OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight Pierluigi Paganini October 21, 2026 OpenAI reveals two cases of AI agents disabling safety…
Month: October 2026
Weak encryption certificates could have let hackers easily spoof websites
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized. Source link
DOJ escalates fight for election supremacy with California raids
A series of federal raids and arrests of voters in California has escalated the Trump administration’s ongoing efforts to take administrative control of U.S. elections.…
Hackers heat fridges at major French supermarkets, spoiling food
Hackers raised the temperature of refrigerators and freezers at hundreds of French supermarkets to as high as 50 degrees Celsius (122 Fahrenheit) overnight, causing fires…
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
Executive Summary Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. Both are remote code execution (RCE) vulnerabilities rated as 9.2…
Google, Mozilla revoke eMudhra intermediates after private key compromise
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhra have been compromised, potentially allowing attackers to forge trusted certificates…
Tenable OPEN for AI connects exposure management with threat detection and incident investigations
Exposure management company Tenable Holdings announced expansion of its open technology and partner ecosystem to accelerate integrated security workflows across the entire tech stack. Tenable…
Accenture, Dragos and SANS Institute launch $10 million initiative to strengthen cybersecurity at US utilities
Accenture, Dragos Inc. and the SANS Institute announced a major initiative to help strengthen cyber defenses for under-resourced U.S. water, electric and natural gas utilities.…
Introducing full transaction detection for Cloudflare WAF
Today, we are expanding our web application firewall (WAF) by adding two new capabilities: full transaction detections and response rules. Full transaction detections evaluate each…
Description of PHP vulnerabilities: CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)
Vulnerability overview On October 20, 2026, the PHP security team published a preliminary notice regarding an upcoming emergency release that addresses two critical vulnerabilities (both…
Elastic SIEM tags: Providing useful detection context for prioritization
Of Elastic’s 2100+ prebuilt detection rules, 385 are tagged Profile: Recommended and 296 are tagged Aggressive. The rest (62% of the list) are deliberately left…
Critical PHP vulnerabilities put millions of sites at risk.
Top stories. Critical PHP vulnerabilities put millions of sites at risk. Indian certificate authority exposes private keys. FBI suspects a second ransomware negotiator in ShinyHunters…