OpenAI engineer arrested for allegedly planting spy device in office
2026-10-14T07:23:21Z•ef3b28c8ba013d0022507d1ca301975f7d2c0fff8d12a8f045a0b5aa5791c00a
CVE-2026-105445CVE-2026-39919AI-securityDDoS-or-outageDocker-HubGhostscriptIoT-botnetIvanti-Connect-SecureMFAMicrosoftPDF-uploadPatch-TuesdaySAPSSRFactively-exploitedcontainer-securitycyberattackdata-breachend-of-supportidentity-and-accessprivacyremote-code-executionsupply-chain-securityvulnerabilityzero-day
What happened
BleepingComputer security news roundup covering actively exploited zero-days, critical vulnerabilities, major patch releases, cyber incidents, supply-chain and identity risks, privacy enforcement, and emerging AI-enabled threats. Notable items include a critical Ghostscript PDF remote-code-execution flaw (CVE-2026-39919), a Docker Hub account-impersonation vulnerability (CVE-2026-105445), Microsoft's October 2026 Patch Tuesday with three zero-days, an actively exploited Ivanti Connect Secure zero-day, and a maximum-severity SAP OAuth2 SSRF issue.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- ef3b28c8ba013d0022507d1ca301975f7d2c0fff8d12a8f045a0b5aa5791c00a
- Enrichment time
- 2026-10-14T07:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.