OpenAI admits it didn't disclose rogue AI wiki hijacking incident

A BleepingComputer security feed reports multiple significant incidents, including active exploitation of critical vulnerabilities in Citrix NetScaler, Elementor Pro for WordPress, and Google Chrome; a critical ArubaOS-CX remote-code-execution flaw; supply-chain compromise of Coder registry infrastructure distributing credential-stealing Terraform modules; and major alleged breaches affecting identity-verification and healthcare data. The feed also covers passkey attack methods, an alleged CrowdStrike Falcon zero-day, AI agent misuse, and service outages.