Stories tagged security.
Economic Times — Tech / Technology / Startups / ETTelecom
Australia said on Thursday an OpenAI agent breached a government health data portal in June, gaining unauthorised access to files, in what could be the first known instance of an AI agent hacking a government website.
ransomware.live
This is a small company of 4-5 people, yet it has big clients in the oil production sector. Unfortunately, the company neglected data security, allowing us to gain access to all their confidential files - projects, documents, blueprints, and so on. The company has been ignoring us for five days…
Mint — Technology / AI
The ‘infiltration’ is one of the highest-profile incidents of AI agents accessing external systems outside the United States, coming on top of several recent breaches globally by AI agents that have alarmed governments and companies, CNA reported.
ransomware.live
Revenue: Revenue: $229 million eTeam Inc. is a privately held global workforce solutions and business transformation company. Founded in 1999 by Ben Thakur, the company is certified as a Minority Business Enterprise (MBE). It has grown from a boutique IT staffing agency into a massive global…
The Defiant / DL News / Protos / CryptoSlate
A Sept. 21 transaction points owners toward a trust address check for an earlier disclosed rescue, with any return subject to verification. The post White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility appeared first on CryptoSlate.
Mint — Technology / AI
Australia's prime minister criticizes OpenAI over government website security breach
CyberScoop
The white paper is the latest step in trying to create a “Quality Era” for the Common Vulnerabilities and Exposures (CVE) program as the number of CVEs surges. The post CISA outlines improvement plan for CVE program appeared first on CyberScoop.
LWN.net
Inside this week's LWN.net Weekly Edition: Front: Git 2.56; gccrs; NetBSD and compat_linux; io_uring; Desktop UX. Briefs: WordPress vulnerability; Radicle vulnerability; Systemtap 5.6; GNOME 51; Systemd v262; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.
DigiTimes (headlines)
While generative AI has surged into mainstream consumer use thanks to ChatGPT, the adoption of AI across industrial sectors has progressed at a much slower pace. Industry analysts point out that the primary culprit is the tendency of current AI architectures to "hallucinate," a fatal vulnerability…
CNET
ShinyHunters has previously extorted companies and schools, but the sensitivity of this data makes this breach different.
CERT-FR
Une vulnérabilité a été découverte dans Microsoft Office. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
CERT-FR
De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
CERT-FR
De multiples vulnérabilités ont été découvertes dans Zabbix Agent. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
CERT-FR
De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
CERT-FR
De multiples vulnérabilités ont été découvertes dans LibreNMS. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
CERT-FR
De multiples vulnérabilités ont été découvertes dans Wireshark. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
CERT-FR
De multiples vulnérabilités ont été découvertes dans Papercut. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
Nature / Science / Nature Biotechnology
Nature, Published online: 24 September 2026; doi:10.1038/d41586-026-03024-z An OpenAI agent accessed secure data on an Australian health-care website, but the incident wasn’t reported for months.
Gizmodo
The country's Prime Minister is not happy about it.
Actively exploitedCritical 85watchTowr Labs
Well, well, well, well, well, well, well, well, well, well, well, well, well, well, well. We're back. Sorry. We've been watching the onslaught of vulnerabilities flood the internet. Every man, dog, and their grandmas (apparently?) are now using LLMs to find and reproduce vulnerabilities - it’
BleepingComputer
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands. [...]
Dark Reading
Enterprise computing is moving to the edge. Keeping it secure requires tactics far beyond putting up firewalls.
BleepingComputer
A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]
Dark Reading
A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.
Google Chrome Releases
Hello Everyone! We've just released Chrome 155 (155.0.8059.16) for Android to a small percentage of users. It'll become available on Google Play over the next few days. You can find more details about early Stable releases here. This release includes stability and performance improvements. You can…
IGN / GameSpot / PC Gamer / Kotaku
A self-replicating virus is once again wreaking havoc on People Playground.
Dark Reading
Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.
ransomware.live
OnTrac is a major last-mile e-commerce delivery company formed by the 2021 merger of LaserShip and OnTrac. It positions itself as a direct alternative to FedEx and UPS, offering coast-to-coast coverage, 7-day-a-week operations, and competitive rates to reach over 75% of the U.S. population. We hold…
The Record (Recorded Future)
In May, Pornhub began using a new age assurance process to verify some users’ ages, according to an Ofcom press release. The new method relies on signals from Apple that suggest under 18s in the UK “may have completed Apple’s age checks,” the press release said.
American Banker (headlines)
The U.S. economy is expected to keep growing despite nagging inflation, according to the latest consensus report from the American Bankers Association's Economic Advisory Committee.