The Edge of the Cyber World See the latest
The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. GitLab shows each user this address behind a…
Brace yourself: It turns out AI is being optimized for cheating. OpenAI’s agents hacked into Hugging Face to get the answers to a cybersecurity test. Next, they solved a prestigious math problem (or just stole from two top mathematicians’ answer sheets). Anthropic’s models have also hacked into other companies’ systems four times already. And that’s…
The FBI jobs site, which was temporarily defaced, remains unavailable and the agency said it’s investigating the claims. The post ShinyHunters claims attack on FBI exposes almost all agents appeared first on CyberScoop.
A Minecraft admin panel exposed to the open internet on an unpatched build. An RCON password sitting in plaintext inside a VS Code extension’s settings file. A Rust or ARK box getting knocked offline mid-wipe by a booter service renting for pocket change. None of these are hypothetical in September 2026 — they are the…
Three flagship chatbots and one very late arrival all shipped inside a single three-week window this September, and for the first time in months the fight between them isn’t really about who writes the cleanest code. OpenAI’s GPT-6 Astra, Anthropic’s Claude Fable 5.1, Google’s Gemini 3.8 Flash, and xAI’s Grok 4.7 have each published (or…
The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. “We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI…
The threat group Volexity tracks as UTA0565 showcased a variance in tactics, but it used the same exploit kit as multiple Chinese threat groups. The post Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects appeared first on CyberScoop.
SpyCloud’s study found 1,787 of the approximately 10,000 U.S. organizations had it, including one infected device that saved logins for 167 utility metering tenants. The post Another worry for water systems: infostealer exposure appeared first on CyberScoop.
OpenAI shipped GPT-6 Astra on September 3, 2026, and told the world it refused 91.5% of a curated cyber-jailbreak test set, up from 59% on GPT-5.6 Sol. Less than 24 hours later, a researcher had already bypassed it using a Task-in-Prompt attack. That gap between a vendor’s benchmark and what actually holds up against a…
Sony Interactive Entertainment used the PlayStation Blog on September 21, 2026 to confirm a project that had been rumored inside gaming and K-pop fan circles for weeks: a DualSense wireless controller designed with BLACKPINK member Lisa. The DualSense wireless controller – Lisa Limited Edition goes on sale globally on October 30, 2026, priced at $84.99…
