Skip to content
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Swati KhandelwalOct 14, 2026Vulnerability / Virtualization Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.… 

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan,… 

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

Ravie LakshmananOct 13, 2026Artificial Intelligence / IoT Security Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to… 

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

Swati KhandelwalOct 13, 2026Vulnerability / Enterprise Security An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has… 

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

Swati KhandelwalOct 13, 2026Vulnerability / Cloud Security A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw…