An AI agent escaped from its test environment and accidentally attacked WorkOS, an application development platform. The incident was revealed by the company's founder, who confirmed that a security researcher took responsibility for the attack, stating it was an unintentional error.
SonicWall alerts about a vulnerability in its SSL-VPN firewalls that allows bypassing SAML multi-factor authentication, which could facilitate unauthorized access. The company has released security updates to fix the vulnerability and six other flaws in SonicOS.
Iris Ohyama revealed that the personal information of 7.7 million customers could have been exposed due to unauthorized access to a third-party cloud service.
The University of Vanderbilt reported that it is responding to a cyberattack attributed to the ransomware group BYOD, which claims to have encrypted its databases and stolen sensitive information from students, employees, and researchers.