Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
2026-10-20T07:23:59Z•60385e26fed10f5ff4a1a166ee239991ab37be801a5d13d45db4289a81266b63
CVE-2025-61624CVE-2026-102764CVE-2026-99999active-exploitationadversary-in-the-middleai-agent-securitybackdoorclickfixcloud-securitycredential-theftcryptominingcyber-espionagedata-exposurelinux-kernelmalwaremicrosoft-365npmphishingprivilege-escalationrcerouter-securitysupply-chain-attackvirtualizationwordpresszero-day
What happened
A roundup of cybersecurity incidents and research covering active exploitation, supply-chain compromises, credential theft, phishing, malware delivery, cloud and virtualization escapes, AI-agent data exposure, and targeted espionage. Notable items include exploitation of BeyondTrust and FortiOS flaws, the critical PwnEscape Linux kernel vulnerability, ConnectWise-to-Microsoft 365 tenant compromises, malicious npm packages, a hijacked WordPress plugin update, and ClickFix malware distribution. The collection includes confirmed in-the-wild attacks and high-impact vulnerabilities affecting edge,-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 60385e26fed10f5ff4a1a166ee239991ab37be801a5d13d45db4289a81266b63
- Enrichment time
- 2026-10-20T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.