Aggregated from vendor advisories, security research, and industry publications.
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of the packages in question is "lib-mtop," an unscoped package with the same name as a private Alibaba package
With NIST still buried under its backlog, expect AI-generated bogus reports to continue
Hugging Face has published a detailed timeline of the attack. From the summary: The agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchma…
N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]
Take a Network Break! We start with red alert for a serious vulnerability in HashiCorp’s Terraform MCP server. In the news, Anthropic, not wanting to be one-upped by OpenAI, reveal…
Over the past two decades, Nvidia has greatly expanded beyond its gaming GPU roots, delving into high-performance computing, entering the CPU business, establishing a dominant posi…
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victi…
The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN app…
AMD has answered Nvidia’s Rubin GPUv challenge with the introduction of the Instinct MI455X accelerator, its flagship processor designed for large-scale AI training and inference w…
Researchers intercepted and investigated the model, which was attempting to compromise more than 1,200 hosts for proxyjacking to launch further attacks.
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. The post Black Hat USA 2026 – Summary of Vendor An…
Keyloggers, audio-visual surveillance, and token theft on CaptivePortal's agenda as hospitality sector put on alert
The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud. The post Vi…
The list of people behind companies, foundations and trusteeships is part of efforts to combat money laundering and terror financing. The post Cyberattack Hits Liechtenstein’s Regi…
A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals. [...]
Flare researchers analyzed thousands of underground posts to examine how the BTMOB Android malware operation evolved into a fragmented ecosystem of resellers, source-code vendors, …
Taiwanese silicon biz believes it can take up to 20% of $80B market with upcoming ASIC chips, but analysts are sceptical
ExfilSquad claims 135,000 contact records weeks after hitting the Department for Education
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel network…
Accountability without any real authority is driving CISO burnout, and organizations need to take notice.
Turning two Mars testbeds into one lunar explorer may prove anything but cheap
Trump rejects Tehran theory, blames 'grossly incompetent' governor of Minnesota instead
The bank holding company was hacked in June, but the investigation into the incident continues. The post River Bank Says Hackers Deleted Data Stolen in Ransomware Attack appeared f…
Venture financing has become an essential factor in growing new business in today’s fast moving economy. Horizon3’s latest funding explains how and why. The post Horizon3 Raises $2…
Turns out letting anyone rewrite the planet with a prompt had drawbacks
Cato Networks has expanded the AI capabilities of its cloud-based secure access service edge (SASE) platform with Agentic Threat Prevention. This new service uses AI agents to pred…
The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass. The post N‑able Patches Vulnerability Exploited to Hack N-centra…
Weird times in earnings-land, and we're talking about it on The Reg's home grown podcast
The physical security firm says its alarm monitoring and system functionality have not been affected. The post Brinks Home Discloses Data Breach as Hackers Leak Files appeared firs…
AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude, Codex and Cursor are already helping security teams write det…