← Wednesday 14 Octobernote 1 of 1
CybersecurityWed 14 Oct 2026 · 1 of 1

OpenAI Engineer Arrested After Hidden Audio Device Found in Conference Room

Unsupported claims · 8/9 supported1 cited · 1 min read

securityweek.com reports that OpenAI discovered a sophisticated recording device hidden inside one of its offices and reported the finding to the FBI. securityweek.com reports that the company used its models to trace the device to a 35‑year‑old Saudi national engineer, Abdulrahman Alfozan, who was subsequently arrested and terminated. securityweek.com reports that the FBI has launched an ongoing investigation into the incident. securityweek.com reports that OpenAI said it has no indication the employee accessed or exfiltrated model weights, source code, or customer data.

Why it matters. securityweek.com reports that OpenAI’s assurance of no data exfiltration aims to maintain customer trust while the FBI investigation proceeds.

Earlier on Cybersecurity

Tue 13 Oct 2026Ivanti Connect Secure VPN Zero‑Day Exploited in the Wild, Patch Released for Two Flawssecurityweek.com reports that Ivanti warned customers that a zero‑day vulnerability in its Connect Secure (ICS) VPN appliances has been exploited in the wild. securityweek.com reports that the vulnerability, tracked as CVE‑2026‑104935 and rated high severity, is an authentication bypass that allows unauthenticated remote code execution with elevated privileges. securityweek.com reports that Volexity discovered the exploitation, attributing it to threat actor UTA0576, which chained three zero‑days to achieve root‑level code execution on fully patched appliances, with evidence dating back to October 3. securityweek.com reports that Ivanti has patched the authentication bypass and RCE bugs in ICS versions 22.8R2.5, 25.1.1.2, 25.1.3.0, and 25.1.3.1, while a third privilege‑escalation flaw remains unpatched and the vendor plans to fix it over the coming weeks.Tue 13 Oct 2026Adobe releases patches for 140 vulnerabilities across ten productssecurityweek.com reports that Adobe published 10 new security advisories covering roughly 140 vulnerabilities across 10 products. securityweek.com reports that the ColdFusion update fixes 32 vulnerabilities, including critical bugs that can be exploited for code execution and privilege escalation. securityweek.com reports that the Content Credentials SDK received fixes for 30 high‑severity vulnerabilities, many of which could bypass security features and some could cause denial‑of‑service. securityweek.com reports that Photoshop, Substance 3D Stager, and Adobe Commerce received patches for 18, 16, and 11 vulnerabilities respectively, most of which allow arbitrary code execution and are high‑severity. securityweek.com reports that Adobe says it is not aware of any in‑the‑wild exploitation and that most advisories have a priority rating of 3, indicating the company does not expect these flaws to be exploited.