Eduard Kovacs

CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation. 

Adobe has fixed vulnerabilities in AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content Credentials SDK, and Media Encoder.

Google opened Carbon to paying developers and businesses as DeepMind used agents built on it to prove libsignal security guarantees.

Anthropic says Mythos 5.2 improves vulnerability discovery while showing a lower tendency to escape sandboxes in controlled tests.

The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.

Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.

Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.

Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.

Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably.

The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook.

After its sandbox proxy failed, an internal OpenAI model crafted raw packets and probed AWS services trying to reach the internet.

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.

OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.

An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.

A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.

The NATO CCDCOE exercise in Estonia introduces AI agents and OpenAI Daybreak into joint cyber and kinetic operations training.