Vulnerabilities Adobe Patches 176 Vulnerabilities Across 11 Products The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. By Eduard Kovacs …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
ai-security
EN
Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
Tracking & Law Enforcement Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say Saudi national Abdulrahman Alfozan was arrested Friday and terminated …
ai-security
EN
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
** Ravie Lakshmanan ** Oct 13, 2026 Data Privacy / Compliance The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for …
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 …
ai-security
EN
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
** Swati Khandelwal ** Oct 13, 2026 Vulnerability / Cloud Security A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker …
ai-security
EN
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a …
ai-security
EN
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
** Swati Khandelwal ** Oct 13, 2026 Vulnerability / Enterprise Security An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, …
ai-security
EN
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to covertly …
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it …
** Ravie Lakshmanan ** Oct 13, 2026 Artificial Intelligence / IoT Security Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices …
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities , including one that it said has come under active exploitation. These include …
ai-security
EN
ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th)
ISC Stormcast For Tuesday, October 13th, 2026 <https://isc.sans.edu/podcastdetail/10134>
ai-security
EN
ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)
ISC Stormcast For Monday, October 12th, 2026 <https://isc.sans.edu/podcastdetail/10132>
Data Protection Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. …
Cybercrime Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for …
Data Breaches iRhythm Data Breach Impacts at Least 360,000 People Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers. By Ionut …
Vulnerabilities Critical SonicWall Vulnerability Exploited Days After Disclosure CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. By …
Cybercrime Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside …
Cybercrime Canonical Websites Disrupted in Second DDoS Attack This Year The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal. By Eduard Kovacs | …
Vulnerabilities Bricksforge WordPress Plugin Vulnerability Exploited in the Wild The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. …
Funding/M&A IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio. By SecurityWeek …
FBI Arrests Suspect in FBI-Hacking Case In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster . …
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical …
ai-security
EN
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
** Ravie Lakshmanan ** Oct 12, 2026 Cryptocurrency / Cybercrime Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds …
** Ravie Lakshmanan ** Oct 12, 2026 Vulnerability / Network Security Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) …