Eduard Kovacs

The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.

The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations. 

Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.

The platform combines open source software and a reference system design to keep AI agents within set boundaries.

Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772.

CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.

Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July. 

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.

Australia disclosed that an OpenAI agent gained unauthorized access to non-public government information.

Revision 4 of NIST’s operational technology security guide is open for public comments until November 30.

Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims.

Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature.

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information. 

Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse. 

Forescout’s new network segmentation research shows that OT and medical devices often share network segments with other enterprise assets.

The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.

The transaction is part of the $4.1 billion deal in which Accenture acquired a majority stake in Dragos in an OT cybersecurity push.

It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North...