The Register – Security

‘The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,’ Check Point researcher tells The Reg

People trust their AI assistants and it’s easy to abuse this trust

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

Ex-employee claims this ‘meets the definition of an insider threat’

Allows ISVs to put their names on the door so desirable bots always get in

Open API could reveal everything an attacker needs to impersonate bank officials

If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day

Not today, Putin

At least two vulnerabilities are already under attack

You don’t need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world’s password habits are so sloppy

In the Azure Edition, of course

Carmaker points finger at an ‘unknown’ flaw as customer fallout continues

Time to start praying to the goddess of wisdom and war

Personal cell phones on protective missions, no threat detection on government-issued devices among the litany of sins

Researchers warn many AI coding assistants now execute commands from project configurations

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

One rule for the workers, another for execs

Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models

Spotted in intrusions targeting insurance, education, IT, and professional services sectors

Former employee accuses company of prioritizing pending IPO over client security

And the admin password was right in the Active Directory description field

To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust

CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought

200+ C2 servers linked to StealC and Amadey shut down

‘Permanent biometric surveillance of the public square’ incompatible with policing by consent, say critics

Five ISPs and plenty of users await their fate

Plus more blasts from the past: NetWare, FTP, and HTTP

Bosses told to step up and get cybersecurity right

Package dependencies can create vulnerabilities that are fiendishly hard to find and stamp out

A plethora of pwn-prevention, including a ‘Patch The Planet’ pledge