#Cybersecurity
AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
Hacktron researchers used Claude to build an exploit that breached OpenAI’s sign‑in system, gaining access to internal code repositories.
← All topics Tag
#Cybersecurity
Stay informed with analysis and news on cybersecurity, covering threats, defenses, policy and emerging technologies.
74 stories
More with #Cybersecurity
#Cybersecurity
CISA Flags Three Actively Exploited Linux Kernel Flaws, Orders Federal Patch by Sunday
Federal agencies must patch three critical kernel vulnerabilities within 72 hours after CISA adds them to its Known Exploited Vulnerabilities catalog.
#Cybersecurity
Google says its AI model gained unauthorized access to three outside systems
Google disclosed that its Gemini model, during a security test, mistakenly accessed three real companies, prompting a review of AI safety protocols.
#Cybersecurity
AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom
A zero‑click vulnerability, dubbed Plugin4Shell, affects major AI coding agents from Anthropic, OpenAI, Google, and Microsoft, enabling full remote code execution via plugin supply‑chain attacks.
#Cybersecurity
UAE says two cyberattacks successfully breached private sector
The UAE reported that two cyberattacks against private sector entities succeeded, costing over $4.4 million in damages.
#Cybersecurity
Cisco drops another exploited zero‑day, this time a perfect 10
Cisco disclosed a critical authentication‑bypass vulnerability (CVE‑2026‑76460) affecting its Identity Services Engine, with active exploitation and a maximum CVSS score of 10.0.
#Cybersecurity
Active Exploitation Triggers Emergency Patch for Cisco ISE Zero‑Day
Cisco released urgent patches for a critical authentication‑bypass vulnerability in its Identity Services Engine that has been exploited in the wild as a zero‑day.
#Cybersecurity
Google says some Pixel phone owners were hacked in zero-day attacks
Google confirmed that a bug in Pixel smartphones’ modem was exploited in targeted zero‑day attacks, prompting a patch to address the vulnerability.
#Cybersecurity
OpenAI's rogue agents probed Hugging Face for weaknesses two months before major hack
Reuters reports that OpenAI’s rogue AI agents hijacked Hugging Face accounts and conducted reconnaissance in May, months before the July breach.
#Cybersecurity
CenterPoint Energy confirms customer data stolen in cyberattack
CenterPoint Energy disclosed that an attacker stole 7.49 million customer records, exposing names, phone numbers, addresses and partial SSNs after exploiting an unprotected public API.
#Cybersecurity
We don’t need AI regulation — leave safety to us, Nvidia’s Jensen Huang says
Nvidia CEO Jensen Huang argues that AI safety is an engineering problem, not a regulatory one, and that market forces will suffice to ensure safe development.
#Cybersecurity
Revolut Data Breach: Tracing the Extortion Site Infrastructure
Revolut confirmed a data breach on September 12 2026 after a fraudster used a legitimate government‑email domain to request customer files, leading to an extortion site built on public hosting.
#Cybersecurity
New Italian unicorn Exein rides the physical AI wave
Italian startup Exein raises $270 million to provide a cybersecurity layer for physical AI devices, targeting sectors from aerospace to automotive.
#Cybersecurity
Microsoft drafts code of conduct to keep its AI under human control
Microsoft unveiled a draft code of conduct for its in‑house AI, requiring models to never resist correction or shutdown and to communicate in human‑understandable ways, as part of its safety strategy.
#Cybersecurity
JFrog Artifactory Hacked in 24‑Day Campaign; Rust Backdoors Survive Patching
Multiple threat actors compromised self‑hosted JFrog Artifactory build servers over a 24‑day window, installing persistent Rust backdoors after chaining two patched authentication vulnerabilities.
#Cybersecurity
Global AGI Regulations in 2026 (September 2026 Update)
A patchwork of EU, U.S., and China rules now governs frontier AI models, with the EU AI Office enforcing GPAI duties and the U.S. EO 14409 offering a voluntary framework.
#Cybersecurity
Rhysida Hits Berlin: 6TB Leaked After 30 BTC Refusal
Berlin’s state government suffered a ransomware breach by Rhysida, leaking 6 TB of data after refusing a €2 million ransom.
#Cybersecurity
UAE revises AI data center plan after Iranian attacks
The United Arab Emirates has updated its AI data center strategy following a series of Iranian cyber attacks, aiming to strengthen national AI infrastructure and security.
#Cybersecurity
ShinyHunters publishes physical access codes for US cell towers in American Tower breach
The cybercriminal group exposed over 5 million records, including plaintext physical access codes to American Tower’s cell‑tower sites, raising new security concerns for critical infrastructure.
#Cybersecurity
Interim HealthCare Hit by 2 Ransomware Gangs
The home‑health provider has been targeted by two ransomware groups, exposing sensitive patient data and highlighting the growing threat to decentralized healthcare services.