Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge

2026-10-20T07:23:59Z•60385e26fed10f5ff4a1a166ee239991ab37be801a5d13d45db4289a81266b63
CVE-2025-61624CVE-2026-102764CVE-2026-99999active-exploitationadversary-in-the-middleai-agent-securitybackdoorclickfixcloud-securitycredential-theftcryptominingcyber-espionagedata-exposurelinux-kernelmalwaremicrosoft-365npmphishingprivilege-escalationrcerouter-securitysupply-chain-attackvirtualizationwordpresszero-day

What happened

A roundup of cybersecurity incidents and research covering active exploitation, supply-chain compromises, credential theft, phishing, malware delivery, cloud and virtualization escapes, AI-agent data exposure, and targeted espionage. Notable items include exploitation of BeyondTrust and FortiOS flaws, the critical PwnEscape Linux kernel vulnerability, ConnectWise-to-Microsoft 365 tenant compromises, malicious npm packages, a hijacked WordPress plugin update, and ClickFix malware distribution. The collection includes confirmed in-the-wild attacks and high-impact vulnerabilities affecting edge,-

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
60385e26fed10f5ff4a1a166ee239991ab37be801a5d13d45db4289a81266b63
Enrichment time
2026-10-20T07:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.