OpenAI has introduced GPT-6 Astra, its newest and most advanced AI model, with major improvements in computer use, software engineering, science and cybersecurity. The company says Astra represents a major jump in cyber capabilities and has reached the “Critical” level under its Preparedness Framework. One of the biggest findings from OpenAI’s testing is that Astra … Continued
Hackers linked to the recent Liquid Network incident have returned around 3,400 Bitcoin after taking nearly 4,000 BTC from the network’s federation wallet. The stolen Bitcoin was worth about $320 million when the attack happened on September 6. Liquid said the withdrawal was processed through SideSwap, but its authorization key was not compromised. The incident … Continued
Hackers are actively exploiting two newly disclosed security flaws in MikroTik RouterOS to take control of routers that have SSH services exposed to the internet. The attacks can allow hackers to gain full administrative access to affected devices without needing the legitimate user password. The two vulnerabilities work together as an attack chain known as … Continued
Trezor, the company known for its cryptocurrency hardware wallets, has revealed that a data breach involving its shipping provider ShipMonk affected far more customers than first reported. The total number of affected customers has now reached about 81,000, after another 67,000 customers in the United States were identified. Trezor had first disclosed the incident on … Continued
Microsoft is currently dealing with an Exchange Online service issue that is causing delays when users send or receive emails from external domains. The incident is being tracked as EX1467029, with Microsoft investigating reports of intermittent “Server busy” errors affecting multiple mailboxes. The problem does not mean that all Exchange Online email services are completely … Continued
A new zero-day exploit called FalconFlank has been publicly released targeting CrowdStrike Falcon Sensor on Windows systems. The proof-of-concept was published on September 3, 2026, by a security researcher known as Chaotic Eclipse, also associated with the names MSNightmare and Nightmare-Eclipse. The exploit reportedly targets Falcon’s ability to detect and remove malicious macros from Microsoft … Continued
SonicWall has warned customers about two new zero-day vulnerabilities affecting its SMA 1000 Series secure remote access appliances. The company confirmed that both vulnerabilities are being actively exploited in the wild, making the issue an urgent security concern. The flaws are tracked as CVE-2026-83548 and CVE-2026-83549, with the first rated critical at CVSS 10.0. SonicWall … Continued
A 40-year-old Russian national has been extradited to the United States to face charges over an alleged malware campaign that targeted around 80,000 users of a freelance employment platform. The man, Searzhudin Tamirlanovich Aktulaev, was arrested in Cyprus in May 2025 and was extradited to the US on August 28, 2026. He appeared in federal … Continued
JFrog Artifactory users are facing a serious security problem after attackers were observed exploiting a newly disclosed critical vulnerability in the platform. The flaw is tracked as CVE-2026-82329 and carries a CVSS score of 9.8, making it a critical-level issue. JFrog says the vulnerability is an authentication weakness that, under the default configuration, can allow … Continued
A new cyberattack campaign called Spring Ring is targeting Microsoft Teams users through voice phishing, also known as vishing. Researchers from Palo Alto Networks found that the campaign targeted at least 150 employees across multiple companies between January and April 2026. The attacks affected employees from at least 10 organizations and were designed to trick … Continued
