-
A Twitch creator has sued Amazon and Twitch, claiming the companies used creator content for AI training without permission or payment. Connecticut streamer Warren Pandiscia filed the proposed class-action lawsuit. He says Twitch and its parent company copied videos from him and other creators to develop Amazon AI products. Amazon and Twitch had not publicly…
-
A claimed CyrusOne data breach has raised concerns about the possible exposure of sensitive data center documents, employee records and customer information. The ShinyHunters extortion group says it stole millions of records and is demanding $13 million. CyrusOne had not publicly confirmed the alleged incident at the time of reporting. The attackers had also not…
-
Researchers have found a campaign involving malicious Firefox extensions designed to steal cryptocurrency wallet recovery phrases and browser credentials. The activity has reportedly been active since at least March 2026. Security firm Socket linked 77 Firefox extension identities to the operation. Of those, researchers classified 40 as malicious, while another 37 appeared to be deceptive…
-
A critical Metal Gear Online vulnerability could have allowed attackers to compromise players’ computers through a malicious online lobby. The issue affected Metal Gear Online 3, the multiplayer mode included with Metal Gear Solid V. Tracked as CVE-2026-19874, the flaw received a critical severity score of 9.1 out of 10. Konami has fixed the problem…
-
TikTok, ByteDance and related companies have reached a proposed settlement with the US government over allegations that they violated children’s privacy rules. The TikTok COPPA settlement carries a potential value of $400 million. The Department of Justice said the agreement resolves a lawsuit filed in 2024. The case involved claims that TikTok collected and retained…
-
A critical Calix router vulnerability lets unauthenticated attackers bypass home network protections and expose internal devices to the internet. The issue affects Calix GS7 XGS routers, model GS5239XG, running EXOS/6.6.47 firmware. Researchers catalogue the flaw as CVE-2026-75501. Attackers can create port-forwarding rules remotely without a password or local network access. Exposed UPnP service creates the…
-
Attackers are attempting to exploit two critical flaws in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. The vulnerabilities can be chained to bypass authentication and log in as a WordPress administrator. Security researchers have already detected scanning and exploitation attempts against vulnerable websites. Site owners using any affected miniOrange edition should manually…
-
Microsoft is rolling out a new Teams meeting policy that lets administrators automatically block identified external bots from joining calls. The new setting gives organisations more control over third-party meeting participants. It can stop external bots before they enter a meeting, removing the need for organisers to approve or reject them individually. Microsoft said the…
-
A South Korean startup platform breach has highlighted a serious weakness in how organisations protect encrypted information. Authorities said an encryption key was exposed through an application programming interface, or API, on Modu-ui Changup. The government-backed platform supports a nationwide startup audition programme overseen by South Korea’s Ministry of SMEs and Startups. The exposed key…
-
A fake GTA 6 download is reportedly circulating online, using excitement around the upcoming game to lure fans into installing malware. The file is presented as a 113GB PC ISO containing a pre-release build of Grand Theft Auto 6. However, users who examined it say the supposed game is largely junk data with a malicious…