Feed the-register The Register

The Register

Link https://www.theregister.com/
Feed http://www.theregister.co.uk/headlines.atom
Copyright Copyright © 2025, Situation Publishing
Updated 2025-11-14 18:45
Sting nails two front firms in Nork IT worker scam
There's also a rogue Russian on the list The US Treasury Department has announced sanctions against two Asian companies and two individuals for allegedly helping North Korean IT workers fake their way into US jobs....
Crims laud Claude to plant ransomware and fake IT expertise
AI lowers the bar for cybercrime, Anthropic admits comment Anthropic, a maker of AI tools, says that AI tools are now commonly used to commit cybercrime and facilitate remote worker fraud....
Windows Backup for Organizations doesn't actually save data files
Not a disaster recovery option, but good enough for a migration Microsoft continues to take what's familiar to ordinary users and offer it to enterprises. The latest functionality is Windows Backup for Organizations....
Putin on the code: DoD reportedly relies on utility written by Russian dev
Fast-glob is widely used in government, security lab says updated A Node.js utility used by thousands of public projects - and more than 30 Department of Defense ones - appears to have a sole maintainer whose online profiles identify him as a Yandex employee living in Russia....
Word to autosave new docs to the cloud before you can even hit Ctrl+S
Feature rolls out to Microsoft 365 Insiders, stashing unnamed files in OneDrive by default Ever get that sinking feeling when Word crashes before you've made your first save? An application update is set to save the day by automatically enabling autosave to the cloud for new documents, before you've even given them a filename....
Bun JS toolkit adds MySQL driver, secrets API, YAML, and more
Feature bloat, or added value for this JavaScript toolkit? The Bun team has released version 1.2.21 of its JavaScript bundler and runtime, written in Zig, adding features including built-in drivers for MySQL and SQLite, a YAML parser, and a secrets manager for tools and local development....
Nx NPM packages poisoned in AI-assisted supply chain attack
Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being uploaded to the NPM registry on Tuesday evening....
Uncle Sam throws AI 'chili cook-off' to spice up healthcare fraud detection
No stew on the stove, but plenty of heat as devs compete to flag suspect Medicare data Seeking to rein in healthcare fraud, the US Centers for Medicare & Medicaid Services (CMS) is seeking explainable AI models that can identify patterns suggestive of malfeasance....
The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams
Don't let it happen to you Storm-0501, a financially motivated cybercrime crew, recently broke into a large enterprise's on-premises and cloud environments, ultimately exfiltrating and destroying data within the org's Azure environment. The criminals then contacted the victim via a Microsoft Teams account that they'd also compromised in the attack, demanding a ransom payment for the stolen files....
Taiwan indicts three over alleged theft of TSMC trade secrets
Chipmaker keen to protect assets as race for 2nm process heats up Taiwanese prosecutors have charged three people over the alleged theft of TSMC's trade secrets....
Classic Psion fan releases proof-of-concept language server for OPL
Vintage computing boffinry to please palmtop enthusiasts Vintage computing enthusiast Colin Hoad has released a gift to anyone who fondly remembers Psion's classic EPOC-based palmtops and their Open Programming Language (OPL): a language server which brings modern quality-of-life features to the OPL programmer, regardless of their development environment....
Microsoft can't guarantee data sovereignty – OVHcloud says 'We told you so'
French provider seizes on Redmond's admission that US law could override local protections Interview European cloud provider OVHcloud has long warned about the risks of relying on foreign tech giants for critical infrastructure - especially when it comes to data sovereignty....
GhostBSD 25.02 adds 'Gershwin' desktop for a Mac-like twist
Hybrid of GNUstep and Xfce channels classic NeXT vibes The latest release of GhostBSD, an easy graphical FreeBSD distribution, includes a brand new macOS-like desktop environment, "Gershwin."...
Salesforce data missing? It might be due to Salesloft breach, Google says
Attackers steal OAuth tokens to access third-party sales platform, then CRM data in 'widespread campaign' Google says a recent spate of Salesforce-related breaches was caused by attackers stealing OAuth tokens from the third-party Salesloft Drift app....
What a difference 2 years makes: MariaDB buys back SkySQL
Because the DBaaS has lately become AI-tastic, among other things It's less than two years since MariaDB spun out SkySQL, but it's already unspinning the database-as-a-service outfit, which has since been marinated in AI sauce....
EchoStar sells off its spectrum for more than its total market cap
$23B deal with AT&T shows where the money is US telco EchoStar, valued around $14.5 billion on Wednesday morning, has sold its American spectrum allocation to AT&T for $23 billion....
