The Register – Security

Attackers now ready to exploit how things work, rather than just break them, says Oracle support expert

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

Sponsored search results lead developers straight into a ClickFix malware trap

Its own command language, 23 instructions – signs point to ‘well-resourced operation rather than an opportunistic one’

Glassbox dev admits he had some help from Claude to build locally running tool

No risk to wider energy system, government tells The Reg

Sawtooth waves you can’t hear still mess with your Bluetooth. Firefox and Brave say they’ve got you covered

Once shunned by the IT crowd, pen-and-paper password vaults are getting the love they deserve in 2026

Agents are also the new attack surface – cue defenders’ existential angst

Quarantining leaked credentials is not good enough

Ukrainian hacktivists exploiting the bugs, but TrueConf’s reach stretches well beyond home turf

Malicious updates turned routine builds into a delivery system for infostealer malware

Secure Workload Software has five nasty flaws and even SaaS users have updates to install

Don’t click on that State Department meeting invite

Follow the money

Clever protocol wrangling gets iBiz-only people tracking working on a non-iGadget

Because apparently even ransomware gangs can’t trust the people they do business with

A spoonful of encryption helps the malware go down

Stolen details range from contact information to household finances and withholding rates

Fortunately, the company had a policy of checking source code on GitHub first

‘It is an active threat’

‘Personally owned body-worn cameras are prohibited,’ ICE tells The Reg. Because the last thing DHS needs is more proof of misconduct

CEO apologizes for police misuse as activists call for vandal action against license plate cameras

Rebranded feature promises household alerts without video, but mind the small print

Unknown parties know where you stayed last summer, down under, across 120 Quest properties

Expanded multistage chain of thought monitoring makes frontier model work more expensive

Gaps in expiry checks could let dead plastic make purchases again

Phishing, malvertising attacks could target devs to gain access to private corporate networks

Patch batch spans current kit, older iGadgets, Macs, and Vision Pro

How to social engineer an AI’s reasoning engine