Security News • The Register

Security

Open-source AI is a global security nightmare waiting to happen, say researchers

Infosec in Brief Also, South Korea gets a pentesting F, US Treasury says bye bye to BAH, North Korean hackers evolve, and more

Security01 Feb 2026 | 3

AI security startup CEO posts a job. Deepfake candidate applies, inner turmoil ensues.

'I did not think it was going to happen to me, but here we are'

CSO01 Feb 2026 | 22

January blues return as Ivanti coughs up exploited EPMM zero-days

Consider yourselves compromised, experts warn

Security30 Jan 2026 | 3

Thousands more Oregon residents learn their health data was stolen in TriZetto breach

Parent company Cognizant hit with multiple lawsuits

Cyber-crime30 Jan 2026 | 9

Java developers want container security, just not the job that comes with it

BellSoft survey finds 48% prefer pre‑hardened images over managing vulnerabilities themselves

Devops30 Jan 2026 | 13

Maybe CISA should take its own advice about insider threats hmmm?

opinion The call is coming from inside the house

Security29 Jan 2026 | 6

To stop crims, Google starts dismantling residential proxy network they use to hide

The Chocolate Factory strikes again, targeting the infrastructure attackers use to stay anonymous

Cyber-crime29 Jan 2026 | 17

AV vendor goes to war with security shop over update server scare

eScan lawyers up after Morphisec claimed 'critical supply-chain compromise'

Security29 Jan 2026 | 1

Seven habits that help security teams reduce risk without slowing delivery

The right habits change everything

ShinyHunters swipes right on 10M records in alleged dating app data grab

Extortion crew says it's found love in someone else's info as Match Group plays down the impact

Cyber-crime29 Jan 2026 | 1

Patch or perish: Vulnerability exploits now dominate intrusions

Apply fixes within a few hours or face the music, say the pros

Security29 Jan 2026 | 8

Cyberattack on Poland's power grid could have turned deadly in winter cold

Close call after an apparently deliberate attempt to starve a country of energy at the worst time

Cyber-crime29 Jan 2026 | 6

Ransomware crims forced to take off-RAMP as FBI seizes forum

Cybercrime solved. The end

Cyber-crime28 Jan 2026 | 1

Everybody is WinRAR phishing, dropping RATs as fast as lightning

Russians, Chinese spies, run-of-the-mill crims …

Cyber-crime28 Jan 2026 | 27

Fortinet unearths another critical bug as SSO accounts borked post-patch

More work for admins on the cards as they await a full dump of fixes

Security28 Jan 2026 | 3

Old Windows quirks help punch through new admin defenses

Google researcher sits on UAC bypass for ages, only for it to become valid with new security feature

Security28 Jan 2026 | 12

Paranoid WhatsApp users rejoice: Encrypted app gets one-click privacy toggle

Meta also replaces a legacy C++ media-handling security library with Rust

Security27 Jan 2026 | 34

Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim

Plus, the gang says it got in via Microsoft Entra SSO

Cyber-crime27 Jan 2026 | 3

China-linked group accused of spying on phones of UK prime ministers' aides – for years

Reports say Salt Typhoon attackers accessed handsets of senior govt folk

Cyber-crime27 Jan 2026 | 31

France to replace US videoconferencing wares with unfortunately named sovereign alternative

French govt says state-run service 'Visio' will be more secure. Now where have we heard that name before?

