NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
OpenAI Engineer Arrested Over Hidden Recorder in Executive Conference Room
Saudi national Abdulrahman Alfozan was arrested and fired after a covert listening device was discovered in a San Francisco conference room used…
Microsoft Patches Record 1,413 Flaws, CISA Flags Exploited Windows Zero-Day
Microsoft's latest Patch Tuesday fixes an unprecedented 1,413 vulnerabilities, including a Windows flaw already under active attack. CISA has added it and…
Critical Ghostscript Flaw Lets Malicious PDFs Hijack Servers
A heap buffer overflow in Ghostscript, tracked as CVE-2026-39919, can be triggered by a crafted PDF to achieve remote code execution on…
Google Launches Gemini 4 Argon, Touts Vulnerability Discovery and Patching at Scale
Google DeepMind's new frontier model is now globally available, with the company highlighting its use in finding and fixing critical security flaws…
Cyberattack on Refrigeration Controllers Spoils Food at European Supermarkets
Attackers compromised refrigeration control systems, forcing freezers and refrigerators across hundreds of supermarkets to defrost, raising fresh concerns about the security of…
Hackers Hijack Danfoss Controllers, Heat French Supermarket Fridges to 50°C
Attackers remotely seized refrigeration controllers at hundreds of French supermarkets overnight, spiking temperatures and forcing stores to dump spoiled food.
Ransomware Negotiator Charged With Conspiracy to Extort Victims
A well-known cybersecurity executive who built a career helping companies respond to ransomware attacks is now himself facing federal extortion charges.
Norway Hits Microsoft’s Xandr With $9.6M Fine Over Grindr Data Sharing
Datatilsynet says Xandr exposed sensitive sexual orientation data of Grindr users to thousands of advertisers without valid consent, in what it calls…
Let’s Encrypt to Default New Certificates to 64-Day Validity Starting 2027
Let's Encrypt is shortening the default lifespan of TLS certificates to 64 days beginning in February 2027, a stepping stone toward an…
Max-Severity SonicWall SMA1000 Flaw Under Attack Just Days After Patch
A pre-authenticated SSRF vulnerability in SonicWall SMA1000 appliances is already being probed by attackers, three days after SonicWall shipped a fix.
Malicious GitHub Actions Workflow Hits 340+ Repos via Hijacked Maintainer Accounts
Attackers compromised at least two prominent open-source maintainer accounts to push a credential-stealing GitHub Actions workflow across hundreds of repositories, researchers say.
Malware at Karaoke Giant’s Contractor Exposes 8.6 Million Records
A malware infection on a contractor's employee computer has exposed personal data tied to Japan's largest karaoke chain operator, Daiichi Kosho, affecting…