
Court Keeps Former OpenAI Engineer Detained Over Alleged Covert Recordings
US court ordered ex-OpenAI engineer Abdulrahman Alfozan detained pending trial over alleged hidden recorders in offices, prosecutors say.

US court ordered ex-OpenAI engineer Abdulrahman Alfozan detained pending trial over alleged hidden recorders in offices, prosecutors say.

Report says U.S. investigators suspect ransomware negotiators helped run ShinyHunters' Shinywire extortion site, citing anonymous sources.

Researchers observed public Plex2Shell exploit used against a Plex honeypot to deploy XMRig miner and proxy software, per single-server data.

Norforge says largely autonomous AI agents via exposed Cairn instances compromised 100+ websites, with firms reporting limited impact to standalone sites.

GhostAction expanded its GitHub campaign with phishing for OAuth tokens and a VS Code-triggered stealer, per OpenSourceMalware findings.

FirstVDS says attackers abused VMmanager 6 to copy customer server data, including passwords and credentials.

Palo Alto Networks reports suspected state-backed UNC5820 exploited Fortinet flaws to breach FortiManager and deploy in-memory PeerStitch on FortiGate.

MITRE ATT&CK v20 adds techniques for prompt injection, AI agent abuse, MFA bypass and ICS intrusions, plus new detections and threat groups.

Microsoft says October 2026 Windows Server updates can disrupt Exchange OWA sign-in and mail flow, with temporary registry workaround pending a fix.