-
Vercel has confirmed a KVM zero-day discovered through its Sandbox bug bounty program. Security researcher Paulos Yibelo says the vulnerability allowed him to escape a guest virtual machine and obtain root access on the host. The finding raises concerns about isolation between cloud workloads. However, public disclosures do not yet identify affected software versions, the…
-
FitnessKPI says a third party accessed a customer’s account using valid administrator credentials, rejecting claims that attackers breached its underlying systems. Files shared online appear to contain information relating to 1,848 members of Genae Écully, a gym near Lyon, France. The FitnessKPI data exposure reportedly includes contact details, membership records, bookings and payment-related information. However,…
-
OpenAI plans to test ChatGPT visual ads while users wait for the service to generate images. The trial will begin in the United States later in October with a limited group of advertisers. The format will let brands promote products and services through imagery. For example, an advertisement could demonstrate a product in use or…
-
Microsoft has confirmed that the KB5124010 update can cause certain Windows 11 games and applications to crash. The issue affects software that relies on Windows’ built-in AC-3 audio decoding, commonly associated with Dolby Digital sound. Affected programs may fail to open or close unexpectedly. In other cases, they work normally until a particular action, such…
-
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Rewards Program (OSS VRP). The Google bug bounty change follows a sharp increase in automated submissions, most of which the company says are invalid. However, the suspension covers only part of the program. Supply chain reports remain eligible, and Google will…
-
Citrix has released emergency updates for a NetScaler zero-day that attackers have exploited against appliances using SAML authentication. Tracked as CVE-2026-88779, the vulnerability can crash affected systems and interrupt access to services. The memory buffer flaw affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication with Gateway or AAA functionality. It carries a CVSS…
-
Anthropic has begun asking Claude users for permission to use their voice conversations to improve its AI models. The Claude voice training prompt offers a choice over sharing audio recordings and voice chat data. The request appears when people use Claude’s voice features. Users can select Allow to participate or Not now to decline the…
-
Google appears to be testing a desktop feature that could let Gemini work across Mac files, applications and websites. The proposed Gemini Mac access settings could allow some actions without repeated approval, depending on which permissions users enable. A hidden interface in the Gemini Desktop app references “Additional sandbox options.” However, the feature is not…
-
Jordanian authorities have reportedly detained a ShinyHunters suspect who may be helping investigators identify other members of the cybercrime group. Sources familiar with the case identified him as Saif al-Din Khader, known online as “Rey.” According to those sources, authorities took Khader into custody on Tuesday. He is reportedly assisting the FBI and international investigators…
-
The DTU data breach may have exposed personal information belonging to up to 200,000 current and former university users. Attackers used compromised credentials to access the Technical University of Denmark’s identity and access management system, DTUBasen. DTU says the intruder downloaded a large amount of data. However, the university cannot confirm exactly which information the…