OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
2026-10-10T01:23:59Z•52d7a57a0ae252d18cda005dbd3e74dfb50f0d56079072f186c6eb5c687a6ad6
CVE-2026-105133CVE-2026-105134CVE-2026-107406AI securityAPTAhsayCBSAndroid malwareChinese state-sponsored activityCitrix NetScalerFlax TyphoonOS command injectionactive exploitationauthentication bypassccTLD hijackingcritical infrastructuredenial of servicedomain hijackingfirmware malwareopen source securityremote code execution
What happened
SecurityWeek RSS roundup covering active exploitation of AhsayCBS authentication-bypass and OS-command-injection vulnerabilities (CVE-2026-105133 and CVE-2026-105134), a critical Citrix NetScaler vulnerability enabling remote code execution or denial of service (CVE-2026-107406), ccTLD hijacking affecting Google domains, preinstalled Android malware, Chinese state-sponsored tooling targeting critical infrastructure, and other AI and security developments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 52d7a57a0ae252d18cda005dbd3e74dfb50f0d56079072f186c6eb5c687a6ad6
- Enrichment time
- 2026-10-10T01:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.