Second Catalyst SD-WAN Manager flaw exploited as an 0-day this month

According to the one person who actually read the research paper

Joins the ranks of Nottingham Uni and 100 other unnamed victims

Federal Data Center Enhancement Act (FDCEA) of 2023 covers standards including security and sustainability

Connectivity checker trips browser alarms thanks to lapsed security paperwork

Google says the intruders were on the hunt for everything from drone tech to pathogens

Community repo freezes new accounts after attackers swamp it with poisoned package updates

From Java tests to Shai-Hulud, bots keep proving they'll swallow anything you feed them

AI agents can't be trusted, so don't give them dangerous powers

Iowans scheme undone after misplacing trust in former coworker

Clinical trial participant data stolen, but pharma giant says exposed records were pseudonymized

And it was Microsoft Copilot that unwittingly revealed the longstanding vulnerability

Telegram-based 'Outsider Enterprise' accused of sending millions of scam texts and impersonating trusted brands

Authority admits mass message to home-schooling families revealed recipients' addresses, prompting ICO report and apology

CEO of Mumsnet among the six-member team

Mission Control sends its regards

University of Nottingham is first of many, Shiny tells The Reg

Another day, another Windows exploit code

'We have no reason to believe that our data or systems have been compromised. We are in the process of contacting the Maine Attorney General's office to have this removed.'

The CEO thought this was the best way to deal with some email issues

PRC eyes are watching you

Revenge is a dish best served code

Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors

Remote, unauthenticated RCE with root privileges is about as bad as it gets

Unless you're an admin or vulnerability manager then you're totally screwed

As if there weren't enough package poisonings to worry about

iBiz might not win the AI race, but analysts say it's focusing on features people may actually use

Encrypted messaging app warns device-level checks could be repurposed for censorship

Google paid researcher a tidy $55K bounty for its discovery

Authorities say the breach only exposed public chat rooms, but alleged attacker claims to have accessed far more data

Two years on from ransomware attack, hospitals are still trying to identify and warn patients

When an unsolicited job offer sounds too good to be true

Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7

Meanwhile, 13 schools in Wales affected by separate attack

Miasma worm shapeshifts, but cloud secret-scouting remains the goal

Zuckercorp says surveillance-for-hire vendor was still running phishing operations after federal court told it to knock it off

Totally different attack from the break-in last month. Oh so that's OK then

When 'Chatty Spider' morphs into tech services cosplay spider

Good luck, sys admins

Those receiving aid in the famine-threatened, war-torn territory told support will remain