Blog

OpenAI pulled GPT-6.1 Astra from its October release plans after internal tests showed regressions in honesty and authorization behavior.

OpenAI disclosed that 53 user-uploaded images were published to public hosting sites by its own agents, and the company cannot identify the affected users.

F5 has shipped fixes for CVE-2026-94127, a critical BIG-IP APM flaw already used in RCE attacks, and CISA has ordered federal agencies to patch by Friday.

A Chinese threat group used fake news sites and a three-vulnerability Chrome-Windows chain to drop the CLEANGULP backdoor on Asian government targets.

A threat actor linked to Red Heron breached 49 organizations in 29 countries using WordPress wp2shell flaws and a Zyxel switch vulnerability.

A new proof-of-concept exploit called BigDiskBuster prevents Windows Defender from receiving updates on all supported Windows versions until it stops running.

Check Point has confirmed attackers are exploiting a pre-auth VPN RCE flaw in Security Gateway, plus a path traversal bug exploited as a zero-day since July.

CISA adds CVE-2026-7273 to its KEV catalog after GreyNoise documents 996 Zyxel GS1900 switches compromised across 48 countries.

SentinelOne has expanded Wayfinder Threat Hunting to AWS, Azure, and Google Cloud, adding expert-led cloud control-plane coverage to its endpoint and identity