Security

The breaches and patches that touch ERP and finance systems. One a day at most.

Security desk · 19 stories since 8 September 2026 · 10 in the last seven days · latest 19 Sept, 19:06 · 6 outlets cited · Standards

Anthropic's Claude helped researchers reach OpenAI staff accounts in three days.

Three security researchers at Hacktron used Anthropic's Claude models to develop exploit code against OpenAI and reached several OpenAI employee ChatGPT accounts, The Register reported.

Security · Sat 19 Sept, 19:06 · via The Register

Microsoft confirmed an Excel security update can silently break paste. No fix date yet.

Security · Thu 17 Sept, 16:06 · via BleepingComputer

CISA says attackers are exploiting a zero-click Google Pixel flaw. Agencies got three days.

Security · Thu 17 Sept, 15:06 · via The Register · Photo: ShoAndTech, CC BY 3.0

Oracle shipped 673 patches. Six maximum-severity flaws needed no login.

Security · Thu 17 Sept, 10:06 · via CIO · Photo: DronePhotographer / Wikimedia Commons, CC0

Broadcom fixed one critical VMware flaw seven weeks before ransomware arrived.

Security · Wed 16 Sept, 15:06 · via BleepingComputer

Cisco confirmed active exploitation of a root email flaw. Federal agencies got three days.

Security · Wed 16 Sept, 12:06 · via BleepingComputer

The EU gave vendors 24 hours to report exploited flaws. Fines reach €15 million.

Security · Sat 12 Sept, 12:06 · via The Register · Photo: EmDee/Wikimedia, CC BY-SA 4.0

McKesson's breach reached 6.4 million people. The company last spoke on 29 August.

Security · Fri 11 Sept, 14:06 · via The Register

Microsoft patched 974 flaws this month. Four are already under attack.

Security · Fri 11 Sept, 11:06 · via The Register · Photo: Coolcaesar/Wikimedia, CC BY-SA 4.0

An Oracle flaw let attackers take Social Security numbers. Bimbo Bakeries confirmed it.

Security · Thu 10 Sept, 10:06 · via cyberinsider.com · Photo: BrokenSphere/Wikimedia, CC BY-SA 3.0

Attackers could get into SAP systems without a password. SAP fixed it yesterday.

Security · Wed 9 Sept, 17:06 · via support.sap.com · Photo: Saturnalia0/Wikimedia, CC0

Anthropic's Claude helped researchers reach OpenAI staff accounts in three days.

Microsoft confirmed an Excel security update can silently break paste. No fix date yet.

CISA says attackers are exploiting a zero-click Google Pixel flaw. Agencies got three days.

Oracle shipped 673 patches. Six maximum-severity flaws needed no login.

Broadcom fixed one critical VMware flaw seven weeks before ransomware arrived.

Cisco confirmed active exploitation of a root email flaw. Federal agencies got three days.

Tencent patched its keyboard app in April. Attackers are still getting in.

JFrog patched three server vulnerabilities exploited to create admin accounts.

Microsoft knocked out Remote Desktop with two September security updates.

Revolut sent customer passports to an impostor. The email address was genuine.

Google patched two Chrome flaws. Four spy groups already used them.

PaperCut patched in one day. Attackers had already breached 395 organisations.

Microsoft tracked attackers who phoned staff to breach 365 accounts.

GitLab patched a perfect-10 flaw Thursday. Attackers were exploiting it Friday.

The EU gave vendors 24 hours to report exploited flaws. Fines reach €15 million.

McKesson's breach reached 6.4 million people. The company last spoke on 29 August.

Microsoft patched 974 flaws this month. Four are already under attack.

An Oracle flaw let attackers take Social Security numbers. Bimbo Bakeries confirmed it.

Attackers could get into SAP systems without a password. SAP fixed it yesterday.