Federal prosecutors say former OpenAI engineer Abdulrahman Alfozan, a 35-year-old Saudi national, was "mere days" from fleeing to Saudi Arabia before his arrest. A San Francisco federal judge (Alex Tse) denied his request for home confinement. Prosecutors allege he secretly installed an audio recording device in an executive conference ro…
Japanese media group Nikkei (publisher of The Nikkei and the Financial Times) disclosed a data breach affecting about 1.83 million records held in a cloud service used for system development. On the morning of October 7, attackers used previously compromised credentials to access the service. About 1.68 million records held only non-ident…
Paradigm Healthcare Services, a San Francisco-based billing processor for Medi-Cal (California's Medicaid program) under a data use agreement with the California DHCS, told the US HHS that a breach affected more than 970,000 people. The company detected unauthorized access to its local network on October 13, 2025. It determined only on Au…
An unauthorized party used a compromised login credential to access a file transfer (SFTP) site belonging to Educational Testing Service (ETS) and copy files containing California public school student data, according to the California Department of Education (CDE). ETS supports the state's CAASPP and ELPAC assessment programs. Access occ…
Threat actors are abusing the open source AI platform Cairn, an agent-coordination engine usable as an autonomous penetration testing tool, to automate attacks on hundreds of websites worldwide. AI security firm Norforge found the activity after threat actors left their Cairn panels exposed, following a Gambit Security report on attackers…
Between April and July 2026, the threat actor UNC7017 tampered with the AOMEI Backupper update infrastructure several times to deliver the CrossRoad downloader and the ShinyRoad modular backdoor. Each tampering window lasted only five to ten minutes before reverting to authentic files. This made the campaign hard to detect and suggests it…
The Rank Math PRO WordPress SEO plugin was hit by a supply chain attack. Some packages of version 3.0.123 contained malware that could let attackers take over websites once the plugin was activated. Users who downloaded or updated the plugin between October 15, 2026 20:02 UTC and October 16, 2026 07:12 UTC may be infected. Rank Math remov…