OpenAI employee charged with hiding recorder in conference room
According to Security Affairs and TechCrunch, Alfozan is a 35‑year‑old Saudi national who joined OpenAI’s product team in July 2025.
AI security
-
-
Raven AI matches indoor photos to property listings
According to Malwarebytes and 404 Media, the Los Angeles Police Department and the Miami-Dade Sheriff's Office have obtained access to the Raven tool for investigative work.
-
Ransomware groups turn to employee doxxing and family threats
Semperis found 37% of surveyed victims said employees’ friends or family had been threatened and 25% reported doxxing.
-
Microsoft Patch Tuesday fixes over 1,400 CVEs, CISA warns of Ivanti Zero-Day
CISA instructed federal civilian agencies to patch Ivanti Connect Secure vulnerability CVE-2026-104935 by Friday and to address Windows Shell bypass CVE-2026-96951 by Oct. 16, 2026.
-
Jeremiah Fowler finds unprotected Vibetech database with 13.7 million records
The exposed data included credentials taken from prior breaches and was accessible without any authentication.
-
Apate.ai sends AI agents undercover to gather fraud intelligence
Yahoo! Finance reported Mobileum and Apate.ai partnered to give CSPs AI tools that divert scam calls to conversational agents for intelligence gathering
-
Microsoft makes passkeys default in Entra ID, phasing out SMS and voice authentication by February 2027
The shift, set to begin on September 1, 2026, follows rising phishing and AI-assisted attacks that Microsoft says have made SMS and voice MFA obsolete.
-
Cisco issues 35-Vulnerability Patch batch, flags Critical NX-OS and APIC Flaws
Cisco says none of the newly patched flaws are known to be exploited, but several critical bugs lack any workaround, per SecurityWeek and The420.in.
-
Japan declares cyberspace emergency as ransomware attacks expose millions of records
The declaration follows a wave of AI‑accelerated ransomware attacks that compromised personal data of over 14 million citizens and disrupted nearly 500 businesses.
-
OpenAI newsroom account says it parted ways with three safety researchers
The departures of safety researchers Jasmine Wang, Tomek Korbak, and Mikita Balesni followed an internal investigation into policy violations.
-
Microsoft seizes domains of phishing kits YAM Store, CoGUI, Iron Man
The disruption disabled over 20,000 accounts and blocked more than 100,000 fraudulent domains used in over one billion phishing messages since January 2026.
-
Microsoft patches record 1,413 flaws in October Patch Tuesday
The update fixed an actively exploited Windows Shell zero‑day (a flaw exploited before a patch is available), CVE-2026-96951, rated CVSS 8.8 (a common severity scoring system).