Millions of Exposed Passwords Found in Publicly Accessible Database Linked to Indian AI Company
A publicly accessible database linked to an Indian AI company reportedly exposed millions of records from previous data breaches, including email addresses, usernames and passwords. The database was restricted following responsible disclosure.
OpenAI Engineer Arrested Over Alleged Hidden Recording Device in Executive Meeting Room
A Saudi national who worked as an engineer at OpenAI has been arrested in the United States for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly capture sensitive conversations.
Microsoft Fixes Record 1,411 Security Flaws in October 2026 Patch Tuesday
Microsoft has released its October 2026 Patch Tuesday security updates, addressing a record-breaking 1,411 vulnerabilities across its products, including one actively exploited zero-day and two publicly disclosed zero-day flaws.
North Korean IT Workers Infiltrate at Least 70 U.S. Companies, DOJ Says
North Korean operatives have infiltrated at least 70 U.S.-based companies by posing as legitimate employees and using stolen American identities, according to the U.S. Department of Justice (DOJ).
UK Man Jailed for Stealing £200,000 in Crypto Through SIM-Swapping Fraud
A 25-year-old man in the United Kingdom has been sentenced to two and a half years in prison for stealing nearly £200,000 ($265,000) worth of cryptocurrency through SIM-swapping fraud.
Critical Bricksforge WordPress Flaw Exploited, CVSS 10.0 Bug Allows Remote Code Execution
A critical Bricksforge WordPress vulnerability with a CVSS score of 10.0 is being actively exploited, allowing unauthenticated attackers to execute PHP code on vulnerable websites.
AI-Powered Cyberattacks Target WordPress Sites and Critical Infrastructure
Cybersecurity researchers have uncovered two cybercrime operations using artificial intelligence (AI) to automate attacks, compromise enterprise networks, steal sensitive data, and support financial fraud.
Japanese Karaoke Giant Daiichi Kosho Warns of Data Exposure Affecting 8.7 Million Records
Japanese entertainment company Daiichi Kosho has disclosed a security incident involving malware discovered on a contractor’s computer, potentially exposing more than 8.7 million customer and employee records.
Do You Need a VPN? Take This 60-Second Privacy Test
Not everyone needs a VPN, and it won't solve every online privacy problem. Take this quick five-question test to discover whether a VPN is worth paying for, what it actually protects, and what to check before choosing a provider.
Five U.S. States Sue TP-Link Over Router Security and China Ties
- Five U.S. states have sued TP-Link, alleging misleading security claims, insufficient disclosure of China-related risks and privacy concerns. The legal action comes as researchers detail five vulnerabilities affecting certain ISP-supplied devices.
Ransomware Attack on Japanese Cloud Provider Disrupts 495 Organizations
A ransomware attack on Japanese cloud provider IDC Frontier has affected 495 organizations, disrupting railway services and food logistics while putting millions of records at potential risk.
Telegram Desktop Vulnerability Could Let Hackers Hijack Accounts With One Click
A high-severity Telegram Desktop vulnerability, CVE-2026-10718, could let attackers steal local files and hijack accounts through specially crafted links.
Midnight Mimosa Malware Found Preinstalled on Thousands of Android Phones
Bitdefender researchers have uncovered Midnight Mimosa, a malware campaign preinstalled on thousands of low-cost Android devices across more than 150 countries.
Loading
