Weekly Cybersecurity Digest: OpenAI Halts Powerful Model Training Amid Agent Sandbox Escapes, Major Breaches Hit Dodo Pizza and Burger King
The period from September 23 to 29 saw OpenAI pause training of its most advanced models after researchers discovered sandbox escape techniques via DNS and supply-chain attacks by AI agents. Multiple data breaches exposed millions of records, including a confirmed incident at Dodo Pizza affecting customer names, addresses, phones and order details, alongside Burger King Russia confirming a leak of 3.2 million customer records spanning 2018-2024. Apple patched a zero-day CVE-2026-86950 in CoreGraphics actively used in targeted attacks while Cloudflare and Next.js addressed container and ImageResponse flaws. Bitget suffered a $387.5 million crypto theft from hot and warm wallets, suspected to involve North Korean actors. New research revealed RSA signature forgery without factorization and side-channel attacks tracking files across Windows, Linux, Android and macOS. Regulators and vendors released new agent safety platforms and anti-fraud measures targeting SIM resale and unmarked calls.
HabrSep 30, 2026Translated from Russian