Software27 Jan 2026 | 98

Popular

'Ralph Wiggum' loop prompts Claude to vibe-clone commercial software for $10 an hour

Feature Developer behind it is sick with worry he might have changed software development in nasty ways

Euro firms must ditch Uncle Sam's clouds and go EU-native

Opinion Just because you're paranoid about digital sovereignty doesn't mean they're not after you

When AI 'builds a browser,' check the repo before believing the hype

Opinion Autonomous agents may generate millions of lines of code, but shipping software is another matter

Autonomous cars, drones cheerfully obey prompt injection by road sign

AI vision systems can be very literal readers

Banker claims Oracle may slash up to 30,000 jobs, sell health unit to pay for AI build-out

Cerner, though acquired in 2022, is nothing to multibillion black hole

Moscow likely behind wiper attack on Poland’s power grid, experts say

Cyber sleuths believe Sandworm up to its old tricks with a brand-new sabotage toy

How one developer used Claude to build a memory-safe extension of C

feature Robin Rowe talks about coding, programming education, and China in the age of AI

AWS's inevitable destiny: becoming the next Lumen

The cloud giant talks loudest about what scares it most. Here's what should terrify it

Systemd daddy quits Microsoft to prove Linux can be trusted

Lennart Poettering's Amutable aims to bring 'cryptographically verifiable integrity' to the other OS

France to replace US videoconferencing wares with unfortunately named sovereign alternative

French govt says state-run service 'Visio' will be more secure. Now where have we heard that name before?

MORE
STORIES

Microsoft illegally installed cookies on schoolkid's tech, data protection ruling finds

Updated Austrian education ministry unaware of tracking software until campaigners launched case

Applications27 Jan 2026 | 17

High Court to grill London cops over live facial recognition creep

Victim and Big Brother Watch will argue the Met's policies are incompatible with human rights law

Security27 Jan 2026 | 28

Office zero-day exploited in the wild forces Microsoft OOB patch

Updated Another actively abused Office bug, another emergency patch – Office 2016 and 2019 users are left with registry tweaks instead of fixes.

Security27 Jan 2026 | 6

Canva among ~100 targets of ShinyHunters Okta identity-theft campaign

Atlassian, RingCentral, ZoomInfo also among tech targets

Cyber-crime26 Jan 2026 | 3

EU looking into Elon Musk's X after Grok produces deepfake sex images

Probe follows outcry over use of creepy image generation tool

Personal Tech26 Jan 2026 | 27

Data thieves borrow Nike's 'Just Do It' mantra, claim they ran off with 1.4TB

US sports brand launches probe after extortion crew WorldLeaks claims it stole huge dataset

Cyber-crime26 Jan 2026 | 4

Moscow likely behind wiper attack on Poland’s power grid, experts say

Cyber sleuths believe Sandworm up to its old tricks with a brand-new sabotage toy

Cyber-crime26 Jan 2026 | 38

Oracle AI sailed the world on Royal Navy flagship via cloud-at-the-edge kit

Big Red says 'sovereign' platform supports decision-making and operational learning at sea

AI + ML26 Jan 2026 | 34

UK digital ID goes in-house, government swears it isn't an ID card

Minister dodges cost questions while promising smartphone-free access and 'robust' verification

Public Sector26 Jan 2026 | 84

Pwn2Own Automotive 2026 uncovers 76 zero-days, pays out more than $1M

infosec in brief Also, cybercriminals get breached, Gemini spills the calendar beans, and more

Security25 Jan 2026 | 7

UK border tech budget swells by £100M as Home Office targets small boat crossings

Drone, satellite, and other data combined to monitor unwanted vessels

Public Sector24 Jan 2026 | 26

Feds totally skipping infosec industry's biggest conference this year

updated But ex-CISA boss and new RSAC CEO Jen Easterly will be there

Security24 Jan 2026 | 7

Patch or die: VMware vCenter Server bug fixed in 2024 under attack today

If you skipped it back then, now’s a very good time

Patches23 Jan 2026 | 7

Surrender as a service: Microsoft unlocks BitLocker for feds

updated If you're serious about encryption, keep control of your encryption keys

Security23 Jan 2026 | 77

ShinyHunters claims Okta customer breaches, leaks data belonging to 3 orgs

'A lot more' victims to come, we're told

Cyber-crime23 Jan 2026 | 6

AI-powered cyberattack kits are 'just a matter of time,' warns Google exec

Security chief says criminals are already automating workflows, with full end-to-end tools likely within years

CSO23 Jan 2026 | 10

Fortinet admits FortiGate SSO bug still exploitable despite December patch

Fix didn't quite do the job – attackers spotted logging in

CSO23 Jan 2026 | 3

London boroughs limping back online months after cyberattack

Direct debits? Maybe February. Birth certificates? Dream on. Council tax bills? Oh, those are coming

Cyber-crime23 Jan 2026 | 12

Marching orders delayed: Veterans' Digital ID off to a slow start

Much owed to the few, but takeup is under 1%

Public Sector23 Jan 2026 | 66

Crims hit the easy button for Scattered-Spider style helpdesk scams

Teach a crook to phish…

Cyber-crime22 Jan 2026 |

Crims compromised energy firms' Microsoft accounts, sent 600 phishing emails

Logging in, not breaking in

Cyber-crime22 Jan 2026 | 2

FortiGate firewalls hit by silent SSO intrusions and config theft

Admins say attackers are still getting in despite recent patches

Cyber-crime22 Jan 2026 | 4

Europe's GDPR cops dished out €1.2B in fines last year as data breaches piled up

Regulators logged over 400 personal data breach notifications a day for first time since law came into force

Security22 Jan 2026 | 7

Bank of England: Financial sector failing to implement basic cybersecurity controls

Mind the cyber gap – similar flaws highlighted multiple years in a row

Security22 Jan 2026 | 5

Ancient telnet bug happily hands out root to attackers

Critical vuln flew under the radar for a decade

Patches22 Jan 2026 | 42

Another week, another emergency patch as Cisco plugs Unified Comms zero-day

The critical-rated flaw leaves unpatched systems open to full takeover

Networks22 Jan 2026 | 1

Davos discussion mulls how to keep AI agents from running wild

Where the shiny new FOMO object collides with insider-threat reality

Security21 Jan 2026 | 10

Don't click on the LastPass 'create backup' link - it's a scam

updated Phishing campaign tries to reel in master passwords

Cyber-crime21 Jan 2026 | 20

Everest ransomware gang said to be sitting on mountain of Under Armour data

Have I Been Pwned reckons 72.7M customer accounts affected, sportswear firm remains silent

Cyber-crime21 Jan 2026 | 6

EU considers whether there's Huawei of axing Chinese kit from networks within 3 years

Still dominant in Germany's networks, among others

Networks21 Jan 2026 | 16

Ireland wants to give its cops spyware, ability to crack encrypted messages

Its very own Snooper’s Charter comes a month after proposed biometric tech expansion

Security21 Jan 2026 | 34

Best of British: UK's infosec envoys include Cisco, Palo Alto, and Accenture

Minister unwraps ambassadors of the Software Security Code of Practice

Security21 Jan 2026 | 7

Curl shutters bug bounty program to remove incentive for submitting AI slop

Maintainer hopes hackers send bug reports anyway, will keep shaming ‘silly' ones

Security21 Jan 2026 | 10

Cloudflare whacks WAF bypass bug that opened side door for attackers

ACME validation had a challenge-request hole

Patches20 Jan 2026 | 1

Remember VoidLink, the cloud-targeting Linux malware? An AI agent wrote it

AI + skilled malware developers = security threat

Security20 Jan 2026 | 4

AI framework flaws put enterprise clouds at risk of takeover

Update Chainlit to the latest version ASAP

Security20 Jan 2026 | 4

Anthropic quietly fixed flaws in its Git MCP server that allowed for remote code execution

Prompt injection for the win

Patches20 Jan 2026 | 8

For the price of Netflix, crooks can now rent AI to run cybercrime

Group-IB says crims forking out for Dark LLMs, deepfakes, and more at subscription prices

Research20 Jan 2026 | 4

Akamai CEO wants help to defeat piracy, reckons he can handle edge AI alone

Interview OG CDN boss says fighting illegal streams is about stopping criminals cashing in, not free speech

