The Register (3 hours ago)
Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt
Read the full story on The Register.
Spoiler: They’re already running rampant across the US.
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
We’ve all gotten a scam text about a nonexistent parking ticket or a fake package delivery, but hopefully you’ll start seeing fewer of them. Microsoft says it helped dismantle a marketplace for scammers sending phishing messages like those around the world.
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system, Cisco said in an advisory on Wednesday.
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering.
Torvalds says contributors must understand their code, whatever tools they use
Vendor promises fix for separate privilege-escalation flaw in the coming weeks
Proposal would let UTC drift an hour from Earth’s rotation, sparing computer systems awkward adjustments for centuries
What are they puffing? Tobacco, apparently. Cancer researcher tells El Reg it’s a bad bet
72 active sources
27 Turkish · 45 English
All sources
