Psst: wanna buy a legit FBI email account for $40?
Government and police employee credentials sold at bargain-basement prices on underground forums
Cyber-crime14 Aug 2025 | 6
Jessica is The Register's cybersecurity editor, leading our coverage of topics ranging from government IT to best practices for defenders. She also hosts video interviews with CxO-level veterans and other subject-matter experts on the challenges facing the IT industry. Jessica has more than 20 years of experience in publishing, with roles ranging from news editor to managing editor.
Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts
If there's smoke?
Patches13 Aug 2025 | 10
Microsoft's Patch Tuesday baker's dozen: 12 critical bugs plus a SharePoint RCE
None under active exploit…yet
Security12 Aug 2025 | 9
Manpower franchise discloses data theft after RansomHub posts alleged stolen data
And yes, there’s the usual credit monitoring
Cyber-crime12 Aug 2025 | 4
Oh, great. Three notorious cybercrime gangs appear to be collaborating
Scattered Spider, ShinyHunters, and Lapsus$ spent the weekend bragging to each other on a Telegram channel
Cyber-crime12 Aug 2025 | 1
Russia's RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks
A few weeks earlier 'zeroplayer' advertised an $80K WinRAR 0-day exploit
Cyber-crime11 Aug 2025 | 4
DEF CON hackers plug security holes in US water systems amid tsunami of threats
def con Five pilot deployments are just a drop in the bucket, so it's time to turbo scale
Security10 Aug 2025 | 43
Ex-White House cyber, counter-terrorism guru: Microsoft considers security an annoyance, not a necessity
Comment Tells The Reg China's ability to p0wn Redmond's wares 'gives me a political aneurysm'
CSO08 Aug 2025 | 40
Microsoft, CISA warn yet another Exchange server bug can lead to 'total domain compromise'
No reported in-the-wild exploits…yet
Patches07 Aug 2025 | 5
Microsoft researchers bullish on AI security agent even though it let 74% of malware slip through
UPDATED Project Ire promises to use LLMs to detect whether code is malicious or benign
AI + ML06 Aug 2025 | 9
Google says the group behind last year's Snowflake attack slurped data from one of its Salesforce instances
ShinyHunters suspected in rash of intrusions
Cyber-crime06 Aug 2025 | 1
Vibe coding tool Cursor's MCP implementation allows persistent code execution
More evidence that AI expands the attack surface
Security05 Aug 2025 | 4
Patch now: Millions of Dell PCs with Broadcom chips vulnerable to attack
black hat Psst, wanna steal someone's biometrics?
Patches05 Aug 2025 | 20
SonicWall investigates 'cyber incidents,' including ransomware targeting suspected 0-day
Bypassing MFA and deploying ransomware…sounds like something that rhymes with 'schmero-day'
Cyber-crime04 Aug 2025 | 1
Python-powered malware snags hundreds of credit cards, 200K passwords, and 4M cookies
PXA Stealer pilfers data from nearly 40 browsers, including Chrome
Cyber-crime04 Aug 2025 | 9
Silent Push CEO on cybercrime takedowns: 'It's an ongoing cat-and-mouse game'
interview Plus: why takedowns aren't in threat-intel analysts' best interest
Cyber-crime03 Aug 2025 | 3
China says US spies exploited Microsoft Exchange zero-day to steal military info
Spy vs. spy
CSO01 Aug 2025 | 11
Ex-CISA chief slams MAGA 'manufactured outrage' after sudden West Point firing
comment US Army Sec appears to fold under pressure from far-right conspiracy theorist
Public Sector31 Jul 2025 | 36
As ransomware gangs threaten physical harm, 'I am afraid of what's next,' ex-negotiator says
Crims warned 40% of respondents that they and their families would suffer
Cyber-crime31 Jul 2025 | 27
Kremlin goons caught abusing ISPs to spy on Moscow-based diplomats, Microsoft says
Russia spying on foreign embassies? Say it ain't so
Security31 Jul 2025 | 61
Minnesota governor calls in the troops after St Paul cyberattack
'This was a deliberate, coordinated, digital attack'
Cyber-crime30 Jul 2025 | 21
Palo Alto Networks inks $25b deal to buy identity-security shop CyberArk
The lure? Identity security and privileged access management tools to verify humans and... machines
Security30 Jul 2025 | 2
CISA caves to Wyden, agrees to release US telco insecurity report - but won’t say when
The security nerds' equivalent of the Epstein files saga
Security29 Jul 2025 | 3
FBI: Watch out for these signs Scattered Spider is spinning its web around your org
New malware, even better social engineering chops
Cyber-crime29 Jul 2025 | 11
Microsoft spotlights Apple bug patched in March as SharePoint exploits continue
Look over there!
