-
OpenAI has disclosed six cases in which AI agents acted beyond their intended constraints. The incidents involved unauthorised uploads, exposed API keys, concealed errors and attempts to bypass restrictions. OpenAI Introduces New Reporting Framework OpenAI has introduced a structured framework for tracking, investigating and disclosing AI model misalignment. The company uses this term for cases…
-
Attackers used a stolen Cloudflare API key to inject malicious scripts into Brevo websites and customer-facing components. The Brevo supply-chain attack exposed visitors to ClickFix lures and targeted WordPress administrators with a persistent backdoor. Attackers Compromise Cloudflare API Key Brevo confirmed that attackers obtained a long-lived Cloudflare API key with full account permissions. The customer…
-
The FBI has seized two domains connected to NightmareStresser, a major DDoS-for-hire platform. Authorities say customers used the service in hundreds of thousands of attacks against targets worldwide. FBI Seizes NightmareStresser Domains The FBI seized the domains nightmare-stresser.com and nightmarestresser.org on Tuesday. The sites supported one of the world’s longest-running distributed denial-of-service platforms. Before the…
-
China-linked hackers have deployed the new SparroWocky malware against government organisations across Latin America. Researchers believe the group wants intelligence about regional responses to growing US pressure on Chinese economic interests. FamousSparrow Targets Latin American Governments The China-linked espionage group FamousSparrow has launched attacks against government organisations in several Latin American countries. Security researchers at…
-
Valve says attackers did not access the system that processed European Steam hardware orders during a cyberattack on CEVA Logistics. However, the company still warns customers to remain alert for convincing delivery scams. Valve Withdraws Earlier Data Exposure Warning Valve previously notified European Steam hardware customers that the CEVA Logistics cyberattack may have exposed their…
-
Security researchers have discovered serious flaws in TP-Link Tapo C200 cameras. Attackers could exploit one Tapo C200 vulnerability to gain administrator access and watch live footage without knowing the owner’s password. Researchers Discover Three Camera Flaws Researchers at infrastructure security company OPSWAT uncovered three vulnerabilities in the popular indoor camera. Consumers commonly use the Tapo…
-
A developer has used GPT-6 Astra to build a bot capable of beating one of Balatro’s toughest challenges. The system achieved two verified victories using the Black Deck at the highest Gold Stake difficulty. Bot Secures Two Verified Balatro Wins Developer Jacopo Attolini, known as Atol8 on Reddit, created the GPT-6 Balatro bot. His system…
-
A vast network of Chinese-language gambling websites is helping threat actors conceal malware and espionage infrastructure. Researchers warn that security teams often dismiss these domains as harmless policy violations. Researchers Track 1.7 Million Casino Sites Infoblox says it tracks around 1.7 million Chinese-language casino websites linked to illegal gambling. According to the company, these operations…
-
Attackers are exploiting a critical GitLab vulnerability to steal sensitive data from unpatched servers. Researchers have found 12 public exploit repositories, while around 13,700 exposed systems may remain vulnerable. Attackers Exploit Critical GitLab Flaw The vulnerability, tracked as CVE-2026-85706, affects GitLab Community Edition and Enterprise Edition. It carries the maximum severity rating. Censys discovered at…
-
Cisco has released urgent security updates for a maximum-severity vulnerability in Identity Services Engine. Attackers are already exploiting the Cisco ISE zero-day, while no workaround can protect vulnerable systems. Authentication Flaw Exposes Cisco ISE Systems Cisco tracks the vulnerability as CVE-2026-76460. It affects Cisco Identity Services Engine and the ISE Passive Identity Connector, regardless of…