The Register-Security.
- Get link
- X
- Other Apps
"Researcher who found McDonald's free food hack turns her attention to Chinese restaurant robots."
Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 30 August 2025, 0255 UTC.
Content and Source via email subscription from https://feedly.com.
https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.theregister.co.uk%2Fsecurity%2Fheadlines.atom
Please check subscription link or scroll down to read your selections. Thanks for joining us today.
Russ Roberts (https://www.hawaiicybersecurityjournal.net).
76
Today
by Iain Thomson / 5h
The controls were left wide open on Pudu's robots A researcher caught the world’s leading supplier of commercial service robots using shoddy admin security that let attackers redirect the delivery machines to anywhere and make them follow any command.…
IoC > 2 domains
by Jessica Lyons / 9h
•8 TTPs
Amazon disrupts APT29 campaign
Look who's visiting the watering hole these days Amazon today said it disrupted an intel-gathering attempt by Russia's APT29 to trick Microsoft users into unwittingly granting the Kremlin-backed cyberspies access to their accounts and data.…
by Gareth Halfacree / 13h
Up to 29,000 organizations and potentially 370,000 security and IT pros affected Australian development house Click Studios has warned users of its Passwordstate enterprise password management platform to update immediately if not sooner, following the discovery of an authentication bypass vulnerability that opens the doors to an emergency administration account with nothing more than a "carefull
UK government faces data breach scrutiny
by Connor Jones / 15h
Senior officials summoned to science and tech committee to explain further Senior officials are being summoned to the UK's Science, Innovation and Technology Committee to explain why the government has not fully implemented the security recommendations made in a secret review following the 2021 Afghan data breach.…
Yesterday
Salt Typhoon hacks 200 US firms
41by Jessica Lyons / 1d
Plus millions of other people across 80+ countries China's Salt Typhoon cyberspies hoovered up information belonging to millions of people in the United States over the course of the years-long intrusion into telecommunications networks, according to a top FBI cyber official.…
by Brandon Vigliarolo / 1d
Our drones are OK, but those other drones? The US Department of Homeland Security has revealed plans to spend more than $100 million on systems designed to take out hostile drones. …
Vivaldi opposes AI in browsing
by Thomas Claburn / 1d
Web browsing belongs to the people, not the bots Jon von Tetzchner, CEO of Norway-based browser maker Vivaldi, believes the tech industry's efforts to automate web browsing using generative AI models have gone too far.…
FBI seizes VerifTools fake ID marketplace
by Jessica Lyons / 1d
$6.4M VerifTools marketplace offline The FBI and Dutch police today said that they seized two domains and a blog tied to VerifTools, an international criminal marketplace that sold identity documents for as little as $9.…
How does China keep stealing our stuff, wonders DoD group responsible for keeping foreign agents out
by Brandon Vigliarolo / 1d
'The homeland is no longer secure,' says Defense Counterintelligence and Security Agency leader The Pentagon outfit responsible for preventing foriegn agents from infiltrating defense agencies says the US isn't doing a very good job of preventing state secrets from falling into Chinese hands.…
by Eirik Salmi, cybersecurity system analyst, Passwork / 1d
Your passwords may already be at risk. Partner Content Ever felt that gut punch after losing something important, like your house keys? Now picture those, along with 184 million others, resting in plain sight at the wildest equivalent of Comic-Con for criminals. …
by Carly Page / 1d
Regulator points to lack of 'basic access controls' between internet-facing systems, internal network South Korea's privacy watchdog has slapped SK Telecom with a record ₩134.5 billion ($97 million) fine after finding that the mobile giant left its network wide open to hackers through a catalog of bungles.…
TransUnion breach exposes 44 million data
by Connor Jones / 1d
Credit agency offers own services as compensation Credit scoring and monitoring biz TransUnion says that it recently suffered a breach affecting nearly 4.5 million individuals.…
5 TTPs
by Carly Page / 1d
•CVE-2025-7775
Shadowserver counts more than 13,000 appliances still wide open – including thousands in US, Germany, and UK Thousands of Citrix NetScaler appliances remain exposed to a trio of security flaws that the vendor patched this week, one of which is already being actively exploited in the wild.…
2 TTPs
by Carly Page / 1d
Miljödata meltdown leaves 200 local authorities scrambling over 1.5 BTC Sweden's municipal governments have been knocked offline after ransomware crooks hit IT supplier Miljödata, reportedly demanding the bargain-basement sum of $168,000.…
PayPal faces major payment issues
by David Meyer / 1d
US payments platform back in action, says it's informing affected customers Shoppers and merchants in Germany found themselves dealing with billions of euros in frozen transactions this week, thanks to an apparent failure in PayPal's fraud-detection systems.…
Church of England data breach allegations
by Connor Jones / 1d
Apology issued after names tied to redress scheme revealed in mass mailing A London law firm leaked the details of nearly 200 people who requested to receive updates about the redress scheme set up for victims of abuse at the hands of the Church of England (CoE).…
Aug 27, 2025
3 TTPs
by Jessica Lyons / 1d
13 governments sound the alarm about ongoing unpleasantness China's Salt Typhoon cyberspies continue their years-long hacking campaign targeting critical industries around the world, according to a joint security alert from cyber and law enforcement agencies across 13 countries.…
by Thomas Claburn / 2d
Harvard researchers find model guardrails tailor query responses to user's inferred politics and other affiliations OpenAI's ChatGPT appears to be more likely to refuse to respond to questions posed by fans of the Los Angeles Chargers football team than to followers of other teams.…
US sanctions North Korean fraud network
by Iain Thomson / 2d
There's also a rogue Russian on the list The US Treasury Department has announced sanctions against two Asian companies and two individuals for allegedly helping North Korean IT workers fake their way into US jobs.…
4 TTPs
by Thomas Claburn / 2d
•Claude AI exploited for ransomware
AI lowers the bar for cybercrime, Anthropic admits comment Anthropic, a maker of AI tools, says that AI tools are now commonly used to commit cybercrime and facilitate remote worker fraud.…
by Brandon Vigliarolo / 2d
Fast-glob is widely used in government, security lab says updated A Node.js utility used by thousands of public projects - and more than 30 Department of Defense ones - appears to have a sole maintainer whose online profiles identify him as a Yandex employee living in Russia.…
4 TTPs
by Connor Jones / 2d
•Nx build system compromised for theft
Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being uploaded to the NPM registry on Tuesday evening.…
15 TTPs
by Jessica Lyons / 2d
•Storm-0501 targets cloud-based ransomware
Don't let it happen to you Storm-0501, a financially motivated cybercrime crew, recently broke into a large enterprise's on-premises and cloud environments, ultimately exfiltrating and destroying data within the org's Azure environment. The criminals then contacted the victim via a Microsoft Teams account that they'd also compromised in the attack, demanding a ransom payment for the stolen files.
3 TTPs
by Connor Jones / 2d
•Data theft targets Salesforce instances
Attackers steal OAuth tokens to access third-party sales platform, then CRM data in 'widespread campaign' UPDATE Google says a recent spate of Salesforce-related breaches was caused by attackers stealing OAuth tokens from the third-party Salesloft Drift app.…
- Get link
- X
- Other Apps
Comments
Post a Comment
Please leave a comment about our recent post.