On this week's episode of The Reg's Kettle podcast, we revisit 'hacker summer camp,' where the hottest topic was ... sigh... agentic AI
Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026
Akira attackers used Safe Mode to disable EDR before deploying ransomware, but memory issues caused the encryptor to fail. An Akira ransomware affiliate broke into a company through an MFA-less SonicWall VPN on August 4, stole credentials and file shares, and then rebooted the compromised host into...
A list of topics we covered in the week of August 10 to August 16 of 2026
A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations.
The post Fortune 500 Companies Hit in Azure Data Theft Campaign appeared first on SecurityWeek.
Researchers from the University of Birmingham and Durham University have found a way to knock down some of the toughest protections in Windows 11 without physically opening or modifying the target machine. The attack assumes the attacker has already gained privileged access to the system. A chip tha...
Hazmat is an open-source tool that runs AI coding agents inside a separate account on your own machine. It wraps the harnesses people use: Claude Code, Codex, OpenCode, Cursor Agent, and several more, plus any script you write yourself. An agent launched the ordinary way runs as you, which means it...
ScamNet: Anti-Scam Suite is a consumer security app from Synaptrex Technologies that helps users detect and block scams involving phone calls, text messages, websites, and other suspicious content. The app is available for iPhone, iPad, and Mac, with features varying by platform. Call protection is...
Companies that provide specific evidence of how they use AI tend to record stronger revenue growth. Researchers at Carnegie Mellon University and Larridin examined a study universe of 564 companies across 12 industry sectors. Individual analyses used smaller samples depending on data availability. T...
A few days ago, a paper named “Stealing Reasoning Traces from Proprietary LLM APIs” was published. It describes a simple, yet super elegant way to recover encrypted LLM reasoning traces.
Naturally, I had to try it.
Background
AI labs like OpenAI and Anthropic send reasoning traces back and forth as...
Dealing with machine-made bug backlog makes it hard to find a moment to deliver promised subscription service
PLUS: HCL, TCS, admit data breaches; Google, Apple, India bans some rideshare tips; and more!
Les serveurs de l'ARMA, l'agence ukrainienne de recouvrement et de gestion des avoirs, ont été victimes d'une intrusion non autorisée, ayant les caractéristiques d'une cyberattaque, juste avant la clôture des candidatures pour le concours de sélection du gestionnaire des actifs. Cette intrusion fait...
423 CVEs, no Edge patches, and a small shift in CWE findings
New Firewall Guide
Euskal Moneta, l'association gérant la monnaie locale Eusko, a été victime d'une cyberattaque détectée le 17 août 2026. Les attaquants ont obtenu un accès important à l'infrastructure informatique, ce qui signifie qu'une consultation ou une copie de données personnelles des adhérents ne peut être to...
Outdated protocols, forgotten configurations, and legacy dependencies continue to create opportunities for attackers in modern environments. This research explores how NetNTLMv1 can still be leveraged today and how improvements in attack tooling are reducing the cost and complexity of exploiting it.
NanaZip 6.5 - DoS