Skip to main content

Next.js developer Vercel warns of customer credential compromise

1 week 3 days ago
Blames outfit called Context.ai, which reckons an agentic OAuth tangle caused the incident

Vercel, the company that created the open source Next.js web development framework, has a data leak that led to compromise of some customer credentials, and blamed an outfit called Context.ai for the mess.…

Simon Sharwood

'Invisible mouse' made a mess of PC rebuild

1 week 3 days ago
You can't fix what you can't see – especially when your workspace is a maelstrom

Who, Me?  Welcome to yet another Monday, and therefore to this week's edition of Who, Me? For those unfamiliar, it's The Register's reader-contributed column that shares your stories of workplace messes, and how you tried to clean them up without dirtying your career prospects.…

Simon Sharwood

Just like phishing for gullible humans, prompt injecting AIs is here to stay

1 week 3 days ago
Aren't we all just prompting tokens of linguistic meaning and hoping the other person isn't bullshitting us?

kettle  It's a week of the year, which means there's been the discovery of yet another prompt injection attack that will force supposedly well-guarded AI bots to spill secrets by asking the right way. …

Brandon Vigliarolo

I meant to do that! AI vendors shrug off responsibility for vulns

1 week 4 days ago
Passing the buck, and the blame, down the road shows lack of AI companies' maturity

OPINION  AI vendors: "You need to use AI to fight AI threats (and do everything else in your corporate IT environment)." Also AI vendors: "That's not a security flaw; it's working as intended."…

Jessica Lyons

Cloudflare can remember it for you wholesale

1 week 5 days ago
Agent Memory stores AI chat scraps off to the side and recalls them when needed

Not only is hardware memory scarce these days, but context memory, the conversational data exchanged with AI models, can be an issue too.…

Thomas Claburn

Claude Opus wrote a Chrome exploit for $2,283

1 week 5 days ago
Pause your Mythos panic because mainstream models anyone can use already pick holes in popular software

Anthropic withheld its Mythos bug-finding model from public release due to concerns that it would enable attackers to find and exploit vulnerabilities before anyone could react.…

Thomas Claburn

Anthropic mocks up Claude Design to draft fancy new pink slips for marketing teams

1 week 5 days ago
The bar for creating visual assets has been lowered to the ability to converse with a model

Anthropic is known for its industry-leading Claude Code that writes programs, but why stop there? The company, on Friday, introduced a research preview service called Claude Design that creates visual assets, potentially putting some folks out of work.…

Thomas Claburn

Opsec oopsie: Dutch navy frigate location outed by mailing it a Bluetooth tracker

1 week 6 days ago
Or, how public information and a €5 tracker exposed an avoidable opsec lapse

Militaries around the world spend countless hours training, developing policies, and implementing best operational security practices, so imagine the size of the egg on the face of the Dutch navy when journalists managed to track one of its warships for less than the cost of some hagelslag and a coffee.…

Brandon Vigliarolo

Server-room lock was nothing but a crock

1 week 6 days ago
Your cybersecurity is only as good as the physical security of the servers

PWNED  Welcome back to Pwned, the column where we immortalize the worst vulns that organizations opened up for themselves. If you’re the kind of person who leaves your car doors unlocked with a pile of cash in the center console, this week’s story is for you.…

Avram Piltch

Microsoft announces product it doesn't want anyone to buy

1 week 6 days ago
Just migrate already, would you? But if you can't, Redmond will take your cash

Microsoft will keep delivering security updates for old versions of Exchange Server and Skype for Business Server, after admitting that some customers aren't ready to make the move to newer products.…

Richard Speed
Checked
26 minutes 4 seconds ago
The Register
Biting the hand that feeds IT — Enterprise Technology News and Analysis
Subscribe to The Register feed