Britain goes shopping for a rapid-fire missile to help Ukraine hit back Project Nightfall aims to deliver a UK-built long-range strike capability at speed Public Sector13 Jan 2026 | 14
India demands crypto outfits geolocate customers, get a selfie to prove they’re real Government is fed up with bad actors using digi-cash to fund dodgy deeds Public Sector13 Jan 2026 | 8
No fire sale for firewalls as memory shortages could push prices higher In SEC filings, Fortinet and Palo Alto show shrinking product margins taking hold. Security12 Jan 2026 | 3
'Violence-as-a-service' suspect arrested in Iraq, extradition underway Gang members 'systematically exploited children and young people,' cops say Cyber-crime12 Jan 2026 | 6
Businesses in 2026: Maybe we should finally look into that AI security stuff Survey finds security checks nearly doubled in a year as leaders wise up AI + ML12 Jan 2026 |
Block CISO: We red-teamed our own AI agent to run an infostealer on an employee laptop exclusive Agents must be 'safer and better than humans,' James Nettesheim tells The Reg Security12 Jan 2026 | 1
Infamous BreachForums forum breached, spilling data on 325K users Updated Website built around buying and selling stolen data has lost control of its own Cyber-crime12 Jan 2026 | 9
Ofcom officially investigating X as Grok's nudify button stays switched on Tech minister Liz Kendall says the government will back a robust regulatory response AI + ML12 Jan 2026 | 77
Tories vow to boot under-16s off social media and ban phones in schools Opposition leader Kemi Badenoch pitches age limits and classroom curbs as fixes for behavior and mental health Personal Tech12 Jan 2026 | 50
India’s government denies it plans to demand smartphone source code Says ongoing talks about security are about understanding best practice, not strong-arming vendors Security12 Jan 2026 | 4
Malaysia and Indonesia block X over failure to curb deepfake smut Asia in Brief PLUS: Cambodia arrests alleged scam camp boss; Baidu spins out chip biz; Panasonic’s noodle shop plan; And more! Legal12 Jan 2026 | 27
Meta admits to Instagram password reset mess, denies data leak infosec in brief PLUS: Veeam patches critical vuln; Crims bribing dark web insiders; UK school takedown; And more Security11 Jan 2026 | 7
UK government exempting itself from flagship cyber law inspires little confidence ANALYSIS Ministers promise equivalent standards just without the legal obligation Cyber-crime10 Jan 2026 | 38
How hackers are fighting back against ICE surveillance tech Remember when government agents didn't wear masks? Security09 Jan 2026 | 121
Putinswap: France trades alleged ransomware crook for conflict researcher Basketball player accused of aiding cybercrime gang extradition blocked in exchange for Swiss NGO consultant Cyber-crime09 Jan 2026 | 11
QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies State-backed attackers are using QR codes to slip past enterprise security and help themselves to cloud logins, the FBI says Cyber-crime09 Jan 2026 | 24
China-linked cybercrims abused VMware ESXi zero-days a year before disclosure Huntress analysis suggests VM escape bugs were already weaponized in the wild Virtualization09 Jan 2026 |
Grok told to cover up as UK weighs action over AI 'undressing' Image generation paywalled on X after ministers and regulators start asking awkward questions AI + ML09 Jan 2026 | 113
Help desk read irrelevant script, so techies found and fixed their own problem On Call As you should, when being told the only remedy is deleting everything and starting again Security09 Jan 2026 | 109
As agents run amok, CrowdStrike's $740M SGNL deal aims to help get a grip on identity security Authentication is basically solved. Authorization is another thing entirely... Security08 Jan 2026 | 3
Cloudflare CEO threatens to make the Winter Olympics a political football after Italy slugs it with a fine Labels Rome's comms regulator ‘a quasi-judicial body’ that works on behalf of ‘shadowy, European media cabal’
AI industry insiders launch site to poison the data that feeds them exclusive Poison Fountain project seeks allies to fight the power
Malaysia and Indonesia block X over failure to curb deepfake smut Asia in Brief PLUS: Cambodia arrests alleged scam camp boss; Baidu spins out chip biz; Panasonic’s noodle shop plan; And more!
