Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Massive clean-up job under way because this mess makes it possible to impersonate any website or service
The Register Security
Auto tech startup claims it traced hack attempt back to rival's IP address
IQ.Lvbs implies that rival Comma.ai isn't playing fair
Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
Unit 42 investigates network compromises across numerous industries
Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'
From October 26, only high and critical cases stay private as project seeks help sharing the workload
'Password1' and a forgotten test account land Welsh outfits in hot water
ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children
Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
Whitehall shuts the front door on digital ID but leaves the back open
Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive
UK finance watchdog wants firms to report AI failures and close calls
FCA seeks clear accountability as financial services embrace increasingly autonomous agents
Why cyber resilience is now a boardroom priority for UK public services
PARTNER CONTENT: What happens after the inflection point?
ICANN testing tech to let law enforcement access non-public WHOIS info
Single sign-on to help address imminent threats to life, critical infrastructure, or kids
DeepSeek deep-sixed at all US federal civilian agencies
Order disallowing use of Chinese AI service is unhelpfully vague and broad
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Second security snafu in two years
Security patches need patches now that attackers have AI
Terra finds sharp rise in GitHub security fixes reported broken within 90 days
ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
Huntress alleges takeover of M365 accounts
Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
Cybercrims go beyond stealing data to attack physical building systems
'Hold my beer, have fun getting into your offices'
Networking problems after the October 2026 Windows update? NTLM might be to blame
Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going
Attack on BAE-managed system disrupts US bankruptcy courts
Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice
Thief snatches school snapper's SD cards in smash & grab
UK school admits data protection bungle as children's data at risk
User refused to change her password because everyone already knew it
School staff seemed to be trying to get ransomware – for a second time
Articles from www.theregister.com
Subscribe to The Register Security feed
#channel