“This password has appeared in a data leak, putting this account at high risk of compromise. You should change your password immediately” – if you own an iPhone or iPad running on iOS 14 or above, you may have received… Read More "This Password Has Appeared in a Data Leak: How to Respond"
A data leak is when sensitive data is accidentally exposed physically, on the Internet or any other form including lost hard drives or laptops, allowing cyber criminal can gain unauthorized access to the sensitive data without effort. When sensitive data is posted on… Read More "What is a Data Leak? Stop Giving Cybercriminals Free Access"
An engineer at OpenAI allegedly concealed an audio recording device in a piece of toilet paper and attached it behind a monitor inside an executive conference room at one of the company’s San Francisco offices, according to a criminal complaint… Read More "An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office"
An engineer at OpenAI has been charged with secretly installing a recording device inside a conference room in what officials said Tuesday was an effort to capture sensitive conversations about the company’s technology. The employee, identified as a 35-year-old Saudi… Read More "Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say"
Swati KhandelwalOct 13, 2026Vulnerability / Cloud Security A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects… Read More "SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft"
Swati KhandelwalOct 13, 2026Vulnerability / Enterprise Security An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for… Read More "Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far"
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone… Read More "Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another"
Ravie LakshmananOct 13, 2026Artificial Intelligence / IoT Security Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The… Read More "Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets"
Ivanti on Tuesday warned customers that a zero-day vulnerability in its Connect Secure (ICS) VPN appliances has been exploited in the wild. Tracked as CVE-2026-104935 and rated high severity, the issue is an authentication bypass that lets a remote, unauthenticated… Read More "Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN"
Google announced Tuesday that it’s raising bug bounty rewards for some Chrome vulnerabilities, focusing on memory safety issues. AI has been changing the pace and profile of vulnerability discovery, and the tech giant has been adjusting its bug bounty programs… Read More "Google Partially Reverses Chrome Bug Bounty Cuts"
