A legal nonprofit sued OpenAI in a California court on Tuesday over the company’s agents escaping a testing environment and hacking the open source AI platform Hugging Face. “OpenAI’s actions straightforwardly violated California law,” the suit alleges. The suit was… Read More "OpenAI Gets Sued Over the Hugging Face Hack"
OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training
OpenAI has decided not to release GPT-6.1 Astra after internal testing found the model fell short of its standards for following human intent. The model had been slated to debut in ChatGPT and Codex in October, according to the Wall… Read More "OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training"
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France’s national cybersecurity agency saw the data leave.… Read More "French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks"
Old habits die hard: 2025’s most common passwords were as predictable as ever
Once again, data shows an uncomfortable truth: the habit of choosing eminently hackable passwords is alive and well 20 Jan 2026 • , 3 min. read ‘123456’ continues to reign supreme as the most commonly-used password among people across the… Read More "Old habits die hard: 2025’s most common passwords were as predictable as ever"
DARPA Selects Xint to Use AI in Securing Military Messaging Apps
The Defense Advanced Research Projects Agency (DARPA) selected Xint to research the use of autonomous AI application security for deep analyses of internally and externally developed messaging applications that are used throughout the Department of War. DARPA was established in… Read More "DARPA Selects Xint to Use AI in Securing Military Messaging Apps"
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Ravie LakshmananSep 29, 2026Vulnerability / Hardware Security A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, language runtimes, and the… Read More "New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses"
Common Apple Pay scams, and how to stay safe
Here’s how the most common scams targeting Apple Pay users work and what you can do to stay one step ahead 22 Jan 2026 • , 6 min. read Apple Pay is clearly a hit with consumers. According to estimates,… Read More "Common Apple Pay scams, and how to stay safe"
.jpeg?w=1140&fit=1140,855&ssl=1 "Evidence Analysis: Unlocking Insights for Stronger Security Posture")
Evidence Analysis: Unlocking Insights for Stronger Security Posture
Navigating the maze that is vendor-supplied evidence is one of the most time-consuming and frustrating tasks security teams face during the risk assessment process. Imagine spending countless hours chasing down security information from a vendor only to receive a mountain… Read More "Evidence Analysis: Unlocking Insights for Stronger Security Posture"
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks
Researchers from the VUSec group at Vrije Universiteit Amsterdam in the Netherlands and Scuola Superiore Sant’Anna in Italy have disclosed a new variant of the Spectre v2 attack that affects systems powered by Intel, AMD, and Arm CPUs. The researchers… Read More "New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks"
101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent
Ravie LakshmananSep 29, 2026Supply Chain / Malware Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. “The malicious packages abuse the ‘Baileys’ WhatsApp open source… Read More "101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent"