The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company’s office has pleaded not guilty.

According to reports from Bloomberg and CNBC, Saudi national Abdulrahman Alfozan made an appearanc…

U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazards, and loss of inventory.

“The actors may exploit v…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been exploited in real-wo…

Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them.

When a user selects “Yes, and don’t ask again,” Anthropic’s AI coding assistant can save the…

Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it.

The update that installs the fix still unpacks its files using the site’s old, …

Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian.

The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and co…

OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment.

The new model is “more capable at find…

A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates.

The fixed build, 11.2609.401.0, was the newest Paint build in all ten…

A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person’s computer, researchers at Forever Security, an endpoint security company, showed in a test.

The attack needs Dispatch, a Claude feature that lets peo…

An update on Athena, and some unsolicited predictions on what’s coming next

On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven’t. I’ve spent the summer looking at what these models find, and the ga…