VMware: The private cloud's main purpose is now keeping developers happy
The DevOps dance has new steps, but Virtzilla thinks it can teach ops folks to tango Private clouds are all about keeping developers happy and productive, according to Krish Prasad, senior veep and general manager of Broadcom's VMware Cloud Foundation division....
Unlike most of Musk's other ventures, Starship keeps it together for Flight Test 10
Explosions all expected and on schedule this time SpaceX has finally managed a test flight of Starship without anything creating an impromptu firework display....
Who are you again? Infosec experiencing 'Identity crisis' amid rising login attacks
Vendor insists passkeys are the future, but getting workers on board is proving difficult Infosec pros are losing confidence in their identity providers' ability to keep attackers out, with Cisco-owned Duo warning that the industry is facing what it calls "an identity crisis."...
Datacenters face rising thirst as Europe dries up
Analysts warn cooling demands could outstrip supplies as heatwaves intensify Water scarcity is rising up the agenda as one of the major concerns for datacenters in Europe following an unusually hot and dry summer, marked by intense heatwaves in southern parts of the continent....
More than 100 companies are chasing an AI chip gold rush. Few will surive
Quick, get some investment money before the bubble bursts The number of companies developing AI processor chips now numbers well over a hundred, according to new research....
Intel pitches Clearwater Forest as a consolidation play for all you hoarding ancient Xeons
Chipzilla's first datacenter part to use 18A process tech is another core-packed monster Hot Chips The first datacenter silicon to use Intel's two-nanometer-class 18A process tech won't arrive for a while yet, but that's not stopping the struggling x86 giant from making its sales pitch early....
BGP’s security problems are notorious. Attempts to fix that are a work in progress
Securing internet infrastructure remains a challenging endeavour Systems Approach I've been working on a chapter about infrastructure security for our network security book....
Google issued ‘State-backed attack in progress’ warnings after spotting web hijack scheme
Suspects this was Beijing-backed Typhoon and/or Panda crew targeting diplomats in Asia Google has warned customers of a suspected state-backed attack after observing a web traffic hijacking campaign....
Trump stomps feet, pulls out 't-word' again over China rare earths ban
'They have to give us magnets' World War Fee The Chinese lockdown on rare-earth minerals has drawn the ire of President Trump, who is threatening crushing tariffs if the Middle Kingdom doesn't cough up more rare earths....
Anthropic teases Claude for Chrome: Don't try this at home
AI am inevitable, AI firm argues Anthropic is now offering a research preview of Claude for Chrome, a browser extension that enables the firm's machine learning model to automate web browsing....
Google takes Photoshop to the woodshed with new image AI
It will even draw legs and arms not in the source material Google has updated its Gemini AI image generation tool with a build that caused a stir after it was released under the code name Nano Bananas....
First AI-powered ransomware spotted, but it's not active – yet
Oh, look, a use case for OpenAI's gpt-oss-20b model ESET malware researchers Anton Cherepanov and Peter Strycek have discovered what they describe as the "first known AI-powered ransomware," which they named PromptLock....
Azure apparatchik shows custom silicon keeping everything locked down
From hardware security chips and trusted execution pipelines to open source Root of Trust modules Hot Chips Microsoft is one of the biggest names in cybersecurity, but it has a less-than-stellar track record in the department. Given its reputation, Redmond can't afford to mess around when it comes to securing its cloud customers' data and workloads....
AI robs jobs from recent college grads, but isn't hurting wages, Stanford study says
Machine-learning models are automating away some entry-level roles Researchers with the Stanford Digital Economy Lab say that workers between the ages of 22 and 25 in occupations most exposed to AI, like software developers, have seen a 13 percent relative decline in employment compared to other occupations....
DOGE accused of duplicating critical Social Security database on unsecured cloud
Remember that cost-cutting group once led by Elon Musk? Federal employees are still dealing with it A Social Security Administration employee has filed a whistleblower complaint alleging that Donald Trump's DOGE cost-cutting unit has put the records of every single American at risk by duplicating an agency database in an unauthorized cloud environment....
ZipLine attack uses 'Contact Us' forms, White House butler pic to invade sensitive industries
'Many dozens' targeted in ongoing campaign, CheckPoint researcher tells The Reg Cybercriminals are targeting critical US manufacturers and supply-chain companies, looking to steal sensitive IP and other data while deploying ransomware. Their attack involves a novel twist on phishing - and a photo of White House butlers....
Defiant Broadcom calls for tech to go back where it belongs: On-premises
Expands VMware Cloud Foundation with AI freebie, new security and storage bits Broadcom has opened its VMware Explore conference in a defiant tone, declaring it now offers a superior user experience compared to public clouds....
