Spyware disguised as emergency-alert app sent to Israeli smartphones
Steals SMS messages, location data, contacts … and delivers it to Hamas-linked crew
Cyber-crime06 Mar 2026 | 20
Jessica is The Register's cybersecurity editor, leading our coverage of topics ranging from government IT to best practices for defenders. She also hosts video interviews with CxO-level veterans and other subject-matter experts on the challenges facing the IT industry. Jessica has more than 20 years of experience in publishing, with roles ranging from news editor to managing editor.
Google says spyware makers and China-linked groups dominated zero-day attacks last year
Of the 90 zero-days GTIG tracked in 2025, 43 hit enterprise tech
Security05 Mar 2026 | 2
Iran intelligence backdoored US bank, airport, software outfit networks
MOIS-linked MuddyWater crew has a new, custom implant
Cyber-crime05 Mar 2026 | 18
'Hundreds' of Iranian hacking attempts have hit surveillance cameras since the missile strikes
Attack infrastructure attributed to 'several Iran-nexus threat actors'
Cyber-crime04 Mar 2026 | 33
Malware-laced OpenClaw installers get Bing AI search boost
Think before you download
Cyber-crime04 Mar 2026 | 6
Dev stunned by $82K Gemini bill after unknown API key thief goes to town
Probably not an isolated incident only as researchers have already found 2,863 live API keys exposed
Security03 Mar 2026 | 43
Lawmakers take pick to ICE's warrantless location tracking purchases
After DHS’s $2.3M PenLink contract gets ‘shady’ label
Public Sector03 Mar 2026 | 7
Phish of the day: Microsoft OAuth scams abuse redirects for malware delivery
Crims hope for payday from malicious payloads rather than stealing access tokens
Security03 Mar 2026 | 3
Iran's cyberwar has begun
'Expect elevated activity for the foreseeable future'
Cyber-crime02 Mar 2026 | 13
Denizens of DEF CON are 'fed up with government'
Interview Jake Braun thinks hackers need to create a 'Digital arsenal of democracy' to defend us all
Research28 Feb 2026 | 65
Double whammy: Steaelite RAT bundles data theft, ransomware in one evil tool
Credential and cryptocurrency theft, live surveillance, ransomware - an attacker's Swiss Army knife
Cyber-crime27 Feb 2026 |
Suspected Nork digital intruders caught breaking into US healthcare, education orgs
Who is knocking at the Dohdoor?
Cyber-crime27 Feb 2026 | 3
Claude collaboration tools left the door wide open to remote code execution
Anthropic fixed the flaws – but the AI-enabled attack surfaces remain
Research26 Feb 2026 | 4
Google catches Beijing spies using Sheets to spread espionage across 4 continents
UNC2814 historically targets governments and telcos
Cyber-crime25 Feb 2026 | 8
OpenAI says Chinese cops used ChatGPT to plan and track smear ops against opponents
Note to secret agents: ChatGPT is NOT a private diary
Cyber-crime25 Feb 2026 | 7
Patch these 4 critical, make-me-root SolarWinds bugs ASAP
SolarWinds + file transfer software = what attackers' dreams are made of
Patches24 Feb 2026 | 3
North Korea's Lazarus Group targets healthcare orgs with Medusa ransomware
New ransomware of choice, same critical targets
Cyber-crime24 Feb 2026 | 3
ICE watchers say agents used software to threaten and follow them home
'This is a warning. We know you live right here'
Legal23 Feb 2026 | 32
Infosec community panics as Anthropic rolls out Claude code security checker
ai-pocalypse Not the first of its kind
Security23 Feb 2026 | 17
PayPal app code error leaked personal info and a 'few' unauthorized transactions
About 100 customers affected
Cyber-crime20 Feb 2026 | 15
AI coding assistant Cline compromised to create more OpenClaw chaos
4K unintended installs in very odd supply chain attack
Security20 Feb 2026 | 7
ShinyHunters demands $1.5M not to leak Vegas casino and resort chain data
What happens in Vegas…
Cyber-crime20 Feb 2026 | 11
Crims create fake remote management vendor that actually sells a RAT
$300 a month buys you a backdoor that looks like legit software
Cyber-crime19 Feb 2026 | 13
Crims hit a $20M jackpot via malware-stuffed ATMs
FBI warns these cyber-physical attacks are on the rise
Cyber-crime19 Feb 2026 | 17
Adidas investigates third-party data breach after criminals claim they pwned the sportswear giant
'Potential data protection incident' at an 'independent licensing partner,' we're told
Cyber-crime18 Feb 2026 | 3
ShinyHunters claims it drove off with 1.7M CarGurus records
updated Latest in a rash of grab-and-leak data incidents
Cyber-crime18 Feb 2026 |
Fraudster hacked hotel system, paid 1 cent for luxury rooms, Spanish cops say
'First time we have detected a crime using this method,' cops say
Cyber-crime18 Feb 2026 | 19
China-linked snoops have been exploiting Dell 0-day since mid-2024, using 'ghost NICs' to avoid detection
Full scale of infections remains 'unknown'
Cyber-crime18 Feb 2026 | 10
China remains embedded in US energy networks 'for the purpose of taking it down'
Plus 3 new goon squads targeted critical infrastructure last year
Cyber-crime17 Feb 2026 | 13
How AI could eat itself: Competitors can probe models to steal their secrets and clone them
Just ask DeepSeek
AI + ML14 Feb 2026 | 51
Attackers finally get around to exploiting critical Microsoft bug from 2024
As if admins haven't had enough to do this week
Patches13 Feb 2026 | 13
30+ Chrome extensions disguised as AI chatbots steal users' API keys, emails, other sensitive data
Are you a good bot or a bad bot?
