The Register – Security

Multiple researchers using the same tools to find the same bugs are creating ‘unnecessary pain and pointless work’

Attackers stole a limited amount of internal credential material after malware hidden in poisoned packages reached two staff machines

Parliamentary committee tells ministers online safety regime is failing children and warns ‘no action is not an option’

Other than Instructure execs – maybe?

Owe Martin Andresen faces charges in both US and Germany connected with money laundering, claims he sent gold bars directly to his doorstep

Fresh kernel flaw comes with public exploit code and continues ugly run of highly reliable privilege escalation bugs tied to memory and page-cache handling

Human IT managers thought they were being nice to the boss, but were assisting a threat actor

UK researchers find LLMs are learning to finish jobs faster and improving all the time

Reducing memory requirements to control costs in a new wave of kit

Palo Alto Networks found and fixed 75 flaws this month, up from its usual five

If a setting fails in the forest and nobody hears it …

Apache, Alibaba databases vulnerable and only one has a patch

Security pros warn YellowKey claim could make stolen laptops a much bigger problem

Where it’s been well and truly forked, seemingly without Microsoft’s code locker noticing

Communist government plans personalized ‘data-driven decision-making based on real-time information’ by 2035

The good news: no 0-days. The bad news: busy week ahead for Microsoft admins

Affected factories back up and running, we’re told

Volume and sensitivity of the data cited as chief concerns

Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code

After years of stopping dead at the green bubble border, iPhone and Android users can finally send E2EE messages without relying on third-party apps

Fears exponential increase in attack scale and speed

UPDATED: Sorry, kids, everything’s back up so get to work on your new assignment – An essay on the ethics of paying ransoms, because it looks like that’s what happened here

New IElevator2 COM interface? No problem

After all that hype, AI scanner found one low-severity cURL flaw

Customers urged to keep an eye out for phisherfolk

Cybercrooks ruin engineers’ weekends with Saturday attack

That’s not a radio. THIS is a radio

All your compromised credentials are belong to us now instead of the other gang

Broken disclosure embargo left admins facing a fresh root-level flaw with no CVE

After years of insisting end-to-end encryption was the future of online comms, Zuckcorp has handed itself full visibility into user chats once again