Fast Pair, loose security: Bluetooth accessories open to silent hijack
Sloppy implementation of Google spec leaves 'hundreds of millions' of devices vulnerable
Research17 Jan 2026 | 5
Security
Sorry Dave, I’m afraid I can’t do that! PCs refuse to shut down after Microsoft patch
Microsoft claims it's a Secure Launch bug
Patches16 Jan 2026 | 71
German cops add Black Basta boss to EU most-wanted list
Ransomware kingpin who escaped Armenian custody is believed to be lying low back home
Cyber-crime16 Jan 2026 |
RondoDox botnet linked to large-scale exploit of critical HPE OneView bug
Check Point observes 40K+ attack attempts in 4 hours, with government organizations under fire
Cyber-crime16 Jan 2026 | 2
Bankrupt scooter startup left one private key to rule them all
Owner reverse-engineered his ride, revealing authentication was never properly individualized
Security16 Jan 2026 | 37
Probably not the best security in the world: Carlsberg wristbands spill visitor pics
Exclusive Researcher shows how anyone can access Copenhagen experience attendees' names, videos
Security16 Jan 2026 | 7
Cisco finally fixes max-severity bug under active attack for weeks
This is a threat to security - and to the weekend for some unlucky netadmins
Patches15 Jan 2026 | 2
Chinese spies used Maduro's capture as a lure to phish US govt agencies
What's next for Venezuela? Click on the file and see
Cyber-crime15 Jan 2026 | 20
Flipping one bit leaves AMD CPUs open to VM vuln
Fix landed in July, but OEM firmware updates are required
Security15 Jan 2026 | 17
Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork
Office workers without AI experience warned to watch for prompt injection attacks - good luck with that
Security15 Jan 2026 | 9
A simple CodeBuild flaw put every AWS environment at risk – and pwned 'the central nervous system of the cloud'
And it's 'not unique to AWS,' researcher tells The Reg
Research15 Jan 2026 | 11
US regulator tells GM to hit the brakes on customer tracking
Smart Driver pitched as safety app, but feds claim it's a data-harvesting scheme that jacked up premiums
Security15 Jan 2026 | 36
Woman bailed as cops probe doctor's surgery data breach
Suspect assisting West Midlands Police over alleged theft at Walsall GP practice
Security15 Jan 2026 | 24
Microsoft taps UK courts to dismantle cybercrime host RedVDS
Redmond says cheap virtual desktops powered a global wave of phishing and fraud
Cyber-crime15 Jan 2026 | 4
Ofcom keeps X under the microscope despite Grok 'nudify' fix
Cold milk poured over 'spicy mode,' but it might not be enough to escape a huge fine
AI + ML15 Jan 2026 | 21
AWS flips switch on Euro cloud as customers fret about digital sovereignty
EU-only ops, German subsidiaries, and a pinky promise your data won't end up in Uncle Sam's hands
PaaS + IaaS15 Jan 2026 | 69
New Linux malware targets the cloud, steals creds, and then vanishes
Cloud-native, 37 plugins … an attacker's dream
Security14 Jan 2026 | 14
France fines telcos €42M for sub-par security prior to 24M customer breach
Three major GDPR violations, including a lack of basic security controls, lead to hefty dent in profits
Cyber-crime14 Jan 2026 | 10
'Imagination the limit': DeadLock ransomware gang using smart contracts to hide their work
New crooks on the block get crafty with blockchain to evade defenses
Research14 Jan 2026 | 2
Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients
Attack enters second day with major disruption to healthcare provision
Cyber-crime14 Jan 2026 | 5
Popular
Sorry Dave, I’m afraid I can’t do that! PCs refuse to shut down after Microsoft patch
Microsoft claims it's a Secure Launch bug
Engineer used welding shop air hose to 'clean' PCs – hilarity did not ensue
On Call How not to maintain computers
Flipping one bit leaves AMD CPUs open to VM vuln
Fix landed in July, but OEM firmware updates are required
Chinese spies used Maduro's capture as a lure to phish US govt agencies
What's next for Venezuela? Click on the file and see
Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork
Office workers without AI experience warned to watch for prompt injection attacks - good luck with that
Cisco finally fixes max-severity bug under active attack for weeks
This is a threat to security - and to the weekend for some unlucky netadmins
Bankrupt scooter startup left one private key to rule them all
Owner reverse-engineered his ride, revealing authentication was never properly individualized
Over half of AI projects are shelved due to complex infrastructure
The answer seems to be educating the enterprise workforce, and creating smarter use cases
Ready for a newbie-friendly Linux? Mint team officially releases v 22.3, 'Zena'
