Cybersecurity - Page 18
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, vulnerabilities, phishing, AI security, Japan), each labelled with where it comes from. This view is not indexed by search engines.
Latest
OpenAI Is in Early Talks to Buy Security Firm Trail of Bits, The Information Reports
The Information reported that OpenAI is in early talks to buy security firm Trail of Bits. Neither company has confirmed it, and no deal terms are known.
Musk Backs a Grok Bot a User Built to Flag Scam Emails
Elon Musk shared a Grok Bot that DirtyTesLa built to flag scam emails. TSN has not tested it. Why scams are harder to spot, and how to check.
Judge Orders Ex-OpenAI Engineer in Bugging Case Held Without Bail
Prosecutors allege the ex-OpenAI engineer in the hidden-recorder case had Saudi royal contact and Saudi-paid family flights. His lawyer seeks release.
US Charges 14 People Over Alleged North Korean IT Worker Scheme and Raids Texas “Laptop Farms”
The Justice Department has charged 14 people over an alleged North Korean remote IT worker scheme and seized about 187 devices in Texas laptop farm raids.
Microsoft Fixes a Windows Shell Zero-Day That Attackers Are Already Using
Microsoft's October update fixes CVE-2026-96951, a Windows Shell flaw attackers are already using to slip past Mark of the Web warnings. Update now.
AIR Security Says a Crafted Certificate Can Carry Secrets Past Vercel Sandbox’s Domain Allowlist
AIR Security says a crafted client certificate can carry secrets past Vercel Sandbox's domain allowlist. Vercel has not commented publicly.
Meta Says Stolen Login Exposed GitHub Code and Data on 1,500 People
Meta says an outside group used an employee's stolen login to take code from its GitHub repositories, plus personal data that should not have been there.
Docker Hub Flaw Handed Users’ Access Tokens to New Owners When Accounts Became Organisations; Docker Says It Is Fixed
A Docker Hub flaw, CVE-2026-105445, handed users' access tokens to new owners when accounts became organisations. Docker says it is fixed and saw no abuse.
Attackers Are Exploiting an Ivanti Connect Secure Zero-Day, and CISA Gives US Agencies Until 16 October to Act
Attackers are exploiting an Ivanti Connect Secure flaw, CVE-2026-104935. CISA added it to its exploited list on 13 Oct and told agencies to act by 16 Oct.
Lattice Launches Sentry 5.0, a Post-Quantum Firmware Security Stack for AI Data Centres
Lattice's Sentry 5.0 protects server firmware with post-quantum signatures and attestation. Lattice calls it an industry first. Demo boards are out now.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.