OpenAI is preparing ‘o,’ an always-on ChatGPT assistant that could handle email(OpenAI、メール対応も視野に入れた常時稼働型ChatGPTアシスタント「o」を準備か) #BleepingComputer (Sep 26)

OpenAI is preparing ‘o,’ an always-on ChatGPT assistant that could handle email(OpenAI、メール対応も視野に入れた常時稼働型ChatGPTアシスタント「o」を準備か) #BleepingComputer (Sep 26)
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks(CISA、SharePoint・WSO2・Adobe Commerceの脆弱性が実攻撃で悪用と警告) #BleepingComputer (Sep 25)
Citrix confirms two NetScaler RCE zero-days exploited in attacks(Citrix NetScalerのRCEゼロデイ2件、実攻撃での悪用を確認) #BleepingComputer (Sep 27)
Citrix confirms two NetScaler RCE zero-days exploited in attacks
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/
#Cyzo #CyberSecurity #BleepingComputer
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/shinyhunters-hacked-clop-leak-site-using-grav-cms-path-traversal-flaw/
#Cyzo #CyberSecurity #BleepingComputer
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/github-actions-re-enabled-with-mini-shai-hulud-payload-still-active/
#Cyzo #CyberSecurity #BleepingComputer
Microsoft pauses KB5002907 update after Office license deactivations
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/microsoft/microsoft-365-kb5002907-update-paused-after-office-license-deactivations/
#Cyzo #CyberSecurity #BleepingComputer
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/
#Cyzo #CyberSecurity #BleepingComputer
OpenAI's AI agents accidentally uploaded user-provided images to thir…
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/artificial-intelligence/openais-ai-agents-accidentally-uploaded-user-provided-images-to-third-party-sites/
#Cyzo #CyberSecurity #BleepingComputer
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/kiteworks-urges-6-hour-server-shutdown-over-potential-zero-day-attacks/
#Cyzo #CyberSecurity #BleepingComputer
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw(Check Point Security GatewayのVPN脆弱性、認証前RCE攻撃で実悪用を確認) #BleepingComputer (Sep 23)
Microsoft: September Windows updates break Always On VPN connections(Microsoft、9月のWindows更新でAlways On VPN接続に障害) #BleepingComputer (Sep 23)
Hackers start exploiting critical WordPress flaw for code execution(攻撃者がWordPressの重大な脆弱性を悪用、コード実行攻撃を開始) #BleepingComputer (Sep 23)
Placeholder domain used in dev docs now serves ClickFix attacks(開発者向け文書のプレースホルダードメインがClickFix攻撃に悪用) #BleepingComputer (Sep 23)
Live webinar on Sept. 23, 2026 will examine real Google Workspace breaches, focusing on social engineering, malicious OAuth apps, and the controls that matter most for fast-growing teams. #GoogleWorkspace #OAuthApps #BleepingComputer
Cisco warns of max severity ISE zero-day exploited in attacks(Cisco ISEに最大深刻度のゼロデイ脆弱性、実際の攻撃で悪用) #BleepingComputer (Sep 17)
Windows Server 2022 reaches end of mainstream support next month(Windows Server 2022、来月メインストリームサポート終了) #BleepingComputer (Sep 16)
Critical ScreenConnect flaw now actively exploited in attacks(ScreenConnectの重大な脆弱性、実際の攻撃で悪用を確認) #BleepingComputer (Sep 16)
Webinar explores real Google Workspace breaches, showing how social engineering and malicious OAuth apps gained access, and how the first response decisions can shape the impact. #GoogleWorkspace #OAuth #BleepingComputer