Ravie LakshmananOct 02, 2026Artificial Intelligence / Data Security OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street Journal reported. “We have parted ways with three… Read More "OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling"
The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have issued final guidance for protecting cloud identity tokens and assertions from theft, forgery and misuse, aimed at federal agencies, cloud service providers and… Read More "CISA and NIST Issue Guidance to Protect Cloud Identity Tokens"
A data leak happens when your organization’s sensitive information ends up somewhere it was never meant to be. Common examples include a storage bucket misconfigured to allow public access, credentials hardcoded into a public code repository, a third-party integration exposing… Read More "How to Detect Data Leakage: A Full Guide to Data Leak Detection"
Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with journalists, revealing in new detail how exactly Flock Safety’s cameras track the movements of both vehicles… Read More "Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works"
An Iranian national indicted in the US for hacking hundreds of organizations was extradited from Montenegro this week. Acting on an arrest warrant issued by the FBI, Montenegrin authorities arrested the individual, a dual citizen of Turkey and Iran, on… Read More "In Rare Move, Alleged Iranian State Hacker Extradited to US"
Attackers have been uploading PHP webshells to WordPress sites through a critical flaw in a third-party WooCommerce plugin, four months after a fix was released. In a technical write-up published on September 14, Wordfence said its firewall had blocked more than… Read More "PHP Webshell Campaign Targets WordPress Through Critical WooCommerce P"
Third-party risk assessments identify, evaluate, and mitigate potential risks that third-party vendors might introduce into business operations. These processes form the foundation for a proactive risk management program, meeting regulatory requirements while safeguarding organizational assets and preventing reputational damage. Cyber… Read More "7-Step Third-Party Risk Assessment Process"
Hardly a day goes by lately without news of AI agents autonomously hacking websites or AI tools being used by cybercriminals and scammers. But a recently patched vulnerability in the macOS version of OpenAI’s ChatGPT underscores the potential value to… Read More "A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data"
The Warlock ransomware group continues to target SharePoint servers in attacks against critical infrastructure, government, and education entities, Symantec reports. Warlock is believed to be operated by a China-based hacking group tracked as Longlegs and Storm-2603, which has been linked… Read More "Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks"
Independent security experts see the EU Cyber Resilience Act (CRA) reshaping international technology markets to emphasize cyber resilience from the ground up, thereby testing the operational capacities of technology vendors whose wares compete in those markets. The EU CRA introduces… Read More "EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage"