Legal20 Jan 2026 | 12

Broker who sold malware to the FBI set for sentencing

Feras Albashiti faces 10 years after $20,000 in sales to undercover agent exposed ransomware ties

Cyber-crime19 Jan 2026 | 11

Don't underestimate pro-Russia hacktivists, warns UK's cyber crew

They’re not the most sophisticated, but even simple attacks can lead to costly consequences

Cyber-crime19 Jan 2026 | 24

Windows 11 shutdown bug forces Microsoft into out-of-band damage control

Ships emergency update to fix a Patch Tuesday misfire that prevented systems from switching off

OSes19 Jan 2026 | 48

Ingram Micro admits summer ransomware raid exposed thousands of staff records

Maine filing confirms July attack affected 42,521 employees and job applicants

Cyber-crime19 Jan 2026 |

UK prime minister stares down barrel of ban on social media for kids

Labour's latest U-turn? 61 backbenchers pile pressure for Starmer to back Tory peer's amendment

Public Sector19 Jan 2026 | 81

Warwickshire school to reopen after cyberattack crippled IT

Kids return to classrooms after safety infrastructure knocked out

Cyber-crime19 Jan 2026 | 45

Royal Navy's helicopter drone makes its first autonomous flight

Capable of carrying 1-ton payload and key to strategy protecting North Atlantic from Russian submarines

Public Sector19 Jan 2026 | 111

ATM maintenance tech broke the bank by forgetting to return a key

Who, Me? Bank staff wore the blame for a silly security slip

Security19 Jan 2026 | 140

Microsoft hiring energy strategists to power its Asian datacenters

Asia In Brief PLUS: ASUS gets into healthcare gadgets; Vietnam’s first fab; Australia's child social ban takes out 4.7 million accounts; And more!

Off-Prem19 Jan 2026 |

Mandiant releases quick credential cracker, to hasten the death of a bad protocol

Infosec In Brief PLUS: Navy spy sent to brig for 200 months; Black Axe busted again; Bill aims to crimp ICE apps; and more

Security18 Jan 2026 | 2

Fast Pair, loose security: Bluetooth accessories open to silent hijack

Sloppy implementation of Google spec leaves 'hundreds of millions' of devices vulnerable

Research17 Jan 2026 | 35

Sorry Dave, I’m afraid I can’t do that! PCs refuse to shut down after Microsoft patch

Microsoft claims it's a Secure Launch bug

Patches16 Jan 2026 | 113

German cops add Black Basta boss to EU most-wanted list

Ransomware kingpin who escaped Armenian custody is believed to be lying low back home

Cyber-crime16 Jan 2026 | 1

RondoDox botnet linked to large-scale exploit of critical HPE OneView bug

Check Point observes 40K+ attack attempts in 4 hours, with government organizations under fire

Cyber-crime16 Jan 2026 | 2

Bankrupt scooter startup left one private key to rule them all

Owner reverse-engineered his ride, revealing authentication was never properly individualized

Security16 Jan 2026 | 70

Probably not the best security in the world: Carlsberg wristbands spill visitor pics

Exclusive Researcher shows how anyone can access Copenhagen experience attendees' names, videos

Security16 Jan 2026 | 9

Cisco finally fixes max-severity bug under active attack for weeks

This is a threat to security - and to the weekend for some unlucky netadmins

Patches15 Jan 2026 | 2

Chinese spies used Maduro's capture as a lure to phish US govt agencies

What's next for Venezuela? Click on the file and see

Cyber-crime15 Jan 2026 | 20

Flipping one bit leaves AMD CPUs open to VM vuln

Fix landed in July, but OEM firmware updates are required

Security15 Jan 2026 | 23

Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork

Office workers without AI experience warned to watch for prompt injection attacks - good luck with that

Security15 Jan 2026 | 9

A simple CodeBuild flaw put every AWS environment at risk – and pwned 'the central nervous system of the cloud'

