GitHub pulls pin on npm’s auto-run scripts
Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors Continue reading GitHub pulls pin on npm’s auto-run scripts
Author Archives: www.theregister.com - Articles
Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9
Remote, unauthenticated RCE with root privileges is about as bad as it gets Continue reading Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9
AI is making Patch Tuesday (kinda) fun again
Unless you’re an admin or vulnerability manager – then you’re totally screwed Continue reading AI is making Patch Tuesday (kinda) fun again
Miasma worms its way onto GitHub as attack kit goes open source
As if there weren’t enough package poisonings to worry about Continue reading Miasma worms its way onto GitHub as attack kit goes open source
Apple’s iOS 27 goes all agentic on compromised passwords, promises to change them with one tap
iBiz might not win the AI race, but analysts say it’s focusing on features people may actually use Continue reading Apple’s iOS 27 goes all agentic on compromised passwords, promises to change them with one tap
Signal says UK plan to scan devices for nude images ‘endangers us all’
Encrypted messaging app warns device-level checks could be repurposed for censorship Continue reading Signal says UK plan to scan devices for nude images ‘endangers us all’
Chrome’s zero-day Whac-A-Mole continues with fifth exploited bug of the year
Google paid researcher a tidy $55K bounty for its discovery Continue reading Chrome’s zero-day Whac-A-Mole continues with fifth exploited bug of the year
France probes compromise of gov messaging platform after account hijack
Authorities say the breach only exposed public chat rooms, but alleged attacker claims to have accessed far more data Continue reading France probes compromise of gov messaging platform after account hijack
Qilin NHS breach tally grows as Essex trust confirms stolen records
Two years on from ransomware attack, hospitals are still trying to identify and warn patients Continue reading Qilin NHS breach tally grows as Essex trust confirms stolen records
Norks blast 250+ fake job offers to developers over 6 weeks to try and snarf creds and crypto
When an unsolicited job offer sounds too good to be true … Continue reading Norks blast 250+ fake job offers to developers over 6 weeks to try and snarf creds and crypto