Techie banned from client site for outage he didn’t cause Who, Me? UPSes don’t work without power, or well-designed electricals
Meta admits to Instagram password reset mess, denies data leak infosec in brief PLUS: Veeam patches critical vuln; Crims bribing dark web insiders; UK school takedown; And more
The world is one bad decision away from a silicon ice age Opinion Venezuela today, Taiwan tomorrow? This might be the last good year for buying hardware
How CP/M-86's delay handed Microsoft the keys to the kingdom A late operating system, a stopgap deal, and the accident that made DOS dominant
Infamous BreachForums forum breached, spilling data on 325K users Updated Website built around buying and selling stolen data has lost control of its own
India’s government denies it plans to demand smartphone source code Says ongoing talks about security are about understanding best practice, not strong-arming vendors
Patch Cisco ISE bug now before attackers abuse proof-of-concept exploit No reports of active exploitation … yet Patches08 Jan 2026 | 3
Ransomware attacks kept climbing in 2025 as gangs refused to stay dead Cop wins hit crime infrastructure, not the people behind it Cyber-crime08 Jan 2026 | 15
CISA flags actively exploited Office relic alongside fresh HPE flaw Max-severity OneView hole joins a PowerPoint bug that should've been retired years ago Cyber-crime08 Jan 2026 | 6
UK regulators swarm X after Grok generated nudes from photos Lawyers say Musk's platform may face punishment under Online Safety Act priority offenses AI + ML08 Jan 2026 | 122
Maximum-severity n8n flaw lets randos run your automation server Unauthenticated RCE means anyone on the network can seize full control Patches08 Jan 2026 | 12
OpenAI putting bandaids on bandaids as prompt injection problems keep festering Happy Groundhog Day! Research08 Jan 2026 | 21
Yes, criminals are using AI to vibe-code malware Interview They also hallucinate when writing ransomware code AI + ML08 Jan 2026 | 12
Logitech macOS mouse mayhem traced to expired dev certificate Company says it dropped the ball, apologizes for wasting people's time Patches08 Jan 2026 | 48
Cloudflare pours cold water on ‘BGP weirdness preceded US attack on Venezuela’ theory Suggests rotten routing, not evidence of a cyber-strike before kinetic action Networks08 Jan 2026 | 13
IBM's AI agent Bob easily duped to run malware, researchers show Prompt injection lets risky commands slip past guardrails Security07 Jan 2026 | 14
ESA calls cops as crims lift off 500 GB of files, say security black hole still open exclusive Two weeks, two major data leaks … not a good look for the European Space Agency Cyber-crime07 Jan 2026 | 20
Stalkerware slinger pleads guilty for selling snooper software to suspicious spouses pcTattletale boss Bryan Fleming faces up to 15 years in prison when sentenced later this year Cyber-crime07 Jan 2026 | 7
Microsoft scraps Exchange Online spam clamp after customers cry foul Negative feedback sinks Redmond's plan to cap outbound email recipients Security07 Jan 2026 | 5
Ministry of Justice splurged £50M on security – still missed Legal Aid Agency cyberattack Updated High-risk system compromised long before intrusion was finally spotted Cyber-crime07 Jan 2026 | 8
Jaguar Land Rover wholesale volumes plummet 43% in cyberattack aftermath Production halts and supply-chain disruption left luxury automaker reeling in fiscal Q3 Cyber-crime07 Jan 2026 | 16
HSBC app takes a dim view of sideloaded Bitwarden installations Customers report being locked out after grabbing the password manager via F-Droid Security07 Jan 2026 | 111
HackerOne 'ghosted' me for months over $8,500 bug bounty, says researcher Long after CVEs issued and open source flaws fixed Security07 Jan 2026 | 4
Brightspeed investigates breach as crims post stolen data for sale Crimson Collective claims 'sophisticated attack' Cyber-crime06 Jan 2026 |
Fake Windows BSODs check in at Europe's hotels to con staff into running malware Phishers posing as Booking.com use panic-inducing blue screens to bypass security controls Research06 Jan 2026 | 15
Crypto wallet shop Ledger confirms customer data lifted in Global-e snafu Order and contact details accessed via ecommerce partner, and phishing has begun Cyber-crime06 Jan 2026 | 3
Students bag extended Christmas break after cyber hit on school IT Phones, email, and core systems knocked out at Higham Lane in Nuneaton Cyber-crime06 Jan 2026 | 26
UK injects just £210M into cyber plan to stop Whitehall getting pwnd Central government will supposedly be as secure as energy facilities and datacenters under new proposals Public Sector06 Jan 2026 | 10
One criminal, 50 hacked organizations, and all because MFA wasn't turned on Crim used infostealer to get cloud credentials Cyber-crime06 Jan 2026 | 24
Congrats, cybercrims: You just fell into a honeypot A subpoena has been issued, apparently Security05 Jan 2026 | 3