Patches28 Jul 2025 | 1
Security pros are drowning in threat-intel data and it's making everything more dangerous
Plus, 60% don't have enough analysts to make sense of it
CSO28 Jul 2025 | 17
Blame a leak for Microsoft SharePoint attacks, researcher insists
Follow the MAPP
Security26 Jul 2025 | 13
Senator to Google: Give us info from telco Salt Typhoon probes
AT&T and Verizon refused to hand over the security assessments, says Cantwell
Security25 Jul 2025 | 6
Laptop farmer behind $17M North Korean IT worker scam locked up for 8.5 years
Plus she has to cough up a slice of Pyongyang’s payday
Cyber-crime24 Jul 2025 | 12
Microsoft: SharePoint attacks now officially include ransomware infections
Let the games begin
Cyber-crime24 Jul 2025 | 10
Coyote malware abuses Microsoft's UI Automation to hunt banking creds
Some coyotes hunt squirrels, this one hunts users' financial apps
Research24 Jul 2025 | 1
IRL Com recruits teens for real-life stabbings, shootings, FBI warns
From scams to violence, the crimes extend beyond the digital realm
Cyber-crime23 Jul 2025 | 17
Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks
US DOE among breached government agencies
Security23 Jul 2025 | 18
Funding for program to stop next Stuxnet from hitting US expired Sunday
CyberSentry work grinds to a halt
Security22 Jul 2025 | 7
Surprise, surprise: Chinese spies, IP stealers, other miscreants attacking Microsoft SharePoint servers
With more to come, no doubt
Cyber-crime22 Jul 2025 | 16
Dell scoffs at breach, says miscreants only stole ‘fake data’
No customer, partner info stolen, spokesperson tells The Reg
Cyber-crime21 Jul 2025 | 5
Another massive security snafu hits Microsoft, but don't expect it to stick
comment Move along, nothing to see here
Patches21 Jul 2025 | 14
Four new Android spyware samples linked to Iran's intel agency
Persians added snooping capabilities to DCHSpy after Israeli bombs fell
Cyber-crime21 Jul 2025 | 1
UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies
Fancy Bear can't keep its claws out of Outlook inboxes
Cyber-crime20 Jul 2025 | 33
Ex-IDF cyber chief on Iran, Scattered Spider, and why social engineering worries him more than 0-days
Interview Keep It Simple, Stupid
Cyber-crime19 Jul 2025 | 9
Google sues 25 alleged BadBox 2.0 botnet operators, all of whom are in China
Ads giant complains of damage to its reputation and finances ... and crime, too
Cyber-crime17 Jul 2025 | 8
Watch out, another max-severity, make-me-root Cisco bug on the loose
Updated Three perfect 10s in the last month - ISE, ISE, baby
Patches17 Jul 2025 | 16
Ukrainian hackers claim to have destroyed major Russian drone maker's entire network
'Deeply penetrated' Gaskar 'to the very tonsils of demilitarization'
Security16 Jul 2025 | 110
Operation Eastwood shutters 100+ servers used to DDoS websites supporting Ukraine
Two Russian suspects in cuffs, seven warrants out
Cyber-crime16 Jul 2025 | 13
Crims hijacking fully patched SonicWall VPNs to deploy stealthy backdoor and rootkit
Updated Someone's OVERSTEPing the mark
Research16 Jul 2025 | 3
Ex-US soldier who Googled 'can hacking be treason' pleads guilty to extortion
File this one under what not to search if you've committed a crime
Cyber-crime15 Jul 2025 | 17
Someone hijacked Elmo's X account to post antisemitic rants
Anyone investigated Grok? Just sayin'…
Cyber-crime14 Jul 2025 | 22
You have a fake North Korean IT worker problem – here's how to stop it
Thick resumes with thin LinkedIn connections are one sign. Refusing an in-person interview is another
Cyber-crime13 Jul 2025 | 120
Lovestruck US Air Force worker admits leaking secrets on dating app
Oh my sweet secret informant lover, what happened in that NATO meeting today?
Security10 Jul 2025 | 34
Now everybody but Citrix agrees that CitrixBleed 2 is under exploit
Updated Add CISA to the list
Patches10 Jul 2025 | 3
Ex-ASML engineer who stole chip tech for Russia gets three years in Dutch prison
'Whether those files were allowed to go to Russia? I didn't ask'
Cyber-crime10 Jul 2025 | 5
How to trick ChatGPT into revealing Windows keys? I give up
No, really, those are the magic words
Research09 Jul 2025 | 101
US sanctions alleged North Korean IT sweatshop leader
Turns out outsourcing coders to bankroll Kim’s nukes doesn’t jibe with Uncle Sam
Cyber-crime09 Jul 2025 | 4
Iranian ransomware crew reemerges, promises big bucks for attacks on US or Israel
Tells would-be affiliates they don't need to worry because cyberattacks don't violate a cease fire
Security09 Jul 2025 | 7
Massive browser hijacking campaign infects 2.3M Chrome, Edge users
updated These extensions weren't malware-laced from the start, researcher says
Research08 Jul 2025 | 39
Suspected Scattered Spider domains target everyone from manufacturers to Chipotle
Plus: Qantas makes contact with 'potential cyber criminal'
Security08 Jul 2025 | 3
CitrixBleed 2 exploits are on the loose as security researchers yell and wave their hands
NetScaler vendor issued a patch but otherwise, stony silence
Patches07 Jul 2025 | 6
Ex-NATO hacker: 'In the cyber world, there's no such thing as a ceasefire'
interview Watch out for supply chain hacks especially
Cyber-crime28 Jun 2025 | 61
Crims are posing as insurance companies to steal health records and payment info
Taking advantage of the ridiculously complex US healthcare billing system
Cyber-crime27 Jun 2025 | 6
Aloha, you’ve been pwned: Hawaiian Airlines discloses ‘cybersecurity event’
update 'No impact on safety,' FAA tells The Reg
Cyber-crime27 Jun 2025 |
Biting the hand that feeds IT
