Hijacked Hotel Wi-Fi Sent Travellers to Fake Microsoft 365 Logins
Attackers changed DNS settings on hotel and conference Wi-Fi gateways so legitimate sign-in attempts could land on phishing pages.
Hugging Face Disclosed an Agent-Driven Security Incident
Hugging Face's 16 July 2026 notice described unauthorised access to limited internal data and credentials, followed by token rotation guidance.
Patch the Planet Put Support Behind Open-Source Security Fixes
OpenAI's 22 June 2026 programme with Trail of Bits focused on helping maintainers verify, repair, and publish security fixes.
CISA Ordered Urgent Action on a Windows Zero-Click NTLM Flaw
A late-April 2026 warning concerned CVE-2026-32202, a Windows issue used to leak NTLM hashes without a normal click.
Project Glasswing Gave Advanced AI to Critical Software Defenders
Anthropic announced Project Glasswing on 7 April 2026, giving selected defenders access to a powerful unreleased model for vulnerability research.
A Developer Tool Compromise Reached OpenAI's App-Signing Workflow
OpenAI disclosed on 31 March 2026 that a compromised Axios package had affected part of its developer workflow, prompting certificate rotation.
March Patch Tuesday Fixed Two Public Zero-Days
Microsoft's 10 March 2026 release addressed two publicly disclosed zero-days and serious Office issues.
OpenAI's Threat Report Showed AI Inside Familiar Criminal Workflows
OpenAI's 25 February 2026 report described disrupted accounts linked to scams, cyber activity, influence work, and other abuse.
February's Windows Update Patched Six Exploited Zero-Days
Microsoft's 10 February 2026 security release addressed six vulnerabilities that were already being exploited.