Cupertino must stop calling Apple Watches 'carbon neutral,' German court rules
Judge says label is 'misleading' A German court has told Apple to stop advertising its Watches as being carbon-neutral, ruling that this was misleading and could not fly under the country's competition law....
Uncle Sam speedruns AI chatbot adoption for federal workers
The GSA is letting AI chatbot makers jump the FedRAMP queue The US government wants more AI chatbots in fed employees' hands, and its push to do so means that tech companies keen to provide other services will have to get in line behind the LLM makers....
Microsoft tweaks Windows Out of Box Experience for enterprises to adjust control freakery
Administrators can get patches installed via Intune before the first login From next month, Windows administrators will be able to inflict Microsoft's quality updates on users via the Out of Box Experience (OOBE) by default....
Citrix patches trio of NetScaler bugs – after attackers beat them to it
Criminals already abusing its latest zero-days Citrix has pushed out fixes for three fresh NetScaler holes - and yes, they've already been used in the wild before the vendor got around to patching....
ESA engineers trace anomaly in silent Juice spacecraft to a bug in the code
Timer fail blamed for probe going quiet as Venus looms The European Space Agency (ESA) is breathing easier after communications with Jupiter Icy Moons Explorer (Juice) were restored - the spacecraft is currently barreling toward Venus for a gravity-assist flyby on August 31....
Google kneecaps indie Android devs, forces them to register
Sideloaders face ID checks, fees, and paperwork as Chocolate Factory tightens gates Google will extend developer verification to all Android apps, not just those installed from the Play Store, beginning with Brazil, Indonesia, Singapore, and Thailand in September 2026, and followed by global rollout in 2027 and beyond....
Asahi, Nikkei sue AI search outfit Perplexity for copyright infringement
Tokyo filing adds to mounting actions against startup AI search outfit Perplexity has been hit with yet another copyright lawsuit, this time courtesy of Japan's Nikkei and Asahi media companies....
Crypto thief earns additional prison time for assaulting witness
Remy Ra St Felix led a vicious international crime ring A violent home invader and gunpoint cryptocurrency thief will now spend more than 50 years behind bars after being found guilty of assaulting a witness....
Two scrubs, one Starship: Third time lucky for SpaceX?
We've going to Mars! Oh no - anvil clouds! Elon Musk's monster rocket, Starship, remains firmly on the launchpad after two scrubs in a row, first due to an oxygen leak and then some clouds....
Docker Desktop bug let containers hop the fence with barely a nudge
Isolation? We've heard of it Docker has patched a critical hole in Docker Desktop that let a container break out and take control of the host machine with laughable ease....
Farmers Insurance harvests bad news: 1.1M customers snared in data breach
Crims raided third-party systems and lifted personal data, including license numbers and partial SSNs US insurance giant Farmers Insurance says more than a million customers had personal data nicked after a third-party vendor was compromised....
Silver State goes dark as cyberattack knocks Nevada websites offline
Phone lines also down as officials rely on social media to issue updates The state of Nevada is now two days into a cyberattack that has brought down many of its digital services....
One long sentence is all it takes to make LLMs misbehave
Chatbots ignore their guardrails when your grammar sucks, researchers find Security researchers from Palo Alto Networks' Unit 42 have discovered the key to getting large language model (LLM) chatbots to ignore their guardrails, and it's quite simple....
Malware-ridden apps made it into Google's Play Store, scored 19 million downloads
Everything's fine, the ad slinger assures us Cloud security vendor Zscaler says customers of Google's Play Store have downloaded more than 19 million instances of malware-laden apps that evaded the web giant's security scans....
Two wrongs don’t make a copyright
What the Dickens is going on in Germany? Opinion Let's talk law and let's talk donkey. Or. in the British vernacular, ass. In particular, let's go back to Charles Dickens, a pungent critic of the law, who had one of his characters in Oliver Twist say of a legal assumption that If the law supposes that, the law is a ass - a idiot."...
Trump threatens extra tariffs, tech export bans, for any nation that dares to regulate Big Tech
Poor defenseless tech companies need help despite massive profits, low tax bills, and monopoly positions +COMMENT US president Donald Trump has threatened to impose extra tariffs on imports from any nation that dares to regulate American technology companies....
VMware finally porting Cloud Foundation to Arm – in baby steps
Because AI, like everything else this year EXCLUSIVE VMware will port its flagship hypervisor and Cloud Foundation suite to the Arm processor architecture....
...24252627282930313233...