PubSunuCyberSecuritySunuCyberSecurityCybersecurite pour l'AfriqueTests d'intrusion et audits de securite. Scans automatises, pentest et detection continue.Scanner mon sitePubSunuBarometreSunuBarometreCybersecurite AfriqueDonnees reelles, mises a jour en continu, sans extrapolation.Voir les chiffres
PubSunuCyberSecuritySunuCyberSecurityCybersecurite pour l'AfriqueTests d'intrusion et audits de securite. Scans automatises, pentest et detection continue.Scanner mon sitePubSunuBarometreSunuBarometreCybersecurite AfriqueDonnees reelles, mises a jour en continu, sans extrapolation.Voir les chiffres
The Hacker News
Il y a 4 jours

Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room

Par [email protected] (The Hacker News)
Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room
The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, Saudi national Abdulrahman Alfozan made an appearance in San Francisco federal court on Friday, where he entered the plea. His next hearing is scheduled for November 17, 2026. If proven guilty, the
Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room Ravie LakshmananNov 09, 2026Cyber Espionage / Insider Threat The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, Saudi national Abdulrahman Alfozan made an appearance in San Francisco federal court on Friday, where he entered the plea. His next hearing is scheduled for November 17, 2026. If proven guilty, the 35-year-old faces a maximum of five years in prison and a $250,000 fine, followed by three years of supervised release. He has been held without bail since his arrest on October 9, 2026. Late last month, a grand jury indicted Alfozan on a single count of interception of oral communications. Prosecutors allege that the former OpenAI employee placed a "sophisticated recording device" in an executive OpenAI conference room in what has been described as an attempt to unlawfully record sensitive conversations. He was arrested three days before he, along with his wife and son, were scheduled to fly from San Francisco to Riyadh on a one-way ticket. "His wife and son, however, immediately left the United States without him," U.S. prosecutors said. "Rather than wait until the October 12 flight as booked, they initially planned to fly to Jeddah, Saudi Arabia, on October 11 on a one-way ticket booked and paid for by the Saudi government." "That flight was canceled, however, when a member of the Saudi military booked and paid for yet another one-way ticket for the defendant's wife and son, this one business class to Doha, Qatar, on October 10, 2026. They did make that flight, departing San Francisco about 36 hours after the defendant was arrested." In a subsequent court filing, it was alleged that Alfozan was in frequent contact with a member of the Saudi Royal Family via WhatsApp. He was also deemed a flight risk, with court documents claiming that the defendant took great pains to create bespoke, encrypted recording devices to record sensitive meetings involving senior OpenAI personnel and executives. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. cyber espionage, data security, insider threat, Privacy Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets AI-Generated Fake Login Pages Are Making Account Takeovers Easier ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Secure My Spot Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. ROI Calculator: See the Value of IAM Automation Calculate your savings on audits, app onboarding, and discovery. Try it now. The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Your Attack Surface Is Growing Faster Than Your Team Can Respond The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk
Publié le 9 novembre 2026
Source originale : The Hacker News