Cybersecurity, AI, etc.
OpenAI has proposed safety cases for frontier AI training: structured evidence, incident-derived regression tests, postmortems, and disclosure after investigations conclude. Why it matters A safety case connects risk claims to…
OpenAI says GPT-6.1 Sol shows lower failure rates than GPT-6 Sol in evaluations of tool transparency, explicit restrictions, and avoidance of unauthorized agentic outcomes. Security implications Vendor evaluations are evidence,…
Zscaler’s ThreatLabz 2026 Ransomware Report says ransomware is rising and describes AI-assisted tactics, data theft, and targeting of privileged employees. How to use the finding The claims are vendor-report findings,…
CVE-2026-84782 is a reported OpenSSL DTLS handshake retransmission issue that may cause plaintext heap-memory disclosure or denial of service. Defender checklist Inventory DTLS-dependent services, including embedded products. Confirm OpenSSL versions…
Apple has released iOS and macOS updates that address CVE-2026-86950, reported by Meta’s product security team and described in security reporting as a zero-day. What to do now Deploy current…
CISA warns that Citrix NetScaler ADC and Gateway flaws CVE-2026-88771 and CVE-2026-88772 are actively exploited. The alert covers eight newly disclosed vulnerabilities in products used for application delivery and remote…
Kiteworks has lifted a precautionary advisory that asked customers with self-managed deployments to take systems offline for a nine-hour window. The company issued the guidance after receiving what it described…
Dutch authorities have confirmed the arrest of a 24-year-old man from Amsterdam in an investigation involving the ShinyHunters group. Police said the person was expected to appear before the Rotterdam…
Microsoft has published an analysis of NeedyMantis, a modular post-compromise malware family used to maintain access in targeted intrusions. Microsoft observed it at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations,…
A security advisory for the official Model Context Protocol Python SDK warns that affected OAuth client implementations can send OAuth credentials to an attacker-controlled token endpoint when they connect to…