TLDRocket
Sign in

Cybersecurity

192 summarised stories about Cybersecurity, each linking back to the original source. Browse all topics →

+ Follow this topic

Tuesday, 13 October 2026

OpenAI employee arrested for allegedly planting a bug in a conference room

The Verge 1 day ago 40 ● 9 sources

OpenAI arrested and reported an internal incident in which an employee was taken into custody after a concealed recording device was found in an office conference room. The company said the device was identified in an executive conference room plugged into a TV’s USB port. As a result, the employee faces charges related to intercepting oral communications, and OpenAI states it used its AI models to determine the device’s source.

How I Found a $90,000 Remote Code Execution Vulnerability in Google

Simon Koeck 1 day ago 31

The author reported that Google developer sites exposed an OAuth client secret that was reused as a Flask cookie-signing key, letting forged signed session cookies reach a pickle-unpickle step and achieve remote code execution. The fixed reward was $90,000 after an Aug 6, 2026 report was accepted on Aug 7, 2026. Google rotated the exposed secrets, replaced cookie signing with per-deployment SECRET_KEYs stored server-side, moved OAuth flow data off the cookie, and removed pickle so forged cookies would no longer trigger code execution.

The daily briefing

Every AI story that matters, in your inbox by 8am.

TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the day in two minutes. Follow companies and topics for alerts, or get the briefing in Slack. Free, no spam, unsubscribe anytime.