Newer kernel, newer Cinnamon, new tools, and even new icons
Meta retreats from metaverse after virtual reality check
That went well
STORIES
Eurail passengers taken for a ride as data breach spills passports, bank details
Travel biz tells customers to change passwords beyond its own services
Cyber-crime14 Jan 2026 | 17
UK backtracks on digital ID requirement for right to work
U-turn leaves questions on costs, funding, and benefits unanswered
Public Sector14 Jan 2026 | 142
Spanish power giant sparks breach probe amid claims of massive data grab
Endesa says payment info stolen after alleged crook boasted of 1 TB-plus haul
Cyber-crime14 Jan 2026 | 10
Anthropic finds $1.5 million to help Python Foundation improve security
AI upstart also upscales its Labs to find the next frontier
Security14 Jan 2026 |
Windows info-disclosure 0-day bug gets a fix as CISA sounds alarm
First Patch Tuesday of 2026 goes big
Security14 Jan 2026 | 3
Popular Python libraries used in Hugging Face models subject to poisoned metadata attack
The open-source libraries were created by Salesforce, Nvidia, and Apple with a Swiss group
Patches13 Jan 2026 | 1
AI and automation could erase 10.4 million US roles by 2030
AI-pocalypse Forrester models slow, structural shift rather than sudden employment collapse
AI + ML13 Jan 2026 | 13
Dutch cops cuff alleged AVCheck malware kingpin in Amsterdam
33-year-old was under surveillance for some time before returning home from the UAE
Legal13 Jan 2026 | 7
Federal agencies told to fix or ditch Gogs as exploited zero-day lands on CISA hit list
Git server flaw that attackers have been abusing for months has now caught the attention of US cyber cops
Security13 Jan 2026 | 2
Mandiant open sources tool to prevent leaky Salesforce misconfigs
AuraInspector automates the most common abuses and generates fixes for customers
SaaS13 Jan 2026 |
Court tosses appeal by hacker who opened port to coke smugglers with malware
Dutchman fails to convince judges his trial was unfair because cops read his encrypted chats
Cyber-crime13 Jan 2026 | 31
Britain goes shopping for a rapid-fire missile to help Ukraine hit back
Project Nightfall aims to deliver a UK-built long-range strike capability at speed
Public Sector13 Jan 2026 | 115
India demands crypto outfits geolocate customers, get a selfie to prove they’re real
Government is fed up with bad actors using digi-cash to fund dodgy deeds
Public Sector13 Jan 2026 | 9
No fire sale for firewalls as memory shortages could push prices higher
In SEC filings, Fortinet and Palo Alto show shrinking product margins taking hold.
Security12 Jan 2026 | 4
'Violence-as-a-service' suspect arrested in Iraq, extradition underway
Gang members 'systematically exploited children and young people,' cops say
Cyber-crime12 Jan 2026 | 9
Businesses in 2026: Maybe we should finally look into that AI security stuff
Survey finds security checks nearly doubled in a year as leaders wise up
AI + ML12 Jan 2026 |
Block CISO: We red-teamed our own AI agent to run an infostealer on an employee laptop
exclusive Agents must be 'safer and better than humans,' James Nettesheim tells The Reg
Security12 Jan 2026 | 1
Infamous BreachForums forum breached, spilling data on 325K users
Updated Website built around buying and selling stolen data has lost control of its own
Cyber-crime12 Jan 2026 | 9
Ofcom officially investigating X as Grok's nudify button stays switched on
Tech minister Liz Kendall says the government will back a robust regulatory response
AI + ML12 Jan 2026 | 88
Tories vow to boot under-16s off social media and ban phones in schools
Opposition leader Kemi Badenoch pitches age limits and classroom curbs as fixes for behavior and mental health
Personal Tech12 Jan 2026 | 59
India’s government denies it plans to demand smartphone source code
Says ongoing talks about security are about understanding best practice, not strong-arming vendors
Security12 Jan 2026 | 5
Malaysia and Indonesia block X over failure to curb deepfake smut
Asia in Brief PLUS: Cambodia arrests alleged scam camp boss; Baidu spins out chip biz; Panasonic’s noodle shop plan; And more!
Legal12 Jan 2026 | 28
Meta admits to Instagram password reset mess, denies data leak
infosec in brief PLUS: Veeam patches critical vuln; Crims bribing dark web insiders; UK school takedown; And more
Security11 Jan 2026 | 7
UK government exempting itself from flagship cyber law inspires little confidence
ANALYSIS Ministers promise equivalent standards just without the legal obligation
Cyber-crime10 Jan 2026 | 40
How hackers are fighting back against ICE surveillance tech
Remember when government agents didn't wear masks?
