More mockery and memes from the Dark Web Roast

Nothing in the attack chain screams malicious software, except none of the impersonated HR and payroll providers actually offers a desktop app

'SalesBleed' security flaws 'lead to very unexpected consequences'

Prime Minister has given OpenAI boss a stern talking-to

Good news: there's a patch. Bad news: both CISA and F5 warn that it's under active exploitation

Customers got crime crew's calling card instead of access to journals

SPONSORED FEATURE: Why AI-driven operations need a data-rich view of the network

Regulator wants to know whether parent Aylo did its homework before reopening the door to UK iPhone users

SPONSORED EXPLAINER: Merging security into the network makes enterprise protection more agile

'first' publicly documented Windows implant to use LLMs for C2

This time it's personal

BigDiskBuster leaves Microsoft's antivirus running but unable to install updates

Chinas AI darling goes on the defense after engineer highlighted Grok-esque security flaws

SPONSORED FEATURE: AI agents may be unpredictable. Who they are, what they can do, and who owns them shouldnt be.

Used by crims to compromise 12K+ email inboxes across 10K+ global orgs

Of 225 flaws found by Glasswing and tracked by VulnCheck researcher, just one has confirmed exploitation in the wild

Ad biz promises users control while bug could expose voice prompts

'Humans are responsible, not the AI,' argues Scott Bessent as he calls out OpenAI agents' hack of Hugging Face

Rival crew demands eight figures and threatens to expose companies that paid to keep quiet

Attackers are courting crate owners with plausible company profiles and booby- trapped recruitment calls

High time to stop kicking the security can down the road, investor tells The Reg

Agentic exploits for the win (again)

WaterPlum recruiters used bogus coding tests to backdoor jobseekers and raid more than 7,000 crypto wallets

AI, fake uniforms, and mock offices help crooks sell the con

Think tank points out that companies banned by Washington will help run the regime that Uncle Sam now controls

Plugin4Shell attack affects all the major coding agents, researchers say

Eve's dropping in on Alice and Bob

Beware the SparroWocky, my son! The backdoor that bites

City Relay says intruders accessed its Metabase Cloud instance twice and extracted customer data

ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch

Even a temporary staging server needs to be locked down.

Platforms comply just enough to avoid being blocked, leaving the regulator chasing debt

This is a test - it is only a test

Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28

Data protection chiefs call for 'immediate review' of data protection models

Sensitive personal data was involved, but there is no evidence it was shared with third parties

Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner

September Patch Tuesday part 2?

Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites

'Enemies of the regime' on notice