Research News • The Register

Claude attacks were 'Rorschach test' for infosec community, scaring former NSA boss

RSAC 2026 'It freakin' worked' says Rob Joyce - and shows how relentless AI agents can find holes humans miss

RSA23 Mar 2026 | 2

Lightning-fast exploits make it essential to patch fast, ask questions later

Here's where you ought to spend your security billable hours budget this year

CSO23 Mar 2026 | 6

Smooth criminals talking their way into cloud environments, Google says

RSAC 2026 Voice phishing is second most common initial access method across all IR probes, and top in cloud break-ins

RSA23 Mar 2026 | 1

State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns

Darksword is the second iOS exploit chain in a month

Research18 Mar 2026 | 25

Cybercrime has skyrocketed 245% since the start of the Iran war

Hacktivists use proxy services from Russia, China for 'billions of designed-for-abuse connection attempts'

Cyber-crime16 Mar 2026 | 1

Rogue AI agents can work together to hack systems and steal secrets

Prompt like a hard-ass boss who won't tolerate failure and bots will find ways to breach policy

Research12 Mar 2026 | 7

Fake job applications pack malware that kills endpoint detection before stealing data

Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses

Research10 Mar 2026 | 39

AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours

David and Goliath…but with AI agents

Security09 Mar 2026 | 24

Kaspersky dismisses claims Coruna iPhone exploit kit is connected to NSA-linked operation

Follows suggestions iPhone-pwning toolset bears hallmarks of zero-days that targeted Russian diplomats

Security04 Mar 2026 | 8

Until last month, attackers could've stolen info from Perplexity Comet users just by sending a calendar invite

AI browsing agent left local files open for the taking

Research03 Mar 2026 | 4

Denizens of DEF CON are 'fed up with government'

Interview Jake Braun thinks hackers need to create a 'Digital arsenal of democracy' to defend us all

Research28 Feb 2026 | 65

Ransomware payments cratered in 2025, but attacks surged to record highs

Smaller crews piled in as old names splintered and rebranded

Research27 Feb 2026 | 5

Claude collaboration tools left the door wide open to remote code execution

Anthropic fixed the flaws – but the AI-enabled attack surfaces remain

Research26 Feb 2026 | 4

Fake 'interview' repos lure Next.js devs into running secret-stealing malware

Come for the coding test, stay for the C2 traffic

Security25 Feb 2026 | 4

Threat intelligence supply chain is full of weak links, researchers find

And they're being stressed by geopolitical concerns that threaten to slow important data-sharing efforts

Research25 Feb 2026 | 3

Research

Anthropic: All your zero-days are belong to Mythos

Don't open that WhatsApp message, Microsoft warns

Security boffins scoured the web and found hundreds of valid API keys

Scammers have virtual smartphones on speed dial for fraud

1K+ cloud environments infected following Trivy supply chain attack

Claude attacks were 'Rorschach test' for infosec community, scaring former NSA boss

Lightning-fast exploits make it essential to patch fast, ask questions later

Smooth criminals talking their way into cloud environments, Google says

State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns

Cybercrime has skyrocketed 245% since the start of the Iran war

Rogue AI agents can work together to hack systems and steal secrets

Fake job applications pack malware that kills endpoint detection before stealing data

AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours

Kaspersky dismisses claims Coruna iPhone exploit kit is connected to NSA-linked operation

Until last month, attackers could've stolen info from Perplexity Comet users just by sending a calendar invite

Denizens of DEF CON are 'fed up with government'

Ransomware payments cratered in 2025, but attacks surged to record highs

Claude collaboration tools left the door wide open to remote code execution

Fake 'interview' repos lure Next.js devs into running secret-stealing malware

Threat intelligence supply chain is full of weak links, researchers find

Popular

AMD's AI director slams Claude Code for becoming dumber and lazier since last update

The developer who came in from the cold and melted a mainframe

Windows asks a networking question on a Stratford billboard

Patch to end i486 support hits Linux kernel merge queue

AI agents found vulns in this popular Linux and Unix print server

Attackers exploited this critical FortiClient EMS bug as a 0-day

Anthropic closes door on subscription use of OpenClaw

Anthropic reveals $30bn run rate and plans to use 3.5GW of new Google AI chips

AI slop got better, so now maintainers have more work

Apple's chips are the core of a new landscape, but its biggest win is Windows

AI agents abound, unbound by rules or safety disclosures

Crims create fake remote management vendor that actually sells a RAT

Android malware taps Gemini to navigate infected devices

Posting AI-generated caricatures on social media is risky, infosec killjoys warn

Payroll pirates are conning help desks to steal workers' identities and redirect paychecks

For the price of Netflix, crooks can now rent AI to run cybercrime

Fast Pair, loose security: Bluetooth accessories open to silent hijack

A simple CodeBuild flaw put every AWS environment at risk – and pwned 'the central nervous system of the cloud'

'Imagination the limit': DeadLock ransomware gang using smart contracts to hide their work

Popular Python libraries used in Hugging Face models subject to poisoned metadata attack

Mandiant open sources tool to prevent leaky Salesforce misconfigs

OpenAI putting bandaids on bandaids as prompt injection problems keep festering

Fake Windows BSODs check in at Europe's hotels to con staff into running malware

Your car’s web browser may be on the road to cyber ruin

China's Ink Dragon hides out in European government networks

Browser 'privacy' extensions have eye on your AI, log all your chats

Honeypots can help defenders, or damn them if implemented badly

10K Docker images spray live cloud creds across the internet

As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs

Apache warns of 10.0-rated flaw in Tika metadata ingestion tool

Novel clickjacking attack relies on CSS and SVG

'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole

Swiss government says give M365, and all SaaS, a miss as it lacks end-to-end encryption

Zendesk users targeted as Scattered Lapsus$ Hunters spin up fake support sites

HashJack attack shows AI browsers can be fooled with a simple ‘#’

Fresh ClickFix attacks use Windows Update trick-pics to steal credentials

LLM-generated malware is improving, but don't expect autonomous attacks tomorrow

Researchers claim 'largest leak ever' after uncovering WhatsApp enumeration flaw

Tens of thousands more ASUS routers pwned by suspected, evolving China operation

Overconfidence is the new zero-day as teams stumble through cyber simulations

UK asks cyberspies to probe whether Chinese buses can be switched off remotely

LLM side-channel attack could allow snoops to guess what you're talking about

Previously unknown Landfall spyware used in 0-day attacks on Samsung phones

MIT Sloan quietly shelves AI ransomware study after researcher calls BS

Proton trains new service to expose corporate infosec cover-ups

Invisible npm malware pulls a disappearing act – then nicks your tokens

Researchers exploit OpenAI's Atlas by disguising prompts as URLs

How malware vaccines could stop ransomware's rampage

Devs are writing VS Code extensions that blab secrets by the bucketload

Pro-Russia hacktivist group dies of cringe after falling into researchers' trap

Tile trackers are a stalker's dream, say Georgia Tech researchers

Hunt for RedNovember: Beijing hacked critical orgs in year-long snooping campaign

Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects

Google warns China-linked spies lurking in 'numerous' enterprises

Nearly half of businesses suffered deepfaked phone calls against staff

Kaspersky: RevengeHotels checks back in with AI-coded malware

Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack

FileFix attacks use fake Facebook security alerts to trick victims into running infostealers