Collaborate Disseminate
Huntress analysis suggests VM escape bugs were already weaponized in the wild Chinese-linked cybercriminals were sitting on a working VMware ESXi hypervisor escape kit more than a year before the bugs it relied on were made public.… Continue reading China-linked cybercrims abused VMware ESXi zero-days a year before disclosure
Image generation paywalled on X after ministers and regulators start asking awkward questions Grok has yanked its image-generation toy out of the hands of most X users after the UK government openly weighed a ban over the AI feature that “undressed” pe… Continue reading Grok told to cover up as UK weighs action over AI ‘undressing’
As you should, when being told the only remedy is deleting everything and starting again On Call 2025 has ended and a new year is upon us, but The Register will continue opening Friday mornings with a fresh installment of On Call – the reader-contribu… Continue reading Help desk read irrelevant script, so techies found and fixed their own problem
Authentication is basically solved. Authorization is another thing entirely… CrowdStrike has signed a $740 million deal to buy identity security startup SGNL. The move underscores the growing threat of identity-based attacks as companies struggle to … Continue reading As agents run amok, CrowdStrike’s $740M SGNL deal aims to help get a grip on identity security
No reports of active exploitation … yet Cisco patched a bug in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products that allows remote attackers with admin-level privileges to access sensitive information – and warne… Continue reading Patch Cisco ISE bug now before attackers abuse proof-of-concept exploit
Cop wins hit crime infrastructure, not the people behind it If 2025 was meant to be the year ransomware started dying, nobody appears to have told the attackers.… Continue reading Ransomware attacks kept climbing in 2025 as gangs refused to stay dead
Max-severity OneView hole joins a PowerPoint bug that should’ve been retired years ago CISA has added a pair of security holes to its actively exploited list, warning that attackers are now abusing a maximum-severity bug in HPE’s OneView management sof… Continue reading CISA flags actively exploited Office relic alongside fresh HPE flaw
Lawyers say Musk’s platform may face punishment under Online Safety Act priority offenses Elon Musk’s X platform is under fire as UK regulators close in on mounting reports that the platform’s AI chatbot, Grok, is generating sexual imagery without user… Continue reading UK regulators swarm X after Grok generated nudes from photos
Unauthenticated RCE means anyone on the network can seize full control A maximum-severity bug in the popular automation platform n8n has left an estimated 100,000 servers wide open to complete takeover, courtesy of a flaw so bad it doesn’t even require… Continue reading Maximum-severity n8n flaw lets randos run your automation server
Happy Groundhog Day! Security researchers at Radware say they’ve identified several vulnerabilities in OpenAI’s ChatGPT service that allow the exfiltration of personal information.… Continue reading OpenAI putting bandaids on bandaids as prompt injection problems keep festering