September 2026
Ex-soldier’s telecom hacking spree earns him 70 months
Active-duty campaign targeted at least ten organizations and sought $1 million in ransom payments
Certainties in life: Death, taxes, and critical Citrix vulns under attack
Sunday NetScaler patch dump fixes trio of critical vulns and five more serious messes
OpenAI pauses some training amid allegations its rogue agents behaved more badly than first thought
Amid allegations that agents may have gone off the rails thousands of times, China set up some kind of agentic incident hotline
Fake Google Security Team ad says ‘no script reading’ in voice phishing – then prints the script
More mockery and memes from the Dark Web Roast
ShinyHunters tells The Reg: We hacked the FBI to ‘protect our business’
Data theft and extortion biz, that is
Crooks use fake desktop apps to fool HR staff into giving them remote access
Nothing in the attack chain screams malicious software, except none of the impersonated HR and payroll providers actually offers a desktop app
Bitget blames North Korea for $387.5M crypto wallet raid
Familiar fingerprints point to Kim’s regime … to the surprise of nobody
Which copy of that file is the real one? Dinner, off the record, in Midtown
Joe Fay chairs a Register dinner in New York on the file infrastructure nobody has got around to replacing, with nothing on the record.
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
Operator’s AI bill averaged just $25 per completed scan
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
'SalesBleed' security flaws 'lead to very unexpected consequences'