Firefox 153 contains itself while Thunderbird 153 fixes almost everything
Mozilla walls off your online identities as MZLA unleashes a bumper repair job
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
End-to-End Encryption and “Going Dark”
New paper: “Encryption and Globalization 15 Years Later: End-to-End Encryption and the Third Round of the ‘Going Dark’ Debate“: Abstract: This Article updates and expands on 2012 r…
Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses
Hackers recently obtained non-sensitive customer information and other documents from the company. The post Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract…
Stats watchdog prescribes stronger caveats for NHS Palantir claims
Health service told to ensure ministers don't mistake before-and-after comparisons for cause and effect
Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts
Google on Thursday announced a new way for users to sign-in to their accounts by letting them take a selfie video. The selfie for sign-in, per the tech giant, is another option on…
New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. [...]
Amazon's AGI department finds humans are optional
AI remains its biggest bet, Bezos brigade tells El Reg, even as another round of layoffs reaches the teams building it
Assaf Keren Appointed New CISO of Meta
He replaces Guy Rosen, who announced his retirement from the company after 13 years. The post Assaf Keren Appointed New CISO of Meta appeared first on SecurityWeek.
Microsoft working to fix Exchange Online mailbox quarantine issue
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes since Sunday. [...]
UK pumps £708 million into its future fighter jet
Tempest cash lands alongside hypersonic target contract and BAE's 'loyal wingman' drone reveal
New Check Point Zero-Day Vulnerability Exploited in the Wild
The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations. The post New Check Point Zero-Day Vulnerability Exploited in the Wild …
Britain isn't considering datacenters' thirst for water in its 'AI superpower' ambitions
Grand compute push could end up as dry as England's reservoirs unless ministers act fast
Check Point warns of SmartConsole zero-day exploited in attacks
Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel. [...]
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persisten…
Talking smack about a doctor got him access to private medical files
Who needs a working security badge when you know how to talk your way into the records room?
Brazilian Banking Trojan Actively Spreading in Portugal
Portuguese businesses operate in the same native language as Brazilian hackers, making those businesses easy targets.
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw t…
US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices
An updated advisory from federal agencies provides information on the techniques used to hack programmable logic controllers. The post US Warns of Iranian Hackers Targeting Siemens…
Senior White House official claims China’s K3 model stolen from Anthropic
And accuses Thailand hosting hardware that may have helped distillation attack
Google is hoarding TPUs to chase artificial general intelligence
Yet the Chocolate Factory is also buying more third-party compute capacity to handle high demand for the G-Cloud
Ransomware Attack Puts a Chill on Japanese Frozen-Food Chain
A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken.
Flaws in Passkey Implementation Show Old Attacks Still Work
Ahead of Black Hat USA, researchers find exploitable flaws in how Microsoft handles passkeys that could allow attackers to impersonate privileged users.
OpenAI scored an own goal with Hugging Face attack, showing how open Chinese models are winning
Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused
Upbound says hack caused $13 million in fraudulent Acima leases
The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases. [...]
Attackers Are Learning to Live Off the AI Toolchain
Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.
Google Cloud is killing it
It's Alphabet's fastest-growing business and now makes up more than a fifth of the juggernaut's revenue and operating profit
Web app turns your old phone into a new smart display
ScreenWall's creator tells El Reg he doesn't want those obsolete devices going to waste
South Korea discloses data breach impacting diplomats worldwide
South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former …
Sovereign AI is 'nonsense,' says Doctorow
As Trump dismantles the US-led world order, what the rest of the world really needs is sovereign apps and datacenters, argues 'enshittification' coiner
Fake Bahrain Alert App Deploys Android Surveillance Malware
A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.