Security09 Jan 2026 | 121
Putinswap: France trades alleged ransomware crook for conflict researcher
Basketball player accused of aiding cybercrime gang extradition blocked in exchange for Swiss NGO consultant
Cyber-crime09 Jan 2026 | 11
QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies
State-backed attackers are using QR codes to slip past enterprise security and help themselves to cloud logins, the FBI says
Cyber-crime09 Jan 2026 | 24
China-linked cybercrims abused VMware ESXi zero-days a year before disclosure
Huntress analysis suggests VM escape bugs were already weaponized in the wild
Virtualization09 Jan 2026 |
Grok told to cover up as UK weighs action over AI 'undressing'
Image generation paywalled on X after ministers and regulators start asking awkward questions
AI + ML09 Jan 2026 | 116
Help desk read irrelevant script, so techies found and fixed their own problem
On Call As you should, when being told the only remedy is deleting everything and starting again
Security09 Jan 2026 | 109
As agents run amok, CrowdStrike's $740M SGNL deal aims to help get a grip on identity security
Authentication is basically solved. Authorization is another thing entirely...
Security08 Jan 2026 | 3
Patch Cisco ISE bug now before attackers abuse proof-of-concept exploit
No reports of active exploitation … yet
Patches08 Jan 2026 | 3
Ransomware attacks kept climbing in 2025 as gangs refused to stay dead
Cop wins hit crime infrastructure, not the people behind it
Cyber-crime08 Jan 2026 | 15
CISA flags actively exploited Office relic alongside fresh HPE flaw
Max-severity OneView hole joins a PowerPoint bug that should've been retired years ago
Cyber-crime08 Jan 2026 | 6
UK regulators swarm X after Grok generated nudes from photos
Lawyers say Musk's platform may face punishment under Online Safety Act priority offenses
AI + ML08 Jan 2026 | 123
Maximum-severity n8n flaw lets randos run your automation server
Unauthenticated RCE means anyone on the network can seize full control
Patches08 Jan 2026 | 12
OpenAI putting bandaids on bandaids as prompt injection problems keep festering
Happy Groundhog Day!
Research08 Jan 2026 | 21
Yes, criminals are using AI to vibe-code malware
Interview They also hallucinate when writing ransomware code
AI + ML08 Jan 2026 | 12
Logitech macOS mouse mayhem traced to expired dev certificate
Company says it dropped the ball, apologizes for wasting people's time
Patches08 Jan 2026 | 48
Cloudflare pours cold water on ‘BGP weirdness preceded US attack on Venezuela’ theory
Suggests rotten routing, not evidence of a cyber-strike before kinetic action
Networks08 Jan 2026 | 14
IBM's AI agent Bob easily duped to run malware, researchers show
Prompt injection lets risky commands slip past guardrails
Security07 Jan 2026 | 14
ESA calls cops as crims lift off 500 GB of files, say security black hole still open
exclusive Two weeks, two major data leaks … not a good look for the European Space Agency
Cyber-crime07 Jan 2026 | 19
Stalkerware slinger pleads guilty for selling snooper software to suspicious spouses
pcTattletale boss Bryan Fleming faces up to 15 years in prison when sentenced later this year
Cyber-crime07 Jan 2026 | 7
Microsoft scraps Exchange Online spam clamp after customers cry foul
Negative feedback sinks Redmond's plan to cap outbound email recipients
Security07 Jan 2026 | 5
Ministry of Justice splurged £50M on security – still missed Legal Aid Agency cyberattack
Updated High-risk system compromised long before intrusion was finally spotted
Cyber-crime07 Jan 2026 | 8
Jaguar Land Rover wholesale volumes plummet 43% in cyberattack aftermath
Production halts and supply-chain disruption left luxury automaker reeling in fiscal Q3
Cyber-crime07 Jan 2026 | 16
HSBC app takes a dim view of sideloaded Bitwarden installations
Customers report being locked out after grabbing the password manager via F-Droid
Security07 Jan 2026 | 111
HackerOne 'ghosted' me for months over $8,500 bug bounty, says researcher
Long after CVEs issued and open source flaws fixed
Security07 Jan 2026 | 4
Brightspeed investigates breach as crims post stolen data for sale
Crimson Collective claims 'sophisticated attack'
Cyber-crime06 Jan 2026 |
Fake Windows BSODs check in at Europe's hotels to con staff into running malware
Phishers posing as Booking.com use panic-inducing blue screens to bypass security controls
Research06 Jan 2026 | 15
Crypto wallet shop Ledger confirms customer data lifted in Global-e snafu
Order and contact details accessed via ecommerce partner, and phishing has begun
Cyber-crime06 Jan 2026 | 3
Students bag extended Christmas break after cyber hit on school IT
Phones, email, and core systems knocked out at Higham Lane in Nuneaton
Cyber-crime06 Jan 2026 | 26
UK injects just £210M into cyber plan to stop Whitehall getting pwnd
Central government will supposedly be as secure as energy facilities and datacenters under new proposals
Public Sector06 Jan 2026 | 10
One criminal, 50 hacked organizations, and all because MFA wasn't turned on
Crim used infostealer to get cloud credentials
Cyber-crime06 Jan 2026 | 24
Congrats, cybercrims: You just fell into a honeypot
A subpoena has been issued, apparently
Security05 Jan 2026 | 3
Playing Koi: Palo Alto isn't saying if it will buy security start-up
CEO Nikesh Arora's trip to Tel Aviv last month sparked rumors.
