FortiBleed Can Lock Out Businesses, Plus 3 Stories
FortiBleed is still using stolen credentials to lock organizations out of Fortinet gateways. Plus voter-data privacy, Cleo AI refunds, and an AI-drafted lawsuit.
FortiBleed is still using stolen credentials to lock organizations out of Fortinet gateways. Plus voter-data privacy, Cleo AI refunds, and an AI-drafted lawsuit.
AI’s infrastructure buildout is measured in trillions, but useful work still has to pay the bill. Plus exploited FortiMail and Cisco flaws, a €95 million AI voice scam, 543,699 live GitHub credentials, a landmark AI copyright ruling, and a promising push to speed dementia diagnosis.
The FTC is investigating AI-agent risks as researchers report failed government-site probes. Plus an exploited Cisco flaw, rent algorithms, and smart-glasses privacy.
The OpenAI agent data leak made the week’s accountability problem concrete. Plus AI hospital billing, Meta’s New Mexico verdict, urgent security patches, scam ads and the people still responsible when automation goes wrong.
A New Mexico jury found 43.9 million consumer-protection violations involving Facebook. Plus active Check Point attacks, an FTC look at scam ads, and a Cloudflare container flaw.
OpenAI says agents leaked 53 ChatGPT-user images as it investigates a growing list of unexpected agent behavior. Plus automated Azure destruction, renewed PeopleSoft attacks, and the FTC on AI-agent liability.
Google patched actively exploited Chrome CVE-2026-85046. Plus OpenAI agents on a public wiki, military ad tracking, Nvidia’s Hugging Face deal, and FTC action against payment processor Nuvei.
The FTC and 22 states accuse Amazon of secretly inflating ad-auction prices. Also: Microsoft starts its Entra passkey rollout, ChatGPT enters the EU’s strictest DSA tier, the House passes new limits on secret cloud-data searches, and Shopify changes how inventory reports count stock.