Security12 Feb 2026 | 15
Who's the bossware? Ransomware slingers like employee monitoring tools, too
As if snooping on your workers wasn't bad enough
Cyber-crime12 Feb 2026 | 12
Google: China's APT31 used Gemini to plan cyberattacks against US orgs
Meanwhile, IP-stealing 'distillation attacks' on the rise
Cyber-crime12 Feb 2026 | 10
Posting AI-generated caricatures on social media is risky, infosec killjoys warn
The more you share online, the more you open yourself to social engineering
Research11 Feb 2026 | 11
Payroll pirates are conning help desks to steal workers' identities and redirect paychecks
Exclusive Attackers using social engineering to exploit business processes, rather than tunnelling in via tech
Cyber-crime11 Feb 2026 | 19
Microsoft's Valentine's gift to admins: 6 exploited zero-day fixes
Roses are red, violets are blue ... now get patching
Patches10 Feb 2026 | 15
Microsoft boffins figured out how to break LLM safety guardrails with one simple prompt
Chaos-inciting fake news right this way
AI + ML09 Feb 2026 | 26
Someone's attacking SolarWinds WHD to steal high‑privilege credentials - but we don't know who or how
So many CVEs, so little time
Cyber-crime09 Feb 2026 | 5
OpenClaw reveals meaty personal information after simple cracks
Skills marketplace is full of stuff - like API keys and credit card numbers - that crims will find tasty
Security05 Feb 2026 | 12
Asia-based government spies quietly broke into critical networks across 37 countries
And their toolkit includes a new, Linux kernel rootkit
Cyber-crime05 Feb 2026 | 17
Three clues that your LLM may be poisoned with a sleeper-agent back door
It's a threat straight out of sci-fi, and fiendishly hard to detect
Security05 Feb 2026 | 38
AWS intruder achieved admin access in under 10 minutes thanks to AI assist, researchers say
UPDATED LLMs automated most phases of the attack
Cyber-crime04 Feb 2026 | 31
Critical SolarWinds Web Help Desk bug under attack
US agencies told to patch by Friday
Patches04 Feb 2026 | 4
AI agents can't yet pull off fully autonomous cyberattacks – but they are already very helpful to crims
Don't relax: This is a 'when, not if' scenario
Security03 Feb 2026 | 8
Critical React Native Metro dev server bug under attack as researchers scream into the void
Too slow react-ion time
Patches03 Feb 2026 | 4
Notepad++ hijacking blamed on Chinese Lotus Blossom crew behind Chrysalis backdoor
The group targets telecoms, critical infrastructure - all the usual high-value orgs
Cyber-crime02 Feb 2026 | 15
StopICE hacked to send alarming text messages, admins accuse border patrol agent of sabotage
The ICE-tracking service says it doesn't store usernames or addresses
Security02 Feb 2026 | 54
AI security startup CEO posts a job. Deepfake candidate applies, inner turmoil ensues
'I did not think it was going to happen to me, but here we are'
CSO01 Feb 2026 | 58
Thousands more Oregon residents learn their health data was stolen in TriZetto breach
Parent company Cognizant hit with multiple lawsuits
Cyber-crime30 Jan 2026 | 11
Maybe CISA should take its own advice about insider threats hmmm?
opinion The call is coming from inside the house
Security29 Jan 2026 | 6
Agents gone wild! Companies give untrustworthy bots keys to the kingdom
'We're letting thousands of interns run around in our production environment'
Agentic AI29 Jan 2026 | 20
Ransomware crims forced to take off-RAMP as FBI seizes forum
Cybercrime solved. The end
Cyber-crime28 Jan 2026 | 1
Everybody is WinRAR phishing, dropping RATs as fast as lightning
Russians, Chinese spies, run-of-the-mill crims …
Cyber-crime28 Jan 2026 | 27
Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim
Plus, the gang says it got in via Microsoft Entra SSO
Cyber-crime27 Jan 2026 | 3
Canva among ~100 targets of ShinyHunters Okta identity-theft campaign
Atlassian, RingCentral, ZoomInfo also among tech targets
Cyber-crime26 Jan 2026 | 3
Tech employees demand their leaders take a stand against ICE
But CEOs remain frozen in place
Public Sector26 Jan 2026 | 229
Feds totally skipping infosec industry's biggest conference this year
updated But ex-CISA boss and new RSAC CEO Jen Easterly will be there
Security24 Jan 2026 | 7
Patch or die: VMware vCenter Server bug fixed in 2024 under attack today
If you skipped it back then, now’s a very good time
Patches23 Jan 2026 | 7
ShinyHunters claims Okta customer breaches, leaks data belonging to 3 orgs
'A lot more' victims to come, we're told
Cyber-crime23 Jan 2026 | 6
Biting the hand that feeds IT
