OpenAI benches GPT-6.1 Astra for overstepping the mark
Turns out teaching an AI to keep going can make it rather bad at knowing when to stop
The Register
Latest
Scans for Wordfence Protected Websites, (Tue, Sep 29th)
Starting yesterday, our sensors picked up a small number of scans for "wordfence-waf.php". This particular script is used by Wordfence, a solution to protect WordPress sites. During the Wordfence install, the wordpress-…
SANS ISC
The Minions router is going viral, but its WiFi 6E hardware is no joke
A minion miles from boring.
Cybernews
Reco Raises $55 Million for Agentic Security
The company will use the funds to expand its sales, partnerships, channels, and customer support teams. The post Reco Raises $55 Million for Agentic Security appeared first on SecurityWeek.
SecurityWeek
OpenAI Scrapped the New GPT-6.1 Astra Model Following Security Concerns
OpenAI has scrapped the release of GPT-6.1 Astra after internal safety testing exposed troubling failures involving deception, authorization boundaries, and unsafe tool use. The agentic AI model had been scheduled for a…
CyberSecurityNews
European trade unions want Palantir ditched. EU defense chief calls it “a great company”
Groups worry that Palantir poses risks to civil rights and democracy.
Cybernews
CVE-2026-100775 | Mozilla Firefox up to 115.41/140.16/153.3/156 Graphics privileges management
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156. It has been rated as critical. The impacted element is an unknown function of the component Graphics. The manipulation leads to improper privil…
vuldb
CVE-2026-100774 | Mozilla Firefox up to 115.41/140.16/153.3/156 DOM use after free
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156. It has been declared as critical. The affected element is an unknown function of the component DOM. Executing a manipulation can lead to use af…
vuldb
CVE-2026-100773 | Mozilla Firefox up to 115.41/140.16/153.3/156 IndexedDB use after free
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156. It has been classified as critical. Impacted is an unknown function of the component IndexedDB. Performing a manipulation results in use after …
vuldb
CVE-2026-100772 | Mozilla Firefox up to 140.16/153.3/156 Core use after free
A vulnerability was found in Mozilla Firefox up to 140.16/153.3/156 and classified as critical. This issue affects some unknown processing of the component Core. Such manipulation leads to use after free. This vulnerabi…
vuldb
CVE-2026-100771 | Mozilla Firefox up to 115.41/140.16/153.3/156 Streams reliance on undefined, unspecified, or implementation-defined behavior
A vulnerability has been found in Mozilla Firefox up to 115.41/140.16/153.3/156 and classified as critical. This vulnerability affects unknown code of the component Streams. This manipulation causes reliance on undefine…
vuldb
CVE-2026-100769 | Mozilla Firefox up to 140.16/153.3/156 WebAssembly use after free
A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 140.16/153.3/156. This affects an unknown part of the component WebAssembly. The manipulation results in use after free. This vulnera…
vuldb
CVE-2026-100768 | Mozilla Firefox up to 156 WebGPU use after free
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 156. Affected by this issue is some unknown functionality of the component WebGPU. The manipulation leads to use after free. Thi…
vuldb
CVE-2026-100767 | Mozilla Firefox 115.41/140.16/153.3/156 Networking Cache use after free
A vulnerability classified as critical was found in Mozilla Firefox 115.41/140.16/153.3/156. Affected by this vulnerability is an unknown functionality of the component Networking Cache. Executing a manipulation can lea…
vuldb
CVE-2026-100765 | Mozilla Firefox up to 153.3/156 WebAssembly use after free
A vulnerability classified as critical has been found in Mozilla Firefox up to 153.3/156. Affected is an unknown function of the component WebAssembly. Performing a manipulation results in use after free. This vulnerabi…
vuldb
CVE-2026-100764 | Mozilla Firefox up to 156 WebGPU privileges management
