OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI
OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI Pierluigi Paganini September 02, 2026 OpenAI says Astra can autonomously find zero-days and build exploits, marking its…
Month: September 2026
Jail time for Maine child in 764 marks turning point in federal law enforcement
The FBI said a 17-year-old from Maine is the first child federally charged and adjudicated for crimes stemming from their involvement in 764, a violent…
Yubico expands OpenAI partnership to Australia as hardware-backed passkey mandate begins
Yubico has expanded its partnership with OpenAI into Australia and nine other countries as OpenAI begins requiring hardware-backed passkeys for members of its Trusted Access…
CrowdStrike Extends Endpoint Security to Stop Supply Chain Attacks
Software supply chain attacks pose a critical enterprise threat. In the first half of 2026, these attacks increasingly used malicious software packages uploaded to public…
SonicWall reports two major security holes under active exploit
Repeats a June attack chain What makes this issue especially significant is the timing and the pattern, he pointed out. “This is essentially a rerun…
I rented a car, and within hours, my driver’s license was for sale
The timing of newly available scans—typically within a day, if not hours, of me and a small sample of other victims presenting them at rental…
Wiz is now a CVE Numbering Authority (CNA)
Wiz has been authorized by the Common Vulnerability and Exposures (CVE®) Program as a CVE Numbering Authority (CNA). This milestone is thrilling and humbling. Not…
Cybercrime at Machine Speed: Key Takeaways from Flashpoint’s 2026 Midyear Threat Intelligence Briefing
In our latest webinar, Flashpoint Vice President of Intelligence, Ian Gray, briefed security leaders on the evolving threat environment, providing critical insights from the Flashpoint…
Elastic and Keep join forces to help users manage alerts and automate workflows
We are thrilled to announce today that Elastic has entered into an agreement to acquire Keep Alerting Ltd (“Keep”), an open source AIOps company. The…
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. According to…
Google Launches Gemini 3.8 Flash Cyber to Identify and Auto-Patch Security Vulnerabilities
Google has unveiled Gemini 3.8, its latest reasoning and coding model family, introducing a specialized variant called Gemini 3.8 Flash Cyber that is purpose-built to…
New ‘Knight Office’ Phishing Kit Steals Microsoft 365 Logins Without Touching a Password
A newly identified phishing-as-a-service kit is being used to hijack Microsoft 365 accounts by stealing victims’ active login sessions rather than their passwords, according to…