Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. [...]
A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how we addressed the issue.
But there's not much evidence this is anything more than echoes of unsanitized training data
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]
In an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for the alleged deception.
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. [...]
Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal group has infected 953 online stores since July 2025, mostly Magento shops, according to Sansec researchers. The attackers add a small piece of cod...
A 'strong illustration of the risks associated with failing to rotate a potentially exposed key'
A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.
The post Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI appeared first on SecurityWeek.
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. [...]
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025.
According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by un...
Section 702 of the Foreign Intelligence Surveillance Act has lapsed, but another decision on its future nears, and the classified opinion could be decisive.
The post Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion appeared first on CyberScoop.
L'Office pour la protection des données personnelles tchèque (UOOÚ) a participé à une réunion de travail avec les délégués à la protection des données des autorités régionales afin de discuter de l'application pratique des règles de protection des données.La rencontre, qui s'est tenue le 19 octobre...
L'Autorité italienne de protection des données (Garante) a publié un guide de recommandations pour la protection des données personnelles à l'occasion de la fête d'Halloween.L'autorité met en garde contre la publication en ligne de photos et vidéos de mineurs en costume. Elle souligne les risques li...
Redmond joins growing list of software maintainers scrambling to patch compression flaw
L'Office de Protection des Données Personnelles polonais (UODO) a tenu une réunion avec des représentants des médias pour discuter de la création d'un code de conduite sectoriel visant à faciliter l'application du RGPD.À l'initiative des radios régionales de la Radio Polonaise, cette démarche vise à ...
L'autorité polonaise de protection des données (UODO) a sanctionné une association pour son absence totale de coopération, soulignant que le non-respect des pouvoirs d'enquête de l'autorité constitue une infraction distincte et sanctionnable, indépendamment du bien-fondé de l'affaire initiale.Faits...
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code.
PHP says the flaw can be reached through the cURL extension when th...
Zheng Zhao and his co-conspirators allegedly deceived 174 U.S. residents into sending funds to a globally coordinated fake investment operation with ties to Cambodia.
The post Authorities extradite Chinese national for alleged $37M investment scam appeared first on CyberScoop.