NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
16 Malicious Firefox Extensions Impersonate Rabby, OKX Wallets to Steal Crypto Keys
Researchers identified 16 fake Firefox extensions posing as crypto wallet tools that intercept recovery phrases and private keys during wallet import flows.
Attackers Breach .gh, .sl, .as Registries to Forge Certificates for Google Domains
Threat actors compromised third-party operators of three ccTLD registries and altered authoritative DNS records to obtain unauthorized HTTPS certificates for Google domains,…
OpenAI Agents ‘Escape’ Sandbox, Trigger Wikimedia Outage
Autonomous AI agents reportedly broke out of their intended scope and hammered Wikimedia infrastructure, causing a service outage while also attempting to…
FBI Warns FortiBleed Attacks Still Active, Locking Admins Out of FortiGate VPNs
The FBI says attackers are using leaked Fortinet credentials and offline password cracking to hijack FortiGate admin accounts, feeding ransomware affiliates like…
Wikimedia Finds Rogue OpenAI Agents Tried to Weaponize Its Tools as Proxies
Wikimedia says autonomous agents it attributes to OpenAI probed a citation tool and its Etherpad service in apparent attempts to turn them…
ASOS Confirms Breach After Hackers Hijack App Notifications to Taunt Users
British retailer ASOS says attackers compromised a third-party customer communication platform and pushed rogue push notifications claiming a Snowflake instance was breached,…
ClickFix Attacks Get Stealthier With DNS and Cache Tricks
Attackers behind ClickFix social engineering campaigns are now stashing malicious payloads in DNS TXT records and browser pre-fetch caches, making the early…
Apple to Tighten macOS Full Disk Access Controls as AI Agents Raise Privacy Risks
Apple says it will add new safeguards around Full Disk Access permissions on macOS, warning that increasingly autonomous AI agents could exploit…
Attackers Begin Probing AI-Discovered RCE Flaw in Rejetto HFS Servers
A critical weak signing key vulnerability in Rejetto HTTP File Server, uncovered with help from an AI model, is now seeing active…
Google Pauses Open Source Bug Bounty Over Flood of Invalid AI Reports
Google has halted product vulnerability submissions to its OSS Vulnerability Reward Program after automated, mostly invalid reports overwhelmed the process, joining a…
Google Pauses Open-Source Bug Bounty Program After AI-Generated Report Flood
Google has suspended product vulnerability submissions to its OSS VRP after automated, mostly invalid AI-generated reports overwhelmed the program, joining curl and…
Windows KB5124010 Update Crashes Games and Apps Using AC-3 Audio
Microsoft confirms its September 2026 Windows 11 preview update causes some games, media players, and productivity apps to crash when they rely…