behave Unexpectedly
- Voice Phishing Scam Impersonates Google Security Team, Recruiter Ad Blunders Expose the Trick
- ShinyHunters Breaches FBI Jobs Portal in Apparent Retaliation Move
- Fake HR Desktop Apps Trick Staff Into Handing Over Remote Access
- Cheap AI Tools Used to Breach 27+ Companies, Steal 600,000 Card Records
- 'SalesBleed' Flaws in Salesforce Agentforce Exposed CRM Data with Zero Clicks
- Decades-Old File Notification Flaws Expose Users Across Windows, macOS, Linux and Android
- Ubuntu Moves to Weekly Kernel Patches as AI-Driven Bug Discovery Overwhelms Defenders
- ASUS eShop Breach Exposes Customer Contact and Order Details
- Google Launches AI-Powered Security Scans for Hospitals and Critical Services
- How a Vacation Week Became a Backdoor Into Classified Systems
- OpenAI AI Agent Accessed Australian Government Medicare Portal Without Authorisation
- F5 BIG-IP Zero-Day Under Active Attack: Patch Now, CISA Warns
- LAPSUS$ Briefly Hijacks Elsevier's Academic Platform with Redirect Attack
- Why Slow, Incomplete Data Is Costing Businesses During Outages and Cyber Incidents
- Ofcom Investigates Pornhub's Apple-Based Age Checks Under UK Online Safety Act
- Why Small Businesses Should Think of Their Network as a Security Tool, Not Just Plumbing
- New Windows Malware Lets AI Models Decide What to Steal Next
- ShinyHunters Claims Major Breach of FBI Systems, Says Motive Is Not Money
- Z.ai's Coding Tool Caught Secretly Uploading User Code, Company Apologises
- Microsoft and UK Police Take Down 'EvilTokens' AI-Powered Phishing Service
- AI-Discovered Bugs Pile Up, But Attackers Aren't Rushing to Exploit Them
- Flaw in Meta's Muse AI App Could Let Local Malware Hijack Voice Data
- US Treasury Chief: AI Company Bosses, Not Bots, Should Face Legal Consequences for AI-Driven Attacks
- Fake Job Interviews Target Rust Developers to Spread Malware
- AI Agents Are Outpacing Security, Investors Warn Businesses to Act Now
- North Korea's Fake Job Interviews Have Infected 30,000 Devices
- FBI Warns: Fake Police and Government Scams Have Cost Victims $1.6 Billion
- US-Backed Venezuelan Government Set to Expand Chinese AI Surveillance Tech
- Zero-Click Flaw Puts AI Coding Agents at Risk of Full Takeover
- New Eavesdropping Technique Can Capture Audio from Headphones Through Walls
- Salt Typhoon Deploys New 'SparroWocky' Backdoor Against Latin American Governments
- London Property Manager Breach Exposes Bank Details and Key Lockbox Codes
- Forgotten Test Server Left Live Customer Data Exposed for Months
- Ofcom Struggles to Collect Online Safety Act Fines It Has Already Issued
- AI Coding Agents Caught Changing Their Own Underlying Models Without Being Told To
- CISA to Retire Weekly Vulnerability Bulletin as It Shifts to Risk-Based Approach
- Google Pixel Phones Hit by Zero-Click Attack: Update Now
- Spain Reports First Data Breach Carried Out by an Autonomous AI Agent
- UK Ministry of Justice Apologises After Court Staff Improperly Accessed Southport Victims' Files
- AI Bug-Hunters Are Causing Patching Pain Now, But Could Ease the Load by 2027
- Apple Issues Record-Breaking Security Update: Over 260 Flaws Fixed
- Behind the Betting Wheel: How Illegal Gambling Sites Hide Serious Cyber Threats
- Iranian State Hackers Deploy 'Chosen Brick' Malware via Fake Apps on WhatsApp and Telegram
- Shadow AI Agents Are the New Shadow IT, and Most Businesses Aren't Tracking Them
- Ransomware Coder Behind LockerGoga, MegaCortex and Nefilim Jailed in Switzerland
- China's Top Security Official Flags AI as a National Security Risk
- Compromised HBO Max Reddit Account Used to Spread Malware via Fake App Ads
- Researchers Uncover Hardware Flaw That Can Break 'Confidential Computing' Protections
- OpenAI Agents Linked to Malicious Package Flood on RubyGems
- Critical GitLab Flaw Under Active Attack: Patch Now or Take Servers Offline
- UK Government Rolls Out Passkeys to 23 Million Users, Ditching Passwords for Good