Playing Koi: Palo Alto isn't saying if it will buy security start-up CEO Nikesh Arora's trip to Tel Aviv last month sparked rumors. Security05 Jan 2026 |
Gmail preparing to drop POP3 mail fetching It's January 2026, and Google is finding innovative new ways to make one of its services worse Applications05 Jan 2026 | 149
New Zealand orders review into ManageMyHealth cyberattack Government 'incredibly' concerned about breach potentially affecting more than 100,000 patients Cyber-crime05 Jan 2026 | 7
Trump admin sends heart emoji to commercial spyware makers with lifted Predator sanctions infosec in brief Also, Korean Air hacked, EmEditor installer hijacked, a perfect 10 router RCE vuln, and more Security04 Jan 2026 | 11
Palo Alto Networks security-intel boss calls AI agents 2026's biggest insider threat interview Lock 'em down Security04 Jan 2026 | 22
Bitfinex crypto thief who was serving five years thanks Trump for early release Netflix documentary part 2 in the works? Cyber-crime02 Jan 2026 | 21
Cybercrook claims to be selling infrastructure info about three major US utilities For the bargain price of 6.5 bitcoin Cyber-crime02 Jan 2026 | 6
Brit lands invite-only Aussie visa after uncovering vuln in government systems Jacob Riggs is set to swap London for Sydney some time in the next year Security02 Jan 2026 | 43
LockBit takedown architect gets New Year award from King Charles Gavin Webb orchestrated Operation Cronos as it pulled off the legendary disruption sting Cyber-crime02 Jan 2026 | 14
Cisco XDR in 30: Turning Security Signals Into Confident Action How network-led Cisco XDR helps teams see threats clearly and respond faster Sponsored Post
European Space Agency hit again as cybercrims claim 200 GB data up for sale As in past incidents, ESA says the impact was limited to external systems Cyber-crime31 Dec 2025 | 17
Hong Kong’s newest anti-scam technology is over-the-counter banking Funds in ‘Money Safe’ accounts are only available when customers appear for face-to-face verification Cyber-crime31 Dec 2025 | 27
Cybersecurity pros admit to moonlighting as ransomware scum Pair became ALPHV affiliates to prey on US-based clients Cyber-crime31 Dec 2025 | 12
New York’s incoming mayor bans Raspberry Pi at his inauguration party Zohran Mamdani appears not to understand that smartphones can be used for evil Security31 Dec 2025 | 51
An early end to the holidays: 'Heartbleed of MongoDB' is now under active exploit You didn't think you'd get to enjoy your time off without a major cybersecurity incident, did you? Patches30 Dec 2025 | 20
Korean telco failed at femtocell security, exposed customers to snooping and fraud One cert, in plaintext, on thousands of devices, led to what looks like years of crime Cyber-crime30 Dec 2025 | 3
Indian cops cuff ex-Coinbase rep over selling customer info to crims There's more where that came from, CEO says Cyber-crime29 Dec 2025 | 4
Crims disconnect Wired subscribers from their privacy, publish deets online Extortion group Lovely claims to have stolen 40 million pieces of info from publisher Conde Nast Cyber-crime29 Dec 2025 | 17
Europe's cloud challenge: Building an Airbus for the digital age Feature Countries that banded together to challenge Boeing in the air try to do the same to AWS, Microsoft, and Google on the ground PaaS + IaaS29 Dec 2025 | 60
Accused data thief threw MacBook into a river to destroy evidence Former staffer of Korean e-tailer Coupang accessed 33 million records but may have done less damage than feared Cyber-crime29 Dec 2025 | 43
Death, torture, and amputation: How cybercrime shook the world in 2025 The human harms of cyberattacks piled up this year, and violence expected to increase Cyber-crime28 Dec 2025 | 13
From AI to analog, cybersecurity tabletop exercises look a little different this year Practice makes perfect Security26 Dec 2025 | 5
From video games to cyber defense: If you don't think like a hacker, you won't win interview In supercharged AI race, defenders need to keep up Security26 Dec 2025 | 20
Pen testers accused of 'blackmail' after reporting Eurostar chatbot flaws AI goes off the rails … because of shoddy guardrails Security24 Dec 2025 | 33
US shuts down phisherfolk’s $14.6M password-hoarding platform Crooks used platform to scoop up and store banking credentials for big-money thefts Cyber-crime24 Dec 2025 | 3
Microsoft wants to replace its entire C and C++ codebase, perhaps by 2030 Plans move to Rust, with help from AI Software24 Dec 2025 | 191
ServiceNow opens $7.7B ticket titled 'Buy security company, make it Armis' Customers will be able to see vulnerabilities, prioritize risks, and close them with automated workflows. SaaS23 Dec 2025 |
21K Nissan customers' data stolen in Red Hat raid Automaker's third security snafu in three years Cyber-crime23 Dec 2025 | 10
