OpenAI Bans Russian ChatGPT Accounts Tied to Influence Operation Promoting Fake Think Tank
OpenAI has banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation. The…
Tag: CVE-2026-58231
Claude Opus 4.6 Exploits IDOR Flaw to Cancel Gym Bookings in Aikido Security Test
Aikido Security has published research recreating an Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the…
INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown
INTERPOL's Operation Jackal IV, an eight-month international law enforcement effort targeting West African organized crime groups, has resulted in the arrest of…
Critical Gitea RCE CVE-2026-60004 Actively Exploited in Cryptojacking Campaign
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 (CVSS…
SLEEPWALKER Backdoor: A Stealthy Windows Implant Triggered by a Single Network Packet
A newly documented Windows backdoor named SLEEPWALKER has been detailed by independent malware researcher Dominik Reichel. The implant remains dormant in memory…
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
Cybersecurity researchers have uncovered a phishing-as-a-service (PhaaS) platform called AnonyMousKIT that uses AI voice agents to trick owners of stolen Apple devices…
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has announced new sanctions targeting Iranian cyber actors as part of Operation Economic Outcast, an economic…
NVIDIA NemoClaw Flaw Lets Malicious Webpages Poison Local AI Models via Ollama
Oasis Security has disclosed a vulnerability in NVIDIA's NemoClaw, an open-source reference stack for running AI agents, that could allow an attacker-controlled…
Marimo Notebook High-Severity Flaw Allows MCP Command Execution Before Cell Execution
Marimo, the developer of the open-source Marimo notebook software, has patched a high-severity code injection vulnerability tracked as CVE-2026-75149. The flaw, discovered…
WhatsApp Rolls Out Multiple Passkeys and Stronger Two-Step Verification to Thwart Phishing
Meta has announced new WhatsApp account security features, including support for multiple passkeys per account on both iOS and Android, enhancing phishing-resistant…