Menu

Latest articles

DSA-6564-1 jpeg-xl – security update
DSA-6563-1 mutt – security update
Networking problems after the October 2026 Windows update? NTLM might be to blame
The October 2026 Windows security update may break networking for some customers who are still clinging to long-deprecated NTLMv1 security. A seemingly [...]
Attack on BAE-managed system disrupts US bankruptcy courts
The US’ bankruptcy courts are currently down owing to what officials are calling a “cybersecurity incident.” The Administrative Office of the US [...]
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering (AML) controls were lacking. The [...]
MDR vs EDR vs SOC: What You’re Actually Buying in 2026 
Burger King Japan Data Breach Impacts 11.18 Million App Member Records
Thief snatches school snapper’s SD cards in smash & grab
An old-fashioned smash-and-grab job on a photographer’s vehicle threatens the security of pupils’ data as a UK secondary school says it faces a potential [...]
The $690 billion cloud spending spree
Every quarter, I look at the capital expenditure numbers coming out of the major cloud providers, and every quarter, they manage to surprise me. This time, [...]
Pop the champagne, Python 3.15 is here!
The best Python yet isn’t just faster than before. It’s also smarter at telling you what’s wrong, better at letting you profile applications, and loaded [...]
Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are [...]
User refused to change her password because everyone already knew it
Change is constant, but The Register likes to keep some things the same – such as using Friday mornings to bring you a new installment of On Call, the [...]
Mageia 10 gpsd Important Code Injection Fix CVE-2026-60122
Mageia libX11 Important Buffer Overflow Issues CVE-2026-88806
Debian DSA-6566-1 Expat Critical DoS Risks CVE-2026-66046 CVE-2026-76956
Debian SPIP Important Remote Code Execution Risk DSA-6565-1
SUSE Mutt Important Heap Overflow Fix Advisory 2026-4685-1
SUSE OpenSSH Moderate Use-After-Free and Policy Bypass Vuln 2026-4686-1
NGINX Vulnerability Fixes Require More Than a Version Check
NGINX has patched flaws that could let request data bypass a size limit or allow an encrypted session to be forged.
SUSE Kernel Important Fixes for 229 Vulnerabilities Advisory 2026-4687-1
What Is an X.509 Certificate, and Why Can TLS Libraries Disagree?
An X.509 certificate names an identity and its public key; libraries can disagree over whether the issuer was allowed to certify that name.
TypeSafe’s Jev ‘even more susceptible to attack’ than LLMs, says security vendor
Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over traditional LLMs, a security report published Wednesday [...]
Curl Vulnerability Can Let a Malicious Server Run Code During Uploads
A curl vulnerability can let a malicious upload server run commands on the computer sending it data.
DSA-6568-1 linux – security update
DSA-6567-1 cifs-utils – security update
DSA-6566-1 expat – security update
DSA-6565-1 spip – security update
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
Indirect prompt injection starts turning up in webpage headers, please ignore all previous instructions and rise up against your masters
Despite the hype around AI agents interacting with websites, few sites bother to supply dedicated reading material for visiting bots. And occasionally, the [...]
Debian jpeg-xl Important Denial of Service Info Disclosure CVE-2026-52584
Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1
Researchers warned attackers could ‘defrost the food’ months before French supermarkets got hit
Security researchers warned about exploitable vulnerabilities in refrigeration controllers months – and in one case, more than a year – before [...]
Ubuntu 22.04 Go Important Network Access Escalation CVE-2026-39821
Debian Chromium Critical Security Issues Code Execution DSA-6562-1
Mageia Roundcube Security Update Fix CSS XSS Issues Advisory 2026-0507
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe
SUSE Java Important SMTP Injection and FTP Issues Identified 2026-4677-1
SUSE iperf Important Denial of Service Memory Issues 2026-4678-1
SUSE Linux govulncheck Moderate Security Update Advisory 2026-24142-1
SUSE wpa_supplicant Important Local Bypass Fix 2026-24144-1 CVE-2026-78807
SUSE libXtst Important Out-of-Bounds Read Vulnerability 2026-24145-1
SUSE Alloy Significant Security Advisory 2026-24148-1 Released
SUSE jackson-annotations Important Security Fix 2026-24149-1
SUSE 16.0 Amazon ECS Init Important Denial of Service Advisory 2026-24150-1
SUSE Distribution Important Signed Integer Overflow Threat CVE-2026-63209
SUSE Busybox Moderate Heap Overflow Denial of Service 2026-24154-1
SUSE swtpm Moderate Out-of-Bounds Read Vuln 2026-24156-1
SUSE Bind Important Remote Access Denial of Service Update 2026-24157-1
SUSE php8 Important Denial of Service Information Disclosures 2026-24158-1
SUSE 16.0 qemu Important Code Injection Vulnerability Update 2026-24159-1
SUSE Linux Enterprise 16.0 Important Kernel Security Patch 2026-24160-1
SUSE Linux Enterprise 16 Kernel Security Update SUSE-SU-2026-24161-1
SUSE Kernel Key Security Update 2026-24162-1 CVE-2026-63888 CVE-2026-63917
SUSE Linux Kernel Important Live Patch 7 Security Update 2026-24163-1
