The Register Security

“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.

Vendor 'strongly recommends' upgrading to a fixed version 'as soon as possible'

We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4

Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise

SPONSORED FEATURE: AI makes phishing easier than ever

Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed

AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours

Misaligned incentives led to an intractable argument

Says it passed audits and made just a minor mystery error

'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg

Plus a RAT for good measure - get threat hunting now

Careful what you say after goodbye, or better yet, update your messaging app

Websites down as precaution as exploits have already been published

Consider this the wake-up call

Give your agents freedom to do useful work by locking them down

Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses 'absolutely substandard'

Massive clean-up job under way because this mess makes it possible to impersonate any website or service

IQ.Lvbs implies that rival Comma.ai isn't playing fair

Unit 42 investigates network compromises across numerous industries

From October 26, only high and critical cases stay private as project seeks help sharing the workload