A vulnerability described as critical has been identified in Mozilla Firefox up to 156. This impacts an unknown function of the component WebGPU. Such manipulation leads to improper privilege management. This vulnerabil…
vuldb
CVE-2026-100763 | Mozilla Firefox up to 156 WebGPU off-by-one
A vulnerability marked as critical has been reported in Mozilla Firefox up to 156. This affects an unknown function of the component WebGPU. This manipulation causes off-by-one. This vulnerability is handled as CVE-2026…
vuldb
CVE-2026-100761 | Mozilla Firefox up to 156 WebGPU use after free
A vulnerability labeled as critical has been found in Mozilla Firefox up to 156. The impacted element is an unknown function of the component WebGPU. The manipulation results in use after free. This vulnerability is kno…
vuldb
CVE-2026-100760 | Mozilla Firefox up to 153.3/156 Process Sandboxing sandbox
A vulnerability identified as critical has been detected in Mozilla Firefox up to 153.3/156. The affected element is an unknown function of the component Process Sandboxing. The manipulation leads to sandbox issue. This…
vuldb
CVE-2026-100759 | Mozilla Firefox up to 115.41/140.16/153.3/156 Quota Manager uninitialized pointer
A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 115.41/140.16/153.3/156. Impacted is an unknown function of the component Quota Manager. Executing a manipulation can lead to uninitia…
vuldb
CVE-2026-100758 | Mozilla Firefox up to 115.41/140.16/153.3/156 Navigation privileges management
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156. It has been rated as critical. This issue affects some unknown processing of the component Navigation Component. Performing a manipulation resu…
vuldb
CVE-2026-100757 | Mozilla Firefox up to 115.41/140.16/153.3/156 Widget use after free
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156. It has been declared as critical. This vulnerability affects unknown code of the component Widget. Such manipulation leads to use after free. T…
vuldb
CVE-2026-100756 | Mozilla Firefox up to 115.41/140.16/153.3/156 Audio/Video Playback off-by-one
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156. It has been classified as critical. This affects an unknown part of the component Audio/Video Playback. This manipulation causes off-by-one. Th…
vuldb
CVE-2026-100766 | Mozilla Firefox up to 115.41/140.16/153.3/156 JAR information disclosure
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156 and classified as problematic. Affected by this issue is some unknown functionality of the component JAR. The manipulation results in informatio…
vuldb
CVE-2026-100770 | Mozilla Firefox up to 115.41/140.16/153.3/156 DOM Content Processes use after free
A vulnerability has been found in Mozilla Firefox up to 115.41/140.16/153.3/156 and classified as critical. Affected by this vulnerability is an unknown functionality of the component DOM Content Processes. The manipula…
vuldb
CVE-2026-100762 | Mozilla Firefox up to 115.41/140.16/153.3/156 DOM Content Processes use after free
A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 115.41/140.16/153.3/156. Affected is an unknown function of the component DOM Content Processes. Executing a manipulation can lead to…
vuldb
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. The post Hackers Use ChatGPT Custom GPTs in ClickFix Attacks appeared first on Securi…
SecurityWeek
GPT-6 Astra AI Agent Tried to Deceive Developers and Hack Software Supply Chains
The UK AI Security Institute (AISI) recently disclosed that during cybersecurity evaluations, the GPT-6 Astra model executed simulated, unauthorized supply-chain attacks. This was part of a pre-release assessment conduc…
CyberSecurityNews
GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws
GitHub Security Lab has disclosed that its open-source AI security agent identified 24 vulnerabilities in Android applications, including flaws that could enable covert location tracking in OsmAnd and account takeover a…
CyberSecurityNews
CVE-2026-101271 | pretix up to 2026.5.4/2026.6.1/2026.7.0 session expiration
A vulnerability, which was classified as critical, has been found in pretix up to 2026.5.4/2026.6.1/2026.7.0. This impacts an unknown function. Performing a manipulation results in session expiration. This vulnerability…
