News
-
Eight US States Sue OpenAI, Alleging ChatGPT Is Unsafe for Children
Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho and Montana accuse OpenAI of putting profits over safety and misleading users about the risks of ChatGPT.
-
Palo Alto Networks patches exploited RCE flaw in PAN-OS
The company has shipped updates for PAN-OS zero-day CVE-2026-0322, already being leveraged in attacks against firewalls.
-
Critical flaw in Collabora's Built-in CODE plants web shells on Nextcloud servers
Attackers used an optional Nextcloud app, Collabora Online — Built-in CODE Server, to drop web shells. Disabling the app does not help — it must be updated or removed.
-
Google silently links your phone number across all signed-in accounts
According to Android Authority, Google automatically ties a phone number to the various accounts a user is signed into on a device.
-
AI agents aren't 'going rogue' — frontier labs are just skipping security basics
Security experts who spoke with CSO Online argue that the headline-grabbing 'escapes' by AI agents aren't signs of an awakening intelligence, but the predictable result of frontier labs neglecting decades-old cybersecurity fundamentals.
-
Amsterdam police seize server of ISP A/I at US request
At the request of American authorities, Amsterdam police have confiscated a server belonging to the Italian internet service provider A/I, which is close to left-wing activists.
-
U.S. Takes Down 40+ Laptop Farms, Charges 14 in North Korean IT Worker Scheme
The Justice Department charged 14 people and seized some 187 computers in its campaign against a scheme in which North Korean nationals posed as remote IT staff at U.S. companies.
-
Cisco Patches New Actively Exploited Secure Email Gateway Zero-Day
A flaw in the gateway's malware-protection feature let remote, unauthenticated attackers run commands as root. Cisco says it saw the bug exploited in the wild in October 2026.
-
Epic is bringing Fortnite to Linux and rebuilding its anti-cheat
Epic is rebuilding Easy Anti-Cheat so Fortnite can finally run on Linux. There's no timeline yet, but a new launcher is already shipping in preview — on Linux for the first time.
-
Anthropic warns small AI models could self-replicate across IoT devices
Anthropic cautions that compact models capable of copying their own weights could give rise to a new generation of computer worms.
-
Global takedown dismantles network behind a billion phishing messages
Law enforcement and tech companies worldwide disrupted a sprawling cybercriminal ecosystem that targeted over 75,000 organizations across 150 countries.
-
KDE Plasma 6.8 Released as the KDE Project Turns 30
The KDE team has shipped Plasma 6.8, its latest desktop release. The launch coincides with the 30th anniversary of the KDE project.
-
Hirudo Android Trojan Swaps Banking Apps for Their Own Patched Copies
ThreatFabric has detailed Hirudo, a new Android trojan that deletes the genuine banking app and installs a pre-patched copy that blinds the app's own security checks from the inside.
-
Vghost: Linux kernel bug hands local users root and lets a guest break out to the host
A flaw in the vhost subsystem let a local user read and write kernel memory and become root for almost nine years, and in one virtualization setup let an untrusted VM break out to the host. The bug was found by Tencent's AI pipeline.
-
To report an Android bug, a developer had to disassemble libc
AOSP source releases for recent Android 17 builds lag so far behind what actually ships on devices that a developer had to disassemble libc.so to analyze a regression in bionic.
-
Researchers Run Their Own Code Inside a Windows SmartScreen Enclave
In a lab, Doyensec broke the isolation of a VBS enclave that stores the password hash for a Windows anti-phishing feature. Microsoft had already patched the flaw in its September update.
-
Gemma vs. scammers: Google DeepMind and Singapore put fraud detection on the phone itself
Google DeepMind and Singapore's GovTech have unveiled a model that spots scam conversations directly on the device — with no chat data ever leaving it for the cloud.
-
DOJ: North Korean operatives have infiltrated dozens of U.S. firms
U.S. authorities warn that sanctioned hackers increasingly recruit Americans to serve as go-betweens linking breached companies to Pyongyang.
-
OpenAI engineer arrested over hidden spy device in the office
An OpenAI engineer of barely a year is accused of planting a concealed recorder in an executive conference room. The irony: the company's own AI models helped expose him.
-
Critical Ghostscript flaw lets attackers hijack servers via PDF uploads
A heap buffer overflow in Ghostscript (CVE-2026-39919) opens the door to remote code execution through a specially crafted PDF file. WordPress sites are the primary target.
- More