Daily Archives: Nov 3, 2026

Researchers at Xint discovered an OpenAI API vulnerability that exposed hidden chain-of-thought reasoning from GPT-5.6 models by routing prompts through a conversation compaction feature. Xint calls the technique "compaction smuggling." According to the company, the method bypassed protections OpenAI put in place in August 2026. OpenAI...

Attackers are distributing fraudulent FedEx tax invoice emails that deliver a stealthy Windows backdoor called Sirius Backdoor. The malware is concealed inside a seemingly blank PDF and loads its core components directly into memory, leaving minimal artifacts on disk. The phishing messages are written in Korean...

HashiCorp patches Consul‑k8s authorization bypass (CVE‑2026‑110720) HashiCorp has released fixes for an authorization bypass in Consul‑k8s that could let an attacker obtain elevated Consul privileges by impersonating a component from a different Kubernetes namespace. Tracked as CVE‑2026‑110720 and disclosed on October 26, 2026, the issue...