Cybersecurity News
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room…
Zero-Days Lurk in Microsoft’s Overgrown October Patch Tuesday
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
North Korea Phishes Ukrainians for War Intel
The Democratic People’s Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting…
Anthropic Finds Ingredients for Future AI Worms
Anthropic’s latest study combines IoT and network tests to explore AI self-replication, which researchers said would be “challenging” to shut down.
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Ravie LakshmananOct 13, 2026Artificial Intelligence / IoT Security Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate…
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images…
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
Swati KhandelwalOct 13, 2026Vulnerability / Enterprise Security An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run…
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
Swati KhandelwalOct 13, 2026Vulnerability / Cloud Security A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a…
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was…
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
Ravie LakshmananOct 13, 2026Data Privacy / Compliance The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft,…