Scott Ikeda, Senior Correspondent at CPO Magazine

Laptop with glowing circuit brain showing AI agent vulnerability

Security Research Finds OpenClaw AI Agent “Trivially Vulnerable” to Hijacking

March 4, 2026

The Oasis researchers document a vulnerability chain that can be initiated from any website the AI agent (or its user) visits, without users needing to interact in any way or being at all aware that they are being compromised. The attack targets the OpenClaw "gateway" that essentially acts as the AI agent's nerve center.

Data Protection News

Reddit on the Hook for £14.47M in Children’s Privacy Fines Due To Inadequate Age Checks

March 3, 2026

Reddit has been assessed £14.47 million in fines by the UK Information Commissioner's Office (ICO) due to failures to adequately age-gate children under 13, which in turn led to impermissible collection and use of their personal data as well as potential exposure to mature content. The penalty is one of the largest it has issued thus far, and the largest for a children's privacy offense.

Data Privacy News

Discord Delays Age Verification After User Backlash

March 3, 2026

Discord's controversial new age verification requirements will be delayed until at least the latter half of 2026, after the sudden announcement of mandatory collection of user ID scans and facial biometrics drew a major backlash from platform users.

Chinese flag overlaid on chip showing Chinese hackers cyber espionage

Cyber Security News

Google Disrupted Chinese GRIDTIDE Cyber Espionage Operation Active Since 2017

March 2, 2026

A long-term Chinese cyber espionage operation that has been active since at least 2017 and has a count of at least 53 victims has been substantially disrupted, according to the Google Threat Intelligence Group (GTIG) and Mandiant.

Microsoft building showing AI tools and confidential emails

Cyber Security News

Bug in Copilot AI Tool Creates Summaries of Confidential Emails

February 26, 2026

Microsoft has downplayed the issue in official communications, stating that the summaries of the confidential emails were not exposed to anyone that did not already have access to the messages in question. There is always some concern about exactly where information goes once AI tools have ingested it, however.

Two rows of keys with numbers in a metal box showing password managers

Cyber Security News

New Research Raises Serious Concerns About Security of Cloud-Based Password Managers

February 24, 2026

A new study from ETH Zurich is causing some serious re-evaluation of the use of cloud-based password managers, as the researchers found an assortment of vulnerabilities in three of the most popular choices. This range of vulnerabilities make a similar range of known attacks possible, up to a dozen with the most readily compromised option.

Data center showing zero-day vulnerability for VMs exploited by Chinese hackers

Cyber Security News

Dell Zero-Day Vulnerability Found in RecoverPoint for VMs Has Been Present (And Exploited by Chinese Hackers) Since 2024

February 20, 2026

A new report from Google Threat Intelligence Group (GTIG) and Mandiant warns of a zero-day vulnerability present in Dell RecoverPoint for Virtual Machines since 2024, and that has been actively exploited by Chinese hackers for at least that long.

Hammer on dollar notes showing legal action over data breach

Cyber Security News

Legal Action Over Coupang Data Breach Escalates as US Investors Join With Claims

February 19, 2026

Major US investors including Greenoaks, Altimeter, Abrams Capital, Durable Capital Partners, and Foxhaven Asset Management have joined a case invoking the U.S.-Korea Free Trade Agreement (FTA) to seek international ISDS arbitration with the South Korean Ministry of Justice over the data breach.

iPhone being updated showing zero-day vulnerability

Cyber Security News

Apple Patches Ancient Zero-Day Vulnerability Present in iOS for Nearly Two Decades

February 16, 2026

A zero-day vulnerability that has been with iOS since the first iPhone launched has been identified and patched out by Apple, but with the warning that there is evidence it has been exploited in attack chains for quite some time.

Red skull and bone showing Chinese hackers compromised software updates

Cyber Security News

Chinese Hackers Compromised Notepad++ Software Updates For Nearly Half a Year, But Only “Select” Targets Breached

February 9, 2026

Security researchers believe that Chinese hackers are to blame for the attack in part because of the "selective" nature of the targets that were chosen for follow-on compromise via malicious software updates. Notepad++ is a free and broadly popular piece of software that is thought to have tens of millions of users worldwide.

Security Research Finds OpenClaw AI Agent “Trivially Vulnerable” to Hijacking

Reddit on the Hook for £14.47M in Children’s Privacy Fines Due To Inadequate Age Checks

Discord Delays Age Verification After User Backlash

Google Disrupted Chinese GRIDTIDE Cyber Espionage Operation Active Since 2017

Bug in Copilot AI Tool Creates Summaries of Confidential Emails

New Research Raises Serious Concerns About Security of Cloud-Based Password Managers

Dell Zero-Day Vulnerability Found in RecoverPoint for VMs Has Been Present (And Exploited by Chinese Hackers) Since 2024

Legal Action Over Coupang Data Breach Escalates as US Investors Join With Claims

Apple Patches Ancient Zero-Day Vulnerability Present in iOS for Nearly Two Decades

Chinese Hackers Compromised Notepad++ Software Updates For Nearly Half a Year, But Only “Select” Targets Breached

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII

Hackers Abuse Custom GPT Instances on chatgpt.com to Distribute ClickFix Malware

AI Coding Agents Habitually Leak Thousands of Private Developer Screenshots to Public Repositories