Research News • The Register

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

If it ain't broke?

CSO23 May 2025 | 1

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

Go ahead, please do Bash static analysis

CSO30 Apr 2025 | 39

Enterprise tech dominates zero-day exploits with no signs of slowdown

As Big Tech gets used to the pain, smaller vendors urged to up their game

Research29 Apr 2025 | 1

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

Because coding phishing sites from scratch is a real pain in the neck

Cyber-crime25 Apr 2025 | 5

Booby-trapped Alpine Quest Android app geolocates Russian soldiers

Back of the nyet!

Research24 Apr 2025 | 37

Who needs phishing when your login's already in the wild?

Stolen credentials edge out email tricks for cloud break-ins because they're so easy to get

CSO23 Apr 2025 | 11

A pot of $250K is now available to ransomware researchers, but it feeds a commercial product

Security bods can earn up to $10K per report

Research22 Apr 2025 | 3

Today's LLMs craft exploits from patches at lightning speed

Erlang? Er, man, no problem. ChatGPT, Claude to go from flaw disclosure to actual attack code in hours

AI Software Development Week21 Apr 2025 | 19

Hacking US crosswalks to talk like Zuck is as easy as 1234

Video AI-spoofed Mark joins fellow billionaires as the voice of the street – here's how it was probably done

Bootnotes19 Apr 2025 | 88

Uncle Sam kills funding for CVE program. Yes, that CVE program

Updated Because vulnerability management has nothing to do with national security, right?

CSO16 Apr 2025 | 179

Chinese snoops use stealth RAT to backdoor US orgs – still active last week

Let the espionage and access resale campaigns begin (again)

Research15 Apr 2025 | 3

Scattered Spider stops the Rickrolls, starts the RAT race

Despite arrests, eight-legged menace targeted more victims this year

Research08 Apr 2025 | 5

As CISA braces for more cuts, threat intel sharing takes a hit

Analysis How will 'gutting' civilian defense agency make American cybersecurity great again?

Public Sector08 Apr 2025 | 11

For flux sake: CISA, annexable allies warn of hot DNS threat

Shape shifting technique described as menace to national security

CSO03 Apr 2025 | 5

Top cybersecurity boffin, wife vanish as FBI raids homes

Updated Indiana Uni rm -rf online profiles while agents haul boxes of evidence

Research31 Mar 2025 | 21

Malware in Lisp? Now you're just being cruel

Miscreants warming to Delphi, Haskell, and the like to evade detection

Research29 Mar 2025 | 56

You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?

Just an FYI, like

Applications25 Mar 2025 | 18

Apr	MAY	Jun
	25
2024	2025	2026

Topics

Special Features

Vendor Voice

Resources

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

'Ongoing' Ivanti hijack bug exploitation reaches clouds

Intel's data-leaking Spectre defenses scared off yet again

You think ransomware is bad now? Wait until it infects CPUs

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

Enterprise tech dominates zero-day exploits with no signs of slowdown

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

Booby-trapped Alpine Quest Android app geolocates Russian soldiers

Who needs phishing when your login's already in the wild?

A pot of $250K is now available to ransomware researchers, but it feeds a commercial product

Today's LLMs craft exploits from patches at lightning speed

Hacking US crosswalks to talk like Zuck is as easy as 1234

Uncle Sam kills funding for CVE program. Yes, that CVE program

Chinese snoops use stealth RAT to backdoor US orgs – still active last week

Scattered Spider stops the Rickrolls, starts the RAT race

As CISA braces for more cuts, threat intel sharing takes a hit

For flux sake: CISA, annexable allies warn of hot DNS threat

Top cybersecurity boffin, wife vanish as FBI raids homes

Malware in Lisp? Now you're just being cruel

You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?

Builder.ai coded itself into a corner – now it's bankrupt

Apartment living to get worse in 5 years as 6 GHz Wi-Fi nears ‘exhaustion’

UK 'extremely dependent' on US for space security

Google carves out cloudy safe spaces for nations nervous about America's reach

Trump announces $175B for Golden Dome defense shield over America

AROS turns any PC into an Amiga with USB-bootable distro

Coinbase confirms insiders handed over data of 70K users

Scattered Spider snared financial orgs before targeting shops in Britain, America

Greater Manchester says its NHS analytics stack is years ahead of Palantir wares

M&S warns of £300M dent in profits from cyberattack

VanHelsing ransomware emerges to put a stake through your Windows heart

Paragon spyware deployed against journalists and activists, Citizen Lab claims

Too many software supply chain defense bibles? Boffins distill advice

US tech jobs outlook clouded by DOGE cuts, Trump tariffs

Microsoft isn't fixing 8-year-old shortcut exploit abused for spying

Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos

GitHub supply chain attack spills secrets from 23,000 projects

Google says it's rolling out fix for stricken Chromecasts

That 'angry guest' email from Booking.com? It's a scam, not a 1-star review

DeepSeek can be gently persuaded to spit out malware code

MINJA sneak attack poisons AI models for other chatbot users

Google begs owners of crippled Chromecasts not to hit factory reset

Sidewinder goes nuclear, charts course for maritime mayhem in tactics shift

We call this kernel saunters: How Apple rearranged its XNU core with exclaves

The Badbox botnet is back, powered by up to a million backdoored Androids

China's Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets

Ransomware criminals love CISA's KEV list – and that's a bug, not a feature

Does terrible code drive you mad? Wait until you see what it does to OpenAI's GPT-4o

Wallbleed vulnerability unearths secrets of China's Great Firewall 125 bytes at a time

MITRE Caldera security suite scores perfect 10 for insecurity

China's Silver Fox spoofs medical imaging apps to hijack patients' computers

Malware variants that target operational tech systems are very rare – but 2 were found last year

Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes

Critical flaws in Mongoose library expose MongoDB to data thieves, code execution

Check out this free automated tool that hunts for exposed AWS secrets in public repos

Snake Keylogger slithers into Windows, evades detection with AutoIt-compiled payload

XCSSET macOS malware returns with first new version since 2022

Critical PostgreSQL bug tied to zero-day attack on US Treasury

North Korea targets crypto developers via NPM supply chain attack

Russia's Sandworm caught snarfing credentials, data from American and Brit orgs

Canvassing apps used by UK political parties riddled with privacy, security issues

SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac, iPad Silicon

Security pros more confident about fending off ransomware, despite being battered by attacks

Hackers game out infowar against China with the US Navy

Fortinet: FortiGate config leaks are genuine but misleading

Microsoft eggheads say AI can never be made secure – after testing Redmond's own products

Miscreants 'mass exploited' Fortinet firewalls, 'highly probable' zero-day used

Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days

Security pros baited with fake Windows LDAP exploit traps

DNA sequencers found running ancient BIOS, posing risk to clinical research

Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed

FireScam infostealer poses as Telegram Premium app to surveil Android devices

How cops taking down LockBit, ALPHV led to RansomHub's meteoric rise

How Androxgh0st rose from Mozi's ashes to become 'most prevalent malware'

UK ICO not happy with Google's plans to allow device fingerprinting

Boffins trick AI model into giving up its secrets