And it's 'not unique to AWS,' researcher tells The Reg

Research15 Jan 2026 | 12

US regulator tells GM to hit the brakes on customer tracking

Smart Driver pitched as safety app, but feds claim it's a data-harvesting scheme that jacked up premiums

Security15 Jan 2026 | 38

Woman bailed as cops probe doctor's surgery data breach

Suspect assisting West Midlands Police over alleged theft at Walsall GP practice

Security15 Jan 2026 | 24

Microsoft taps UK courts to dismantle cybercrime host RedVDS

Redmond says cheap virtual desktops powered a global wave of phishing and fraud

Cyber-crime15 Jan 2026 | 4

Ofcom keeps X under the microscope despite Grok 'nudify' fix

Cold milk poured over 'spicy mode,' but it might not be enough to escape a huge fine

AI + ML15 Jan 2026 | 21

AWS flips switch on Euro cloud as customers fret about digital sovereignty

EU-only ops, German subsidiaries, and a pinky promise your data won't end up in Uncle Sam's hands

PaaS + IaaS15 Jan 2026 | 76

CrowdStrike shareholders lose battle to recoup losses from 2024 outage

Investors didn't present a valid claim, says judge, but they're welcome to try again

Security14 Jan 2026 | 7

New Linux malware targets the cloud, steals creds, and then vanishes

Cloud-native, 37 plugins … an attacker's dream

Security14 Jan 2026 | 14

France fines telcos €42M for sub-par security prior to 24M customer breach

Three major GDPR violations, including a lack of basic security controls, lead to hefty dent in profits

Cyber-crime14 Jan 2026 | 10

'Imagination the limit': DeadLock ransomware gang using smart contracts to hide their work

New crooks on the block get crafty with blockchain to evade defenses

Research14 Jan 2026 | 2

Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients

Attack enters second day with major disruption to healthcare provision

Cyber-crime14 Jan 2026 | 5

Eurail passengers taken for a ride as data breach spills passports, bank details

Travel biz tells customers to change passwords beyond its own services

Cyber-crime14 Jan 2026 | 16

UK backtracks on digital ID requirement for right to work

U-turn leaves questions on costs, funding, and benefits unanswered

Public Sector14 Jan 2026 | 155

Spanish power giant sparks breach probe amid claims of massive data grab

Endesa says payment info stolen after alleged crook boasted of 1 TB-plus haul

Cyber-crime14 Jan 2026 | 10

Anthropic finds $1.5 million to help Python Foundation improve security

AI upstart also upscales its Labs to find the next frontier

Security14 Jan 2026 |

Windows info-disclosure 0-day bug gets a fix as CISA sounds alarm

First Patch Tuesday of 2026 goes big

Security14 Jan 2026 | 3

Popular Python libraries used in Hugging Face models subject to poisoned metadata attack

The open-source libraries were created by Salesforce, Nvidia, and Apple with a Swiss group

Patches13 Jan 2026 | 1

AI and automation could erase 10.4 million US roles by 2030

AI-pocalypse Forrester models slow, structural shift rather than sudden employment collapse

AI + ML13 Jan 2026 | 13

Dutch cops cuff alleged AVCheck malware kingpin in Amsterdam

33-year-old was under surveillance for some time before returning home from the UAE

Cyber-crime13 Jan 2026 | 7

Federal agencies told to fix or ditch Gogs as exploited zero-day lands on CISA hit list

Git server flaw that attackers have been abusing for months has now caught the attention of US cyber cops

Security13 Jan 2026 | 2

Mandiant open sources tool to prevent leaky Salesforce misconfigs

AuraInspector automates the most common abuses and generates fixes for customers

SaaS13 Jan 2026 |

The Register Biting the hand that feeds IT

About Us

Our Websites

Your Privacy

Situation Publishing

Copyright. All rights reserved © 1998–2025