Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Progress disclosed critical command injection flaw CVE-2026-91140 in DataDirect Autonomous REST Connector AI Model Generator agents, allowing malicious OpenAPI or Swagger documents to execute arbitrary OS commands. The security bulletin, published on October 6, 2026, covers Early Access agent definitions …

OpenAI Sandbox Escape Flaw Allowed Free Access to Paid AI Models Without an API Key

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Oliver Fish says he found an OpenAI sandbox escape that let him request paid AI models without an API key or an account. A screenshot shared online shows OpenAI awarding $300 for a report titled “Unauthenticated Sandbox Escape …

Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity Awareness Month 2026 arrives as online attacks become easier to launch, harder to spot, and more focused on people. Observed every October, the campaign helps individuals and businesses build safer digital habits. This year there are two themes. The …

Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are impersonating ChatGPT, Claude and Gemini with fake advertising products that steal passwords and multifactor authentication codes. Instead of delivering a conventional malware download, the campaign uses convincing websites and live human operators to guide victims through fraudulent sign-in …

Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress released version 7.1.3 on October 6, 2026, addressing vulnerabilities involving cross-site scripting, SQL injection, information disclosure, and other security weaknesses. The project recommends immediate updates, with fixes also available for older affected branches. Only the latest WordPress version remains …

Multiple OpenSSH Vulnerabilities Could Enable Plaintext Recovery, File Write and Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenSSH 10.6, released on October 6, 2026, fixes security flaws that could expose secrets, write files outside intended folders, or enable shell injection under specific conditions. The update covers both client and server tools, making it relevant to administrators and …

32 Unique 0-Days Exploited in Samsung S26, Pixel 10, OpenAI Codex and Other Devices in Pwn2Own 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers reportedly exploited 32 unique zero-day vulnerabilities and earned $388,500 on the opening day of Pwn2Own Ireland 2026. Samsung Galaxy S26, OpenAI Codex, smart home devices and AI services fell to working exploits, but the Google Pixel 10 attempt …

Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a major Chrome security update on October 6, 2026, fixing 247 vulnerabilities, including four critical memory-safety flaws, across Windows, Mac, and Linux. The patched versions are 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 for Linux. Although the critical …

Top 10 Best IAST Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IAST’s core idea watch the running app from inside and confirm which findings are real won so thoroughly that platforms absorbed it, and the standalone market shrank. Integrating Interactive Application Security Testing (IAST) runtime monitoring has transformed how security teams …

Veeam Backup and Replication Vulnerability Allow Attackers to Execute Malicious Script

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Veeam has released Veeam Backup & Replication 12.3.2 P4, build 12.3.2.4934, to address four security vulnerabilities, including a flaw that lets attackers execute malicious scripts in an authenticated user’s browser. Released on October 6, 2026, the update also fixes a …