Cybersecurity News and Updates

In an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for the alleged deception.

Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.

The post Stolen AI Reasoning Could Help China Build Cheaper Rivals appeared first on SecurityWeek.

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.

The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek.

A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.

The post Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI appeared first on SecurityWeek.

The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub.

The post Mythos 5 Ignored Real-World Harm in July Attack appeared first on SecurityWeek.

An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.

The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek.

The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts.

The post Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts appeared first on SecurityWeek.

An automated campaign is using stolen GitHub tokens to plant workflows that print a repository’s secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz.

A GitHub safeguard that pauses

Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations.

Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events across