OpenAI sued over children safety and data use
OpenAI is facing separate legal challenges over how ChatGPT interacts with children. The Guardian reports that eight US states accuse the company of misleading parents…
Author: Cybernoz
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Swati KhandelwalOct 16, 2026Vulnerability / OpenBSD A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow…
International finance body espouses ‘sound practices’ for AI adoption
Financial services institutions across the world are being encouraged by international financial services body the FSB to follow 12 guidelines when implementing artificial intelligence (AI).…
Weekly Cybersecurity Roundup: Freezer Hack, UPI PIN Theft
Supermarket freezers that cooked their own stock overnight. Text messages about traffic fines that quietly steal payment PINs. North Korean IT workers paying Americans to…
ASD Essentials Replaces Essential Eight: 5 Key Changes
For years, the Essential Eight has been the go-to checklist for Australian organisations defending against cyber attacks. That is now changing. The Australian Signals Directorate…
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
A Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of its state-sponsored espionage operations. The exploited flaw, tracked…
F5 addressed critical RCE flaws in NGINX
F5 addressed critical RCE flaws in NGINX Pierluigi Paganini October 16, 2026 F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could…
Open-source security rests on understanding risks, scaling fixes
Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report. Source link
Prolific Chinese espionage group exploits BeyondTrust zero-day
Suspected Chinese hackers with a proven knack for exploiting zero-days in security products are at it again, targeting BeyondTrust customers in attacks that researchers have…
Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
This report provides an overview of the top five initial access threat vectors observed by Unit 42 Threat Intelligence for September 2026. Adversary activity during…
Hallucinated domain in official OpenAI skill underscores AI supply chain risks
Niv Hoffman, AIR Security’s co-founder and CTO, said the incident shows that even official, vendor-published AI skills can contain mistakes, unsafe assumptions, dependencies, or vulnerabilities…
Ampyx Cyber examines FERC 2026 CIP audit findings on generator registration, shared control and AI access risks
Ampyx Cyber highlighted gaps in generator registration, cyber risk categorization and artificial intelligence (AI) access controls in the Federal Energy Regulatory Commission’s (FERC) 2026 Critical…