Bank of America hired 1,000 extra contractors in Q2 to patch the volume of vulnerabilities surfaced by Anthropic's Mythos AI model, CEO Brian Moynihan said on the Q3 earnings call. The contractors supplement about 3,000 existing technical staff and are still on site. Moynihan put remediation costs at "a couple of hundred million plus", a …
A Semperis annual ransomware risk report, covered by The Register, finds that 37% of ransomware attacks involved psychological or physical threats against victim staff. The survey covered 1,200 post-ransomware organizations in the first half of 2026. Respondents reported psychological intimidation (23%) and physical threats (17%), aimed a…
A sponsored feature from Kaseya, published on The Register, describes how account takeover (ATO) has become stealthier. Attackers obtain credentials, usually through GenAI-assisted phishing, then stay quiet and monitor email traffic until they can inject themselves into a conversation. A compromised mailbox is then used for outbound phish…
Palo Alto Networks Unit 42 reported on October 19, 2026 that ransomware operators are still actively exploiting CVE-2026-0257 (CVSS 7.8), an authentication bypass in the GlobalProtect portal and gateway of PAN-OS. The flaw lets attackers bypass MFA and open unauthorized VPN sessions. Unit 42 attributes exploitation attempts to Spikey Scor…
A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…