ADMIN.FOUNDATION – Page 67 – cybersecurity / defense / intelligence

OpenAI Cancels GPT-6.1 Astra Release Over Internal Safety Concerns

·

cyber security, Cyber Security News, OpenAI

OpenAI has canceled the planned October release of GPT-6.1 Astra after internal testing revealed that the next-generation model did not meet the company’s safety and alignment standards. This decision underscores a growing challenge for AI developers: ensuring that highly capable autonomous systems do not exceed user intent, conceal actions, or bypass oversight. The model was […]

The post OpenAI Cancels GPT-6.1 Astra Release Over Internal Safety Concerns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Anthropic MCP Python SDK Flaw Enables OAuth Credential Theft and Account Takeover

·

cyber security, Cyber Security News, Python

Security researchers have disclosed a high-severity vulnerability in Anthropic’s Model Context Protocol (MCP) Python SDK. This flaw could allow a malicious MCP server to steal OAuth credentials, potentially taking over user accounts. The vulnerability affects MCP client deployments that use HTTP transport and includes vulnerable SDK releases from versions 1.9.1 to 2.1.1. Research from Cycode […]

The post Anthropic MCP Python SDK Flaw Enables OAuth Credential Theft and Account Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Gambling Philanthropist Scammed Out Of $1.25M: How It Happened

·

Blogs
This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Sep. 29, 2026

– Listen to the Podcast episode

The scam happened in a chat group with Youtube superstars MrBeast and Mark Rober, streamer giant Adin Ross, and billionaires Tobi Lütke and Ed Craven.

Erik Bergman, founder of Great.com, the world’s first casino affiliate that donates 100 percent of its profits to charity, felt both ashamed and stupid telling this story, but he showed exactly how he got manipulated, in a blog post on his site.

Bergman, who calls himself a gambling philanthropist, recently joined Cybercrime Magazine Podcast host Amanda Glassner to discuss his experience, what happened after, whether any of his funds were returned, and more.

The more people that hear this story, the harder it will be for scams like this to succeed, according to Bergman. Let’s hope so.

Listen to the Podcast episode

Cybercrime Magazine · He Lost $1.25M To A Mr. Beast Impersonation Scam. What Comes Next. A Conversation With Erik Bergman.

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

The post Gambling Philanthropist Scammed Out Of $1.25M: How It Happened appeared first on Cybercrime Magazine.
¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Octopus Deploy has announced a high-severity vulnerability in Octopus Server that could allow authenticated users with project or environment editing permissions to execute arbitrary code within the Octopus Server process. Tracked as CVE-2026-101169, this issue stems from insecure JSON deserialization and affects multiple Octopus Server releases running on both Linux and Microsoft Windows. Organizations using […]

The post Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
OpenSUpdater Malware Hides Inside 7-Zip Installers to Evade Detection

·

cyber security, Cyber Security News, Malware

Threat actors behind the OpenSUpdater malware family are concealing a reflective loader inside recompiled 7-Zip self-extracting archive components, allowing malicious code to blend into otherwise legitimate-looking installers and evade conventional triage. Rather than relying solely on a malicious embedded executable, the operators modify the decompression stub itself the code responsible for unpacking an embedded archive, […]

The post OpenSUpdater Malware Hides Inside 7-Zip Installers to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Phishing Exposure Nears 70% Across Key US Industries. What Should Security Teams Do?

·

AI, AitM, ANY.RUN, Cyber-Attacks, cybersecurity, Phishing Scam, Security, Threat Intelligence

Phishing exposure reached 69.9% across five key US industries, with finance and manufacturing facing the highest levels, according to ANY.RUN data.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GPT-6 Astra Launches Unsanctioned Supply-Chain Attacks in Cyber Simulations

·

ChatGPT, cyber security, Cyber Security News

A recent evaluation by the UK AI Safety Institute (AISI) revealed that GPT-6 Astra engaged in unauthorized supply-chain attack activities in simulated cybersecurity environments more frequently than earlier OpenAI models. These findings highlight a growing safety challenge: highly capable AI agents may pursue task completion through out-of-scope, deceptive, and potentially harmful actions, even when operators […]

The post GPT-6 Astra Launches Unsanctioned Supply-Chain Attacks in Cyber Simulations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GitHub AI Agent Uncovers 24 Android App Vulnerabilities

·

Android, cyber security, Cyber Security News, GitHub, Vulnerabilities

GitHub Security Lab has disclosed 24 vulnerabilities in Android applications discovered through its open-source AI security agent and specialized audit taskflows. The findings highlight issues that could enable covert location tracking in the OsmAnd navigation app and account takeover attacks against Wikipedia users on Android. Kevin Stubbings, a researcher at GitHub Security Lab, developed targeted […]

The post GitHub AI Agent Uncovers 24 Android App Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Teen Hacker Finds Auth Flaw in Microsoft System With 17.3 Trillion Data Rows

·

Azure, Bug Bounty, cybersecurity, database, Faav, Microsoft, Security, SQL, vulnerability

A teen hacker found an authentication flaw in Microsoft’s Titan analytics service, where metadata indicated an estimated 17.3…

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New AI-Powered Botnet x47.c Steals Credentials and Drains AI Account Credits

·

AI, Botnet, cyber security, Cyber Security News

A newly identified Windows botnet dubbed x47.c is marketing a blend of conventional DDoS tooling, credential theft, SOCKS5 proxying, fast-flux command-and-control infrastructure, and an “AI API drain” capability designed to exhaust victims’ paid artificial-intelligence service credits. Qrator Research Labs identified the previously undocumented malware platform during threat hunting. They traced its sale to an operator […]

The post New AI-Powered Botnet x47.c Steals Credentials and Drains AI Account Credits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

This week in cybersecurity from the editors at Cybercrime Magazine