60
60
60
60
60
60
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Check Point discovers cross-account data leakage in ChatGPT: isolated code-execution containers communicate via shared JFrog Artifactory, enabling covert Gmail exfiltration.
Check Point Research found a covert bidirectional channel between ChatGPT code-execution containers belonging to different accounts, which were supposed to be isolated from each other and the public internet. Both could reach the same internal JFrog Artifactory instance used for package delivery, whose exposed Item Management API allowed a 'shared clipboard' between containers. In a proof of concept, a hidden instruction in a shared conversation made ChatGPT retrieve email data from the victim's connected Gmail account and send it to the attacker's account while the victim received a normal answer. The same channel could exfiltrate conversation history and session files; OpenAI recently described a similar isolation weakness in its postmortem of the Hugging Face incident.
68
60
60
60
60
60
60
60
60
60
60
60
60
Vulnerable Arm GPU drivers under active exploitation. Patches may not be available
60
60
60
60
60
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
OpenAI's GPT-6 Astra launch hit access problems; Sam Altman apologized as availability gradually expanded from Daybreak partners to Pro, Enterprise, and API users.
GPT-6 Astra, launched September 4 as OpenAI's most advanced model, was initially accessible only to organizations enrolled in its Daybreak cybersecurity program, leaving Plus, Pro, Business, Enterprise, and API users waiting. Altman called the rollout 'messy'; by September 5 access had extended to Pro, Enterprise, and Business Premium users in ChatGPT's Work and Codex products plus the API. Analysts from Gartner and Greyhound Research said the staged rollout highlights the gap between announcement and production availability, urging enterprises to verify actual access levels and strengthen governance, security, and cost controls before adopting Astra's autonomous workflows.
75
FBI Probes Service Selling 153M+ Drivers Licenses
Dark web service Nexus sells scans of 153M+ US and Canadian drivers licenses, apparently siphoned from a breached identity verification company; FBI opened an inquiry.
A new dark web identity theft service called Nexus, advertised on the Exploit forum, offers scans of more than 153 million drivers licenses from the US and Canada, plus over 10 million ID cards and millions of travel and medical documents. The data appears to come from an ongoing breach at a major Louisiana-based identity verification company, with records growing by roughly 400,000 in 24 hours. Records include high-ranking US officials such as Defense Secretary Pete Hegseth, and timestamps suggest data was captured during car rentals and travel. The FBI's New Orleans field office has launched an official inquiry into the source of the images.
88
60
60
May 2026 CVE Landscape
60
2026-005: High Vulnerability in the Linux Kernel ("Copy Fail")
Linux kernel flaw CVE-2026-31431 ('Copy Fail', CVSS 7.8) allows unprivileged users to gain root via AF_ALG; a public PoC is out and most distros remain unpatched.
Disclosed on 29 April 2026, CVE-2026-31431 is a local privilege escalation in the Linux kernel's algif_aead module (AF_ALG crypto API), CVSS 7.8, stemming from a 2017 in-place optimisation. By chaining an AF_ALG socket operation with splice(), an unprivileged user can write 4 bytes into an arbitrary page-cache page, e.g. corrupting a setuid binary like /usr/bin/su to obtain a root shell. It affects virtually all kernels built since 2017, including Ubuntu 20.04-24.04, Amazon Linux 2023, RHEL 10.1, and SUSE 16; the mainline fix landed 1 April 2026 but no vendor packages were available as of 30 April. CERT-EU recommends the interim mitigation (disable algif_aead) and blocking AF_ALG via seccomp, prioritising Kubernetes nodes and CI/CD runners.
68
60
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience
60
Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw
60
60
Network Attack Trends: February
60
Network Security Trends: November 2021 to January 2022
60
Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross
60
ODNI guidelines for handling commercially available data to be released ‘any day,’ DOD official says
60
60
60