Cybersecurity News
Filters
Filtered by category: Cybersecurity News × Clear
Now ChatGPT Chrome Extension Can See and Analyze the Content in Open Tabs
Matched: health, OpenAI
OpenAI's ChatGPT Chrome extension now reads content across open tabs and performs browser tasks like comparing pages, filling forms, sending messages, and organizing tabs. Available on all plans, it works in Edge, Brave, and Opera too. Privacy disclosures list sensitive data categories including financial and health information. Security concerns include prompt injection risks and the importance of installing only from official OpenAI sources.
Google Cloud Outage Knocks UK Banks, Websites and Court Systems Offline
Matched: health
A Google Cloud outage struck its London data centre on October 20 after a power event in the europe-west2-b zone, disrupting UK banks, websites and court systems. Revolut, Halifax, HSBC and Lloyds reported service problems. Court video hearings were suspended across parts of England and Wales, and some NHS appointment bookings were briefly affected. Google said most services recovered by afternoon, with an incident report promised.
FBI Suspects Cybersecurity Executive Helped ShinyHunters Run Extortion Website
Matched: cryptocurrency, medical
The FBI suspects a US cybersecurity consulting executive helped hacking group ShinyHunters operate Shinywire, a website pressuring breached companies to pay ransoms. The site listed nearly 100 victim organizations and threatened data publication within seven days of non-response. Separately, Canadian executive Edward Dubrovsky, 54, was arrested October 8 in Pennsylvania on related extortion allegations. Investigators reportedly gained leads after Dutch police arrested a ShinyHunters suspect and accessed his Signal messages, which revealed contact with both executives. No charges have been filed against the unnamed firm executive. ShinyHunters is attributed with over $70 million in 2026 ransom payments.
Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
Matched: Claude, OpenAI
A campaign called GhostAction has compromised at least 790 GitHub repositories by injecting malicious Actions workflows into trusted developer accounts. The workflows scan repository files and Git history for credentials including AWS keys and tokens for OpenAI, Anthropic, GitHub, and others, then exfiltrate findings to attacker-controlled infrastructure. Removing the workflow is insufficient; affected teams must revoke tokens and rotate all secrets the workflow could have accessed.