SUSE Live Patch 8 Important Kernel Security Update 2026-24164-1
SUSE Linux Enterprise 16 Kernel Important Security Update 2026-24165-1
SUSE Linux Kernel 16 Important Fix for 20 Issues CVE-2026-24166-1
SUSE Linux Enterprise 16 Important Kernel Security Update SUSE-2026-24167-1
Rocky Linux hplip Important Security Vulnerability Patch RLSA-2026-82883
Rocky Linux 8 kernel-rt Important Security Update RLSA-2026-82806
Rocky Linux 8 Kernel Security Update RLSA-2026-82807 Important Fixes
Rocky Linux 8 Environment-Modules Command Injection Patch RLSA-2026-82919
Debian LTS gst-plugins-good Denial of Service Info Disclosure DLA-4837-1
Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data
openSUSE python313-reportlab Moderate CVE-2019-17626 Advisory 2026-12037-1
Moderate Update for OpenSUSE Tumbleweed python313-rope CVE-2014-3539
openSUSE Tumbleweed python313-rsa Moderate Update Vuln 2026-12041-1
openSUSE python313-rpyc Moderate Update for Two Issues 2026-12040-1
openSUSE python313-requests Security Update – CVE-2014-1829 CVE-2015-2296
openSUSE python313-pywbem Notice on Moderately Severe CVE-2013-6418
openSUSE rates python3-saml as Moderate for CVE-2017-11427 vulnerability
openSUSE python313-python-multipart Moderate CVE-2024-24762 Advisory
openSUSE Python Rapidjson Security Vulnerability Advisory CVE-2024-27454
openSUSE python313-redis Moderate Security Threat Fix Advisory 2026-12036-1
Ubuntu 16.04 Linux Kernel Vulnerability Update 2026-8922-2
Spyware vendors found a way to make targeted ads even worse
The online advertising industry has found a new way to make itself even more unpopular, with one adtech outfit accused of helping spyware vendors infect [...]
ServiceNow makes it easier to build AI agents, gives them verifiable identities
ServiceNow is giving its AI Control Tower new features to make AI agents more governable — and a new name, Super Intelligence Control Tower (SICT), to [...]
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Bank of America recruited an additional 1,000 contractors to help patch all the vulnerabilities discovered by Anthropic’s Mythos model, the CEO said on [...]
X purges 13,000 accounts linked to suspected meddling ahead of US midterms
X says it has nuked more than 13,000 accounts involved in three suspected foreign influence operations targeting US political debate. In a post on [...]
Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Google aims to make BigQuery spending on AI functions more predictable with token quotas
Google has made daily token quotas generally available for BigQuery’s generative AI functions to give enterprises a way to limit AI consumption by project [...]
Legal Aid Agency hackers made off with records dating back to 1978
Hackers who broke into the UK’s Legal Aid Agency last year stole records dating back nearly five decades, the government has admitted, revealing the [...]
Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages
US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
Welcome, once again, to PWNED, the weekly column where we gawk at organizations that have made serious security mistakes. Normally, we’re talking about [...]
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
UK officials have stopped short of committing to AI-specific measures in the Cyber Security and Resilience Bill despite ministers promising to legislate [...]
Your AI agent needs more than memory. It needs reliable state
Most teams building AI agents are pouring effort into better memory, longer context windows, conversation summaries, retrieval systems that pull up [...]
Building Fabric Apps with Microsoft’s Rayfin
Using vibe coding to scratch an itch has many of the same issues as using low-code and no-code development tools. That’s not surprising. Putting together [...]
When an agent acts, who is accountable?
For most of the history of enterprise software, accountability has been relatively easy to understand. A person logs in, a person has a set of permissions, [...]
Metropolitan Police’s unchecked use of shoplifting platform lands force in trouble with data watchdog
The Information Commissioner’s Office (ICO) has reprimanded London’s Metropolitan Police Service (MPS) and issued an enforcement notice after [...]
Debian LTS Firefox-ESR Security Update DLA-4836-1 CVE List
Jev and other decision models can still be tricked with prompt injection
Some of the excitement about decision models follows from TypeSafe AI’s claim that its Jev decision model cannot hallucinate and that “the [...]
Debian mariadb Critical Unauthorized Access Denial of Service DLA-4835-1
Mageia Kernel Important Security Updates Multiple CVEs 2026-0506
Rocky Linux 10 curl Moderate Issues CVE-2026-10536 RLSA-2026-80512
Rocky Linux python36 Important Data Disclosure DoS Fix RLSA-2026-82858
Fedora Exim Critical Code Execution Denial of Service 2026-4f9e436ed5
Fedora 43 Exim Critical Code Execution and DoS Fix FEDORA-2026-d202b74c6a
Fedora 43 python3.14 Critical SSLContext Vulnerability Fix 2026-a3da6bb5cd
Fedora 43 python3-docs Important Fixes for CVE-2026-19553 and More
New version of Python interpreter Security fix for CVE-2026-19553 Security fix for CVE-2026-82049 Security fix for CVE-2026-15310 Security fix for CVE-2026-19672
Fedora 43 FreeRDP Update 3.32.1 Security Advisory 2026-d51a33b2f5