TheRegister
Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE
Amazon has quietly fixed a couple of security issues in its coding agent: Amazon Q Developer VS Code extension. Attackers could use these vulns to leak secrets, including API keys from a developer's machine, and run arbitrary code.…
Talk to the bot: Salesforce AI agents could replace US govt employees
American citizens seeking help from the federal government may soon find themselves being assisted by an AI agent, if Salesforce's new public sector offering is a success.…
IETF Draft suggests making IPv6 standard on DNS resolvers - partly to destroy IPv4
A pair of networking researchers have proposed that the Internet Engineering Task Force define support for IPv6 as a best practice for operators of DNS resolvers – the servers that translate URLs into IP addresses – and one of them hopes adoption of the idea will accelerate the demise of IPv4.…
Perplexity's Comet browser naively processed pages with evil instructions
To the surprise of no one in the security industry, processing untrusted, unvalidated input is a bad idea.…
Opinionated Arch derivative CachyOS overtakes Mint and MX on DistroWatch
CachyOS bills itself as a Blazingly Fast & Customizable Linux distribution and that seems to be winning it friends. In the last month, it's the number one distro on the popularity chart on the widely-used DistroWatch comparison site.…
FBI: Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure
The FBI and security researchers today warned that Russian government spies exploited a seven-year-old bug in end-of-life Cisco networking devices to snoop around in American critical infrastructure networks and collect information on industrial systems.…
GSA launches AI sandbox, says it won't be around for long
The Trump administration just launched a detailed, AI-pushing platform for federal agencies last week, but a government leader is already promising to kill it. …
Chinese funding backs sale of British microLED specialist
The UK's Plessey Semiconductors has been acquired by Haylo Labs, using funding supplied by a Chinese company, Goertek Inc. The move was cleared by the British government.…
Commvault releases patches for two nasty bug chains after exploits proven
Researchers at watchTowr just published working proof-of-concept exploits for two unauthenticated remote code execution bug chains in backup giant Commvault.…
'Limited' data leak at Aussie telco turns out to be 280K customer details
Aussie telco giant TPG Telecom has opened an investigation after confirming a cyberattack at subsidiary iiNet.…
GlobalFoundries inks domestic chipmaking deal with Cirrus Logic
Texas fabless chip firm Cirrus Logic has announced a new partnership with GlobalFoundries on next-generation bipolar-CMOS-DMOS (BCD) and gallium nitride (GaN) parts.…
Google tweaks Play Store fees to keep Euro watchdogs at bay
Google has announced changes to its Play Store rules in an effort to appease the European Commission and dodge Digital Markets Act (DMA) fines.…
Space industry frets as UKSA set for bureaucratic re-entry
The UK Space Agency (UKSA) is set to join the Department for Science, Innovation and Technology (DSIT) in an effort to "cut red tape" and, presumably, save some cash.…
Uncle Sam eyes slice of Intel in return for CHIPS Act cash
The US government is considering taking a stake in Intel and other semiconductor companies that benefit from CHIPS Act funding, according to officials from the Trump administration. The move follows SoftBank's $2 billion investment in the faltering chip giant.…
AI skeptics zone out when chatbots get preachy
Interview Large language models stumble when trying to sway buyers with moral arguments, according to research from the SGH Warsaw School of Economics and Sakarya Business School.…
Fried chips: UK's nascent semi industry risks faltering
Feature It's not easy to grow a national chip industry. Semiconductor startups are a risky investment. They chew through early-stage capital, often with little to show for it, making them a long-term proposition. Those that pay off can deliver big, but success is far from guaranteed.…
Out-of-band update arrives to clean up Windows reset and recovery mess
Microsoft has moved swiftly to remove the bullet it fired into its own foot with the August 2025 Security Update reset and recovery bug.…
Anarchy in the AI: Trump's desire to supercharge US tech faces plenty of hurdles
Opinion It's 1976, and in the country of the Beatles, another guitar band is giving it some. Johnny Rotten of the Sex Pistols isn't so keen on love and blackbirds. Instead, he sings lustily that he wants to be an anarchist, destroying passers-by and in general promoting anarchy in the UK.…
Intel ghosts researcher who found web apps spilled 270K staff records
Security boffin Eaton Zveare has highlighted some serious holes in the online infrastructure of chip giant Intel – walking through services with coding flaws to gain access to supposedly internal documentation, from non-disclosure agreements (NDAs) to the personal details of more than 270,000 Intel staffers.…
McDonald's not lovin' it when hacker exposes nuggets of rotten security
A white-hat hacker has discovered a series of critical flaws in McDonald's staff and partner portals that allowed anyone to order free food online, get admin rights to the burger slinger's marketing materials, and could allow an attacker to get a corporate email account with which to conduct a little filet-o-phishing.…