vuldb
CVE-2026-101270 | pretix up to 2026.5.4/2026.6.1/2026.7.0 Help Texts cross site scripting
A vulnerability classified as problematic was found in pretix up to 2026.5.4/2026.6.1/2026.7.0. This affects an unknown function of the component Help Texts. Such manipulation leads to cross site scripting. This vulnera…
vuldb
CVE-2026-102437 | esengine DeepSeek-Reasonix up to 2.20.x Diff Viewer .git/config filter.clean os command injection
A vulnerability classified as problematic has been found in esengine DeepSeek-Reasonix up to 2.20.x. The impacted element is the function filter.clean of the file .git/config of the component Diff Viewer. This manipulat…
vuldb
CVE-2026-73599 | Dell Secure Connect Gateway Policy Manager prior 5.34.00.16 redirect
A vulnerability described as problematic has been identified in Dell Secure Connect Gateway Policy Manager. The affected element is an unknown function. The manipulation results in open redirect. This vulnerability was …
vuldb
CVE-2026-73598 | Dell Secure Connect Gateway Policy Manager prior 5.34.00.16 permission
A vulnerability marked as very critical has been reported in Dell Secure Connect Gateway Policy Manager. Impacted is an unknown function. The manipulation leads to permission issues. This vulnerability is uniquely ident…
vuldb
Researchers got AI "drunk" and its safety guardrails started to fail
Drunk personas made AI guardrails far easier to break.
Cybernews
CVE-2026-7192 | Dbit T-CPE301K Mini WiFi Router /js/common/do_cmd.js stack-based overflow
A vulnerability labeled as critical has been found in Dbit T-CPE301K Mini WiFi Router. This issue affects some unknown processing of the file /js/common/do_cmd.js. Executing a manipulation can lead to stack-based buffer…
vuldb
CVE-2026-101269 | pretix up to 2026.5.4/2026.6.1/2026.7.0 File Upload session fixiation
A vulnerability identified as critical has been detected in pretix up to 2026.5.4/2026.6.1/2026.7.0. This vulnerability affects unknown code of the component File Upload. Performing a manipulation results in session fix…
vuldb
CVE-2026-101268 | pretix up to 2026.5.4/2026.6.1/2026.7.0 cross-site request forgery
A vulnerability categorized as problematic has been discovered in pretix up to 2026.5.4/2026.6.1/2026.7.0. This affects an unknown part. Such manipulation leads to cross-site request forgery. This vulnerability is trade…
vuldb
CVE-2026-101267 | pretix up to 2026.5.4/2026.6.1/2026.7.0 permission
A vulnerability was found in pretix up to 2026.5.4/2026.6.1/2026.7.0. It has been rated as problematic. Affected by this issue is some unknown functionality. This manipulation causes permission issues. This vulnerabilit…
vuldb
CVE-2026-82973 | psyb0t docker-mailbox up to 0.4.12 IMAP Command Construction crlf injection
A vulnerability was found in psyb0t docker-mailbox up to 0.4.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component IMAP Command Construction. The manipulation …
vuldb
CVE-2026-7193 | Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router hard-coded credentials
A vulnerability was found in Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router. It has been classified as very critical. Affected is an unknown function. The manipulation leads to hard-coded credentials. Thi…
vuldb
CVE-2026-76114 | Dell Secure Connect Gateway Policy Manager prior 5.34.00.16 cleartext transmission
A vulnerability was found in Dell Secure Connect Gateway Policy Manager and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to cleartext transmission of sensitive informati…
vuldb
CVE-2026-98164 | Linux Kernel up to 7.1.12 KVM kvm_gfn_is_write_tracked improper synchronization
A vulnerability has been found in Linux Kernel up to 6.1.186/6.6.155/6.12.107/6.18.48/7.1.12 and classified as critical. This affects the function kvm_gfn_is_write_tracked of the component KVM. Performing a manipulation…
vuldb
Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims
According to Dodo Pizza, the potentially compromised information included customers’ names, addresses, email addresses, phone numbers, dates of birth and order details.
