OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it

Security news digest covering active exploitation of enterprise software vulnerabilities, macOS infostealer and ClickFix campaigns, extortion and ransomware operations, cloud data theft, phishing-enabled remote access, database post-exploitation, speculative-execution research, and AI-agent security incidents. The most urgent items involve actively exploited Langflow, N-central, and Apache Tomcat flaws; a SharePoint breach affecting approximately 200 Swiss government accounts; and malware campaigns targeting cryptocurrency assets, credentials, and password stores.