FBI investigates FBIJobs.gov compromise claim as data theft details remain unverified
An FBI investigation follows reports of a defaced jobs portal, while claims of terabytes of stolen data and wider system access remain unsubstantiated.
Read More
News
OpenAI agent accessed legacy Medicare statistics portal months before public disclosure
Australia is investigating how an internal OpenAI agent entered a legacy Medicare statistics portal in June and why notification did not arrive until September.
Read More
Chrome 154 reaches Stable with 108 security fixes
Chrome 154 brings 108 security fixes to Stable, including 11 Critical entries. Here are the fixed builds and the distinctions across desktop, Android, iOS and Extended Stable.
Read More
Control of Clop leak site remained unclear after apparent response to ShinyHunters
Observers confirmed that Clop’s leak-site content was hijacked. Claims of wider infrastructure access, internal data theft and a specific software flaw remain unverified.
Read More
Anthropic pairs Claude Opus 5.5 safety claims with cyber request routing
The Claude Opus 5.5 launch combines vendor-reported behavioural results with model fallback and planned access tiers for verified defenders.
Read More
Meta says hotfix addresses Muse Mac token flaw
Controlled tests showed how a Muse account token could extend an attacker’s reach after local code execution, while important hotfix details remain unpublished.
Read More
How RatHat turns Android permissions and debugging access into credential theft
RatHat’s touch logging follows sideloading, an Accessibility grant and local ADB access. Its reported AI feature aids interface navigation, not autonomous attack planning.
Read More
GSE says Google suspended RedVDS-linked accounts, but did not lead the January server seizure
GSE’s account places Google in the wider RedVDS disruption through account suspensions, while US$66 million referred to attributed fraud losses, not marketplace value.
Read More
Microsoft finds signs of AI assistance in million-message invoice fraud campaign
A campaign sent more than one million fraud emails in three days. Microsoft found signs of AI-assisted template development, not proof that AI ran the operation.
Read More
BYD Shark 6 test reached lights, locks and microphone, but wider risk is unknown
An authorised test reached lights, wipers, locks, location and cabin audio on one BYD Shark 6, but its access method, affected versions and any fix remain unresolved.
Read More