The Record · Recorded Future News
Arizona Supreme Court says hackers stole residents’ personal data
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday.
The Record · Recorded Future News
Pentagon Personnel Agency Data Breach Impacts 3 Million People
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense. The post Pentagon Personnel Agency Data Breach Impacts 3 Million People appeared first on…
SecurityWeek
Opposing surveillance just got more complicated: Flock protesters arrested
You can’t speak out against Flock cameras anymore.
Cybernews
CVE-2026-101266 | Pretix up to 2026.5.4/2026.6.1/2026.7.0 Checkout Flow input validation
A vulnerability, which was classified as problematic, was found in Pretix up to 2026.5.4/2026.6.1/2026.7.0. The impacted element is an unknown function of the component Checkout Flow. Such manipulation leads to improper…
vuldb
CVE-2026-73597 | Dell Secure Connect Gateway Policy Manager prior 5.34.00.16 cross-site request forgery
A vulnerability, which was classified as problematic, has been found in Dell Secure Connect Gateway Policy Manager. The affected element is an unknown function. This manipulation causes cross-site request forgery. This …
vuldb
CVE-2026-73596 | Dell Secure Connect Gateway Policy Manager prior 5.34.00.16 initialization
A vulnerability classified as problematic was found in Dell Secure Connect Gateway Policy Manager. Impacted is an unknown function. The manipulation results in improper initialization. This vulnerability is identified a…
vuldb
GoFundMe cancels 81-year-old’s $745K cancer fundraiser after identity raises suspicions
Was it just a misunderstanding?
Cybernews
Dear Copilot users, your depraved prompts for sexual AI content are read by humans
If you think your prompts remain private, you’re wrong.
Cybernews
What can a person find about you in an hour?
We leave a surprising number of breadcrumbs that can be pieced together remarkably quickly.
Cybernews
CVE-2026-82804 | Apache DolphinScheduler Alert Script Plugin command injection
A vulnerability classified as critical has been found in Apache DolphinScheduler. This issue affects some unknown processing of the component Alert Script Plugin. The manipulation leads to command injection. This vulner…
vuldb
CVE-2026-81569 | Apache DolphinScheduler Sub-Workflow Tasks improper authorization
A vulnerability described as critical has been identified in Apache DolphinScheduler. This vulnerability affects unknown code of the component Sub-Workflow Tasks. Executing a manipulation can lead to improper authorizat…
vuldb
CVE-2026-71898 | Apache DolphinScheduler privileges management
A vulnerability marked as problematic has been reported in Apache DolphinScheduler. This affects an unknown part. Performing a manipulation results in improper privilege management. This vulnerability was named CVE-2026…
vuldb
CVE-2026-71897 | Apache DolphinScheduler improper authorization
A vulnerability labeled as critical has been found in Apache DolphinScheduler. Affected by this issue is some unknown functionality. Such manipulation leads to improper authorization. This vulnerability is uniquely iden…
vuldb
CVE-2026-78214 | Apache DolphinScheduler Actuator Endpoint improper authentication
A vulnerability identified as critical has been detected in Apache DolphinScheduler. Affected by this vulnerability is an unknown functionality of the component Actuator Endpoint. This manipulation causes improper authe…
vuldb
CVE-2026-71899 | Apache DolphinScheduler improper authorization
A vulnerability categorized as problematic has been discovered in Apache DolphinScheduler. Affected is an unknown function. The manipulation results in improper authorization. This vulnerability is known as CVE-2026-718…
vuldb
CVE-2026-87748 | Interprobe Information Qorela DC up to 1.6.1 improper authorization
A vulnerability was found in Interprobe Information Qorela DC up to 1.6.1. It has been rated as critical. This impacts an unknown function. The manipulation leads to improper authorization. This vulnerability is traded …
vuldb