The developers of the open source cryptography libraries OpenSSL and WolfSSL announced patches for around a dozen vulnerabilities each, including high-severity vulnerabilities. Of the Fixed 14 vulnerabilities in OpenSSLone was assigned a high severity level. Tracked as CVE-2026-84782, it could allow a remote peer to obtain fragments of heap memory or crash applications that use … Read more
Microsoft is moving beyond just running Linux distributions with the Windows Subsystem for Linux, as WSL containers are now generally available. You can get the function by running wsl –updateand once it is installed there is a new one wslc.exe Command line tool. Microsoft also includes container.exe as an alias so you can use more … Read more
OpenAI CEO Sam Altman introduced a “remarkably powerful, always-on” artificial intelligence agent during an appearance Tuesday, where he avoided any mention of security concerns about the company’s most advanced models. At the company’s annual developer conference, Altman made a number of product announcements and updates, including the company’s new agents called Dots. The agents, designed … Read more
Protecting identities is fundamental to corporate security. With attackers moving faster than ever before, traditional identity governance is no longer sufficient. To stay secure, organizations need real-time visibility into identity events. Cybersecurity is facing a real storm: attack surfaces are increasing exponentially as companies integrate more cloud apps and external accounts into their environments. At … Read more
Apple released iOS and macOS updates on Monday to patch a zero-day vulnerability that may have been exploited for targeted attacks. The bug, tracked as CVE-2026-86950, is an out-of-bounds write issue in the CoreGraphics component that can be exploited to execute arbitrary code when processing a specially crafted file. Apple hasn’t said how the malicious … Read more
Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend that crippled some of its business systems. After a system failure in the early hours of Saturday, the company confirmed the attack and shut down its network to prevent further damage. The company … Read more
Frontier AI company Modulate has raised an additional $25 million from Future Ventures, with participation from Hyperplane and Lakestar, bringing its total funding to $60 million. Modulate creates audio-native AI models that enable machines to understand the nuances of human conversations, whether natural or fake. It uses a proprietary Ensemble Listening Model (ELM) architecture to … Read more
The summer of 2026 taught the security industry a new term: the stolen AI login. As BleepingComputer reported, in late August, Anthropic responded to Infostealer’s takeover of Claude sessions by logging out users, deleting saved payment methods, and refunding charges identified as unauthorized. This is the supply side. SOCRadar’s AI Identity Exposure Report it’s about … Read more
Over the weekend, Citrix rushed out patches for two critical NetScaler zero-day vulnerabilities that have already been exploited. The company’s advisory covers eight vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including remote code execution, HTTP request smuggling, DoS, and security bypass issues. The two zero days for them Citrix confirmed the exploitation are tracked as … Read more
OpenAI is testing a new always-on assistant called “O”and references to the unannounced feature briefly appeared online. OpenAI hasn’t confirmed or denied that it’s working on a new always-on assistant, but some users have confirmed it spotted On References to the new “o” assistantSource: Jake on X This feature was listed alongside increased Work and … Read more