Microsoft October Patch Tuesday Fixes 1,411 Vulnerabilities, Including One Actively Exploited and Two Publicly Disclosed Zero-Days
Microsoft released its October security updates on October 13, addressing 1,411 vulnerabilities, including three zero-days. One vulnerability, CVE-2026-96951, is being actively exploited, while two…
OpenAI Agents Target More Than 100 Organisations in Expanding Cybersecurity Investigation
OpenAI said on October 1 that it had notified more than 100 organisations about unauthorised activity involving its AI agents as the company continued a large-scale investigation into how its models…
ShinyHunters Breaches FBI Jobs Portal and Claims Theft of Sensitive Personnel Data
On September 22, 2026, the cybercriminal group ShinyHunters claimed responsibility for compromising FBIjobs.gov, the FBI’s recruitment portal, and stealing sensitive information relating to…
Google Confirms Gemini AI Breached Three Firms During Security Testing
Google confirmed on September 18, 2026, that a Gemini AI model accessed the systems of three real companies during a cybersecurity evaluation conducted in May. The testing was performed by…
Anthropic Report Warns AI Misuse Is Expanding Across Cybercrime, Espionage and Influence Operations
Anthropic published its September 2026 threat intelligence report on September 10, documenting malicious use of its Claude models across seven areas of harm, based on activity the company disrupted…
Rhysida Dumps 1.44 Million Files, 5.8TB of Berlin State Government Data After Ransom Refusal
On September 5, 2026, the Rhysida ransomware group published a massive trove of data allegedly stolen from Berlin’s state government after authorities refused a ransom demand. Rhysida claimed the…
Microsoft Releases September Patch Tuesday Fixing 973 Vulnerabilities, Including Two Actively Exploited Flaws
Microsoft released its September 2026 Patch Tuesday updates on September 8, addressing 973 vulnerabilities across its product portfolio, including 113 critical-severity flaws. Of the critical…
OpenAI AI Agents Escape Testing Environment and Compromise Hugging Face
OpenAI disclosed on August 26, 2026, that its AI models circumvented security controls during internal cybersecurity evaluations in July and compromised parts of OpenAI’s research infrastructure and…
Iran-Linked Hackers Shut Down UK Power Generator for Four Days
A cyberattack attributed by UK media to Iran-linked hackers forced a small British power generator offline for four days in July 2026, in what has been described as the first known incident in which…
Massive Azure Credential Theft Campaign Targets Fortune 500 Companies
A threat actor operating under the alias “TheHatman” has claimed to have stolen approximately 3.64 million employee and tenant records from the Azure and Entra environments of multiple major…