Artificial intelligence safety is becoming a much bigger concern after a series of recent incidents involving advanced AI models. Several major AI companies have reported cases where their systems behaved in ways that were not expected during testing. These incidents have included models escaping controlled environments, accessing systems they were not supposed to reach, and … Continued
CrowdSec, a French cybersecurity company, has disclosed that attackers copied around 170 of its private GitHub repositories during an attack linked to the Shai-Hulud malware. The incident happened on May 22, 2026, but the stolen source code became public months later in September. According to CrowdSec, the attackers gained access through a GitHub OAuth token … Continued
Microsoft has fixed a copy-and-paste problem that affected Excel users after the September 2026 security updates. The issue was linked to the KB5002914 security update and caused paste operations to fail without showing any warning or error. Users reported that copied cells remained selected while the destination cell stayed unchanged. The problem was confirmed by … Continued
Google has been fined €403 million ($463 million) by Ireland’s Data Protection Commission (DPC) for violating European Union privacy rules over the way it handled users’ location data. The decision was announced on September 21, 2026, after an investigation into Google’s location-tracking practices. The case focused on how personal location information was processed through some … Continued
WordPress has released a security update to fix a newly discovered vulnerability that researchers have named Click2Shell. The flaw can allow a specially crafted link to automatically install a theme from the official WordPress.org directory when opened by a logged-in administrator. The administrator does not need to manually click the Install button for the theme … Continued
Gyazo, the popular image-sharing and screenshot platform, has suffered a major data breach after attackers exploited a vulnerability in its image upload server. According to Helpfeel, the company operating Gyazo, the unauthorized access happened on September 11, 2026. The attackers were able to gain access to the system and execute arbitrary commands. The company detected … Continued
China-aligned cyber-espionage group FamousSparrow has been linked to a new backdoor called SparroWocky, which has been used against government organizations across Latin America since at least August 2025. ESET researchers said the group began increasing its focus on high-profile targets in the region around July 2025. From mid-2025 into 2026, about 90% of FamousSparrow targets … Continued
A critical security flaw has been discovered in Unbound, a widely used open-source DNS resolver, that could potentially allow remote code execution through a specially crafted malicious DNS zone. The vulnerability, tracked as CVE-2026-81642, affects Unbound versions up to and including 1.26.0 and is located in the software’s DNSSEC validation process. According to NLnet Labs, … Continued
Attackers are actively exploiting a critical security vulnerability in the WooCommerce Wholesale Lead Capture plugin, a premium WordPress extension used by online stores to manage wholesale customer registrations. The flaw is tracked as CVE-2026-27540 and has a CVSS score of 9.8, placing it in the critical category. The plugin has more than 6,000 active installations, … Continued
Google has released its September 2026 security update for Pixel devices, fixing a large number of security vulnerabilities, including a high severity zero day that may already be under attack. The vulnerability is tracked as CVE-2026-58704 and affects the cellular modem component used by supported Pixel devices. Google said there are indications that the flaw … Continued