Microsoft rushes an out-of-band update for Message Queuing bug Redmond gets in early for the twelve whoopsies of Christmas Patches23 Dec 2025 | 9
Poisoned WhatsApp API package steals messages and accounts And it's especially dangerous because the code works Cyber-crime22 Dec 2025 | 21
Palo Alto's new Google Cloud deal boosts AI integration, could save on cloud costs SEC filings show the outfit cut projected 2027 cloud purchase commitments by $114M Security22 Dec 2025 | 2
Spy turned startup CEO: 'The WannaCry of AI will happen' Interview Ah, the good old days when 0-day development took a year AI + ML22 Dec 2025 | 14
Hacktivists scrape 86M Spotify tracks, claim their aim is to preserve culture Anna’s Archive’s idealism doesn’t quite survive its own blog post Security22 Dec 2025 | 40
Conman and wannabe MI6 agent must repay £125k to romance scam victim Judge says former most-wanted fugitive Mark Acklom will likely never return to the UK Cyber-crime22 Dec 2025 | 17
Around 1,000 systems compromised in ransomware attack on Romanian water agency On-site staff keep key systems working while all but one region battles with encrypted PCs CSO22 Dec 2025 | 8
There’s so much stolen data in the world, South Korea will require face scans to buy a SIM SK Telecom's epic infosec fail will cost it another $1.5 billion Security22 Dec 2025 | 35
Through gritted teeth, Apple and Google allow alternative app stores in Japan APAC in Brief PLUS: Debian supports Chinese chips ; Hong Kong’s Christmas Karaoke crackdown; Asahi admits it should have prevented hack; And more! Public Sector22 Dec 2025 | 10
Google sends Dark Web Report to its dead services graveyard Infosec In Brief PLUS: Texas sues alleged TV spies; The Cloud is full of holes; Hospital leaked its own data; And more Security21 Dec 2025 | 12
NIST contemplated pulling the pin on NTP servers after blackout caused atomic clock drift UPDATED Time signals shifted by a tiny amount that only very sensitive users would find upsetting Security21 Dec 2025 | 87
ATM jackpotting gang accused of unleashing Ploutus malware across US Latest charges join the mountain of indictments facing alleged Tren de Aragua members Cyber-crime19 Dec 2025 | 24
WatchGuard sounds alarm as critical Firebox flaw comes under active attack Newly disclosed vulnerability already being abused, users urged to lock down exposed firewalls Networks19 Dec 2025 | 14
Sydney Uni data goes walkabout after criminals raid code repo Attackers helped themselves to historical personal info on 27K people Cyber-crime19 Dec 2025 | 17
HPE tells customers to patch fast as OneView RCE bug scores a perfect 10 Maximum-severity vuln lets unauthenticated attackers execute code on trusted infra management platform Patches19 Dec 2025 | 4
Ministers confirm breach at UK Foreign Office but details remain murky Officials admit 'there certainly has been a hack,' but refuse to confirm China link or data theft Cyber-crime19 Dec 2025 | 26
Faith in the internet is fading among young Brits Ofcom survey finds 18-34s increasingly see life online as bad for society and their mental health Off-Prem19 Dec 2025 | 55
AI and cybersecurity: Two sides of the same coin Practical lessons on securing AI and using AI to strengthen defence Sponsored Post
China turns on a vast experimental network it says is an heir to ARPANET Beijing wants to 'seize the initiative in the international competition in cyberspace' Networks19 Dec 2025 | 49
Amazon blocked 1,800 suspected North Korean scammers seeking jobs Plus: Lazarus Group has a brand new BeaverTail Cyber-crime18 Dec 2025 | 13
Your car’s web browser may be on the road to cyber ruin Study finds built-in browsers across gadgets often ship years out of date Research18 Dec 2025 | 75
Crypto crooks co-opt stolen AWS creds to mine coins 'Within 10 minutes of gaining initial access, crypto miners were operational' Cyber-crime18 Dec 2025 | 3
Kim's crypto thieving reached a record $2B in 2025 ByBit attack doing some seriously heavy lifting Cyber-crime18 Dec 2025 | 8
Another bad week for SonicWall as SMA 1000 zero-day under active exploit Flaw in remote-access appliance lets attackers chain bugs for root-level takeover Cyber-crime18 Dec 2025 | 6
FBI dismantles alleged $70M crypto laundering operation Justice Department claims unlicensed exchange funneled ransomware profits Cyber-crime18 Dec 2025 | 8
NHS tech supplier probes cyberattack on internal systems Updated Around 2,000 GP practices use its products Cyber-crime18 Dec 2025 | 3
React2Shell exploitation spreads as Microsoft counts hundreds of hacked machines Security boffins warn flaw is now being used for ransomware attacks against live networks Cyber-crime18 Dec 2025 | 11
DVSA's clapped-out booking system gets bot slapped as new boss rides in 18-year-old platform crumbles under 94M daily requests while resellers flog £62 tests for £500 On-Prem18 Dec 2025 | 97