A week in security (September 15 – September 21)

September 19, 2025 – OpenAI has fixed a vulnerability in ChatGPT Deep Research after researchers found a prompt injection method to exfiltrate PII.

September 18, 2025 – Microsoft and Cloudflare have delivered a major blow to the fastest growing Phishing-as-a-Service operation called RaccoonO365.

September 18, 2025 – Google has issued a Chrome update to fix four high priority flaws including one zero-day, zero-click vulnerability.

September 18, 2025 – OpenAI is going to try and predict the ages of its users to protect them better, as stories of AI-induced harms in children mount.

September 17, 2025 – Researchers have discovered a large ad fraud campaign on Google Play Store.