LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
Swati KhandelwalOct 06, 2026Vulnerability / Open Source A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code
Midnight Blizzard Abuses Hotel Wi-Fi Captive Portals to Deliver Malware and Steal Credentials
Travelers connecting to hotel Wi-Fi may now face more than an unreliable internet signal. A campaign linked to Midnight Blizzard
Nikkei discloses breaches of employees Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Swati KhandelwalOct 06, 2026Vulnerability / Open Source Google has stopped accepting product vulnerability reports through its bug bounty program for
Hacker Group Claims to Have Stolen Trump Mobile Customers Personal Data
Trump Mobile customers’ personal data has appeared on a dark web leak site after a ransomware group called BYOD claimed
OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU
OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union. The watermark
IQVIA fined $7.8 million for failing to properly anonymize health data
Italy’s Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes
Ravie LakshmananOct 05, 2026Vulnerability / Email Security Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft
Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers
A malicious HEIC image can become a route to remote code execution on a WordPress server. Researchers have demonstrated an
Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic,
Google Pauses Open-Source Bug Bounty Program After Flood of Invalid AI-Generated Reports
Google has temporarily stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program(OSS VRP) following a
Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
Ravie LakshmananOct 05, 2026Vulnerability / Artificial Intelligence Apple has announced that it’s taking steps to tighten controls around a macOS