Security05 Jan 2026 |
Gmail preparing to drop POP3 mail fetching
It's January 2026, and Google is finding innovative new ways to make one of its services worse
Applications05 Jan 2026 | 149
New Zealand orders review into ManageMyHealth cyberattack
Government 'incredibly' concerned about breach potentially affecting more than 100,000 patients
Cyber-crime05 Jan 2026 | 7
Trump admin sends heart emoji to commercial spyware makers with lifted Predator sanctions
infosec in brief Also, Korean Air hacked, EmEditor installer hijacked, a perfect 10 router RCE vuln, and more
Security04 Jan 2026 | 11
Palo Alto Networks security-intel boss calls AI agents 2026's biggest insider threat
interview Lock 'em down
Security04 Jan 2026 | 22
Bitfinex crypto thief who was serving five years thanks Trump for early release
Netflix documentary part 2 in the works?
Cyber-crime02 Jan 2026 | 21
Cybercrook claims to be selling infrastructure info about three major US utilities
For the bargain price of 6.5 bitcoin
Cyber-crime02 Jan 2026 | 6
Brit lands invite-only Aussie visa after uncovering vuln in government systems
Jacob Riggs is set to swap London for Sydney some time in the next year
Security02 Jan 2026 | 43
LockBit takedown architect gets New Year award from King Charles
Gavin Webb orchestrated Operation Cronos as it pulled off the legendary disruption sting
Cyber-crime02 Jan 2026 | 14
Cisco XDR in 30: Turning Security Signals Into Confident Action
How network-led Cisco XDR helps teams see threats clearly and respond faster
Sponsored Post
European Space Agency hit again as cybercrims claim 200 GB data up for sale
As in past incidents, ESA says the impact was limited to external systems
Cyber-crime31 Dec 2025 | 17
Hong Kong’s newest anti-scam technology is over-the-counter banking
Funds in ‘Money Safe’ accounts are only available when customers appear for face-to-face verification
Cyber-crime31 Dec 2025 | 27
Cybersecurity pros admit to moonlighting as ransomware scum
Pair became ALPHV affiliates to prey on US-based clients
Cyber-crime31 Dec 2025 | 12
New York’s incoming mayor bans Raspberry Pi at his inauguration party
Zohran Mamdani appears not to understand that smartphones can be used for evil
Security31 Dec 2025 | 51
An early end to the holidays: 'Heartbleed of MongoDB' is now under active exploit
You didn't think you'd get to enjoy your time off without a major cybersecurity incident, did you?
Patches30 Dec 2025 | 20
Korean telco failed at femtocell security, exposed customers to snooping and fraud
One cert, in plaintext, on thousands of devices, led to what looks like years of crime
Cyber-crime30 Dec 2025 | 3
Indian cops cuff ex-Coinbase rep over selling customer info to crims
There's more where that came from, CEO says
Cyber-crime29 Dec 2025 | 4
Crims disconnect Wired subscribers from their privacy, publish deets online
Extortion group Lovely claims to have stolen 40 million pieces of info from publisher Conde Nast
Cyber-crime29 Dec 2025 | 17
Europe's cloud challenge: Building an Airbus for the digital age
Feature Countries that banded together to challenge Boeing in the air try to do the same to AWS, Microsoft, and Google on the ground
PaaS + IaaS29 Dec 2025 | 60
Accused data thief threw MacBook into a river to destroy evidence
Former staffer of Korean e-tailer Coupang accessed 33 million records but may have done less damage than feared
Cyber-crime29 Dec 2025 | 43
Death, torture, and amputation: How cybercrime shook the world in 2025
The human harms of cyberattacks piled up this year, and violence expected to increase
Cyber-crime28 Dec 2025 | 13
From AI to analog, cybersecurity tabletop exercises look a little different this year
Practice makes perfect
Security26 Dec 2025 | 5
From video games to cyber defense: If you don't think like a hacker, you won't win
interview In supercharged AI race, defenders need to keep up
Security26 Dec 2025 | 20
Pen testers accused of 'blackmail' after reporting Eurostar chatbot flaws
AI goes off the rails … because of shoddy guardrails
Security24 Dec 2025 | 33
US shuts down phisherfolk’s $14.6M password-hoarding platform
Crooks used platform to scoop up and store banking credentials for big-money thefts
Cyber-crime24 Dec 2025 | 3
Biting the hand that feeds IT
