Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration (The Hacker News)
OpenAI has begun rolling out a new Lockdown Mode to ChatGPT for eligible personal accounts to reduce the risk of data exfiltration arising from prompt injection attacks. The feature is primarily designed for people and organizations that ha - Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI (The Hacker News)
A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices, including always-on smart TVs, into exit nodes that relay web-scraping traffic for a data business Bright Data mar - AI Worm (Schneier on Security)
Researchers have prototyped an AI-powered internet worm . The coolest thing about the prototype is that it carries its own LLM with it, and runs it on computers that have been broken into. This is the closest to John Brunner’s original 1975 - CISA Adds One Known Exploited Vulnerability to Catalog (CISA Advisories)
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability This type of vulnerabilit - NAVTOR NavBox (CISA Advisories)
View CSAF Summary Successful exploitation of this vulnerability could allow a local attacker to gain unauthorized access to SOAP methods, resulting in a disruption of operations. The following versions of NAVTOR NavBox are affected: NavBox
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →