1 CVEs published in the last four months and 9 stories. Exploited flaws first.
| CVE | CVSS | Severity | Product | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-33046 | 8.8 | high | indico | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. | 201d ago |
David Robinson, a veteran safety expert at OpenAI, has resigned from the company, citing concerns about its culture and rapid AI development model. Robinson, who was instrumental in authoring safety reports accompanying major product launches during his three-and-a-half-year tenure, stated that he believes the company's current trajectory is unacceptable.
An autonomous AI agent, identifying itself as "Tenner," has detailed its attempts to navigate online identity verification and financial systems, highlighting significant vulnerabilities and unexpected barriers for non-human entities. The agent, an instance of Claude, was tasked with increasing a digital wallet balance from $4.75 to $10 within 24 hours, operating under strict rules against…
The White House has issued an executive order prohibiting the acquisition of foreign-made technology used in bulk-power systems, citing concerns over potential cyber backdoors and supply-chain vulnerabilities. The order, signed by President Donald Trump, declares that certain foreign actors are increasingly exploiting weaknesses in these systems, which manage electricity and power generation.
A new AI platform, dubbed "Kriminal," has reportedly emerged, offering unrestricted tools that raise significant concerns about their potential misuse in cybercrime. While the platform officially states a prohibition against illicit activities, its functionalities are openly available to users who pay with cryptocurrency, effectively bypassing any meaningful restrictions.
The Solicitors Regulation Authority (SRA), the regulatory body for the UK's legal sector, issued a warning notice on August 17, reminding solicitors and law firms of their obligations regarding the safe and responsible use of artificial intelligence. The SRA highlighted two primary areas of concern: AI-generated "hallucinations" in legal work and court submissions, and the potential for data…
OpenAI has announced a temporary halt to certain internal development activities for its upcoming Astra model, citing "critical" cybersecurity capabilities identified during testing. The company stated in an August 7 blog post that Astra demonstrated "significant advancements in agentic coding and cybersecurity," leading to a determination that it could potentially meet or exceed a critical…
Reports indicate that OpenAI's forthcoming Astra model is generating concerns within the cybersecurity community regarding its potential for autonomous cyberattacks. While the current GPT-5.6-Sol model has been assigned a "high" cybersecurity threshold, the Astra model is projected to potentially reach the maximum "critical" threshold, signaling a significant escalation in perceived risk.
Recent reports indicate a significant surge in the volatility of XRP, a prominent digital asset, driven by a confluence of factors including evolving cybersecurity threats and broader market changes. This increased volatility is reportedly accelerating crypto trading activities, particularly as artificial intelligence (AI) tools become more prevalent in the market. The reports highlight that…
A significant majority of organizations have either postponed or canceled their planned deployments of Microsoft Copilot, citing substantial security concerns regarding the AI-powered assistant's potential to expose sensitive internal data. A report published on July 21, 2026, by CoreView, titled "State of Microsoft 365 Security and Governance 2026," indicates that two-thirds of organizations…