OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email
2026-09-28T01:23:22Z•aa8c12446085542dac42cb510baddeddd2943a95c99b14ed178594f559942128
CVE-2026-35273CVE-2026-5430CVE-2026-88771CVE-2026-88772Adobe CommerceCISA KEVCSRFCitrix NetScalerCloudflare ContainersElementorGitHub ActionsKiteworksOracle PeopleSoftSharePointShinyHuntersWAF bypassWSO2WordPressactive exploitationcross-tenant data exposuredata exposureremote code executionsupply-chain compromisezero-day
What happened
BleepingComputer security coverage highlights active exploitation of critical NetScaler zero-days (CVE-2026-88771 and CVE-2026-88772), WAF bypass exploitation of an Oracle PeopleSoft flaw (CVE-2026-35273), supply-chain compromise involving GitHub Actions, and CISA warnings about exploited SharePoint, WSO2, and Adobe Commerce vulnerabilities. Additional reports cover cross-tenant data exposure in Cloudflare Containers, WordPress account-creation flaws, and potential zero-day attacks against Kiteworks.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- aa8c12446085542dac42cb510baddeddd2943a95c99b14ed178594f559942128
- Enrichment time
- 2026-09-28T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.