SecurityWeek

Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. 

Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access.

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.

Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.

CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.

The company will use the funding to accelerate platform development and expand its presence in key enterprise markets.

Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.

OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior.

The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.

Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months.

The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.

Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.

Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disruption caused by operational shutdowns.