Research News • The Register

8,000+ Asus routers popped in 'advanced' mystery botnet plot

No formal attribution made but two separate probes hint at the same suspect

Research29 May 2025 |

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

If it ain't broke?

CSO23 May 2025 | 1

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

Go ahead, please do Bash static analysis

CSO30 Apr 2025 | 39

Enterprise tech dominates zero-day exploits with no signs of slowdown

As Big Tech gets used to the pain, smaller vendors urged to up their game

Research29 Apr 2025 | 1

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

Because coding phishing sites from scratch is a real pain in the neck

Cyber-crime25 Apr 2025 | 5

Booby-trapped Alpine Quest Android app geolocates Russian soldiers

Back of the nyet!

Research24 Apr 2025 | 37

Who needs phishing when your login's already in the wild?

Stolen credentials edge out email tricks for cloud break-ins because they're so easy to get

CSO23 Apr 2025 | 11

A pot of $250K is now available to ransomware researchers, but it feeds a commercial product

Security bods can earn up to $10K per report

Research22 Apr 2025 | 3

Today's LLMs craft exploits from patches at lightning speed

Erlang? Er, man, no problem. ChatGPT, Claude to go from flaw disclosure to actual attack code in hours

AI Software Development Week21 Apr 2025 | 19

Hacking US crosswalks to talk like Zuck is as easy as 1234

Video AI-spoofed Mark joins fellow billionaires as the voice of the street – here's how it was probably done

Bootnotes19 Apr 2025 | 88

Uncle Sam kills funding for CVE program. Yes, that CVE program

Updated Because vulnerability management has nothing to do with national security, right?

CSO16 Apr 2025 | 179

Chinese snoops use stealth RAT to backdoor US orgs – still active last week

Let the espionage and access resale campaigns begin (again)

Research15 Apr 2025 | 3

Scattered Spider stops the Rickrolls, starts the RAT race

Despite arrests, eight-legged menace targeted more victims this year

Research08 Apr 2025 | 5

As CISA braces for more cuts, threat intel sharing takes a hit

Analysis How will 'gutting' civilian defense agency make American cybersecurity great again?

Public Sector08 Apr 2025 | 11

For flux sake: CISA, annexable allies warn of hot DNS threat

Shape shifting technique described as menace to national security

CSO03 Apr 2025 | 5

Top cybersecurity boffin, wife vanish as FBI raids homes

Updated Indiana Uni rm -rf online profiles while agents haul boxes of evidence

Research31 Mar 2025 | 21

Malware in Lisp? Now you're just being cruel

Miscreants warming to Delphi, Haskell, and the like to evade detection

Research29 Mar 2025 | 56

Apr	MAY	Jun
	30
2024	2025	2026

Topics

Special Features

Vendor Voice

Resources

8,000+ Asus routers popped in 'advanced' mystery botnet plot

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

'Ongoing' Ivanti hijack bug exploitation reaches clouds

Intel's data-leaking Spectre defenses scared off yet again

You think ransomware is bad now? Wait until it infects CPUs

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

Enterprise tech dominates zero-day exploits with no signs of slowdown

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

Booby-trapped Alpine Quest Android app geolocates Russian soldiers

Who needs phishing when your login's already in the wild?

A pot of $250K is now available to ransomware researchers, but it feeds a commercial product

Today's LLMs craft exploits from patches at lightning speed

Hacking US crosswalks to talk like Zuck is as easy as 1234

Uncle Sam kills funding for CVE program. Yes, that CVE program

Chinese snoops use stealth RAT to backdoor US orgs – still active last week

Scattered Spider stops the Rickrolls, starts the RAT race

As CISA braces for more cuts, threat intel sharing takes a hit

For flux sake: CISA, annexable allies warn of hot DNS threat

Top cybersecurity boffin, wife vanish as FBI raids homes

Malware in Lisp? Now you're just being cruel

Empire of office workers strikes back against RTO mandates

Three ways to run Windows apps on a Linux box

Google co-founder Sergey Brin suggests threatening AI for better results

Trump can bluster and bluff all he wants, but iPhone manufacturing isn't coming to the US

New Russian cyber-spy crew Laundry Bear joins the email-stealing pack

ASUS to chase business PC market with free AI, or no AI - because nobody knows what to do with it

Don't click on that Facebook ad for a text-to-AI-video tool

AI agents don't care about your pretty website or tempting ads

DragonForce double-whammy: First hit an MSP, then use RMM software to push ransomware

Victoria's Secret website laid bare for three days after 'security incident'

You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?

VanHelsing ransomware emerges to put a stake through your Windows heart

Paragon spyware deployed against journalists and activists, Citizen Lab claims

Too many software supply chain defense bibles? Boffins distill advice

US tech jobs outlook clouded by DOGE cuts, Trump tariffs

Microsoft isn't fixing 8-year-old shortcut exploit abused for spying

Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos

GitHub supply chain attack spills secrets from 23,000 projects

Google says it's rolling out fix for stricken Chromecasts

That 'angry guest' email from Booking.com? It's a scam, not a 1-star review

DeepSeek can be gently persuaded to spit out malware code

MINJA sneak attack poisons AI models for other chatbot users

Google begs owners of crippled Chromecasts not to hit factory reset

Sidewinder goes nuclear, charts course for maritime mayhem in tactics shift

We call this kernel saunters: How Apple rearranged its XNU core with exclaves

The Badbox botnet is back, powered by up to a million backdoored Androids

China's Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets

Ransomware criminals love CISA's KEV list – and that's a bug, not a feature

Does terrible code drive you mad? Wait until you see what it does to OpenAI's GPT-4o

Wallbleed vulnerability unearths secrets of China's Great Firewall 125 bytes at a time

MITRE Caldera security suite scores perfect 10 for insecurity

China's Silver Fox spoofs medical imaging apps to hijack patients' computers

Malware variants that target operational tech systems are very rare – but 2 were found last year

Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes

Critical flaws in Mongoose library expose MongoDB to data thieves, code execution

Check out this free automated tool that hunts for exposed AWS secrets in public repos

Snake Keylogger slithers into Windows, evades detection with AutoIt-compiled payload

XCSSET macOS malware returns with first new version since 2022

Critical PostgreSQL bug tied to zero-day attack on US Treasury

North Korea targets crypto developers via NPM supply chain attack

Russia's Sandworm caught snarfing credentials, data from American and Brit orgs

Canvassing apps used by UK political parties riddled with privacy, security issues

SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac, iPad Silicon

Security pros more confident about fending off ransomware, despite being battered by attacks

Hackers game out infowar against China with the US Navy

Fortinet: FortiGate config leaks are genuine but misleading

Microsoft eggheads say AI can never be made secure – after testing Redmond's own products

Miscreants 'mass exploited' Fortinet firewalls, 'highly probable' zero-day used

Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days

Security pros baited with fake Windows LDAP exploit traps

DNA sequencers found running ancient BIOS, posing risk to clinical research

Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed

FireScam infostealer poses as Telegram Premium app to surveil Android devices

How cops taking down LockBit, ALPHV led to RansomHub's meteoric rise

How Androxgh0st rose from Mozi's ashes to become 'most prevalent malware'

UK ICO not happy with Google's plans to allow device fingerprinting