Users who enroll in the startup’s advanced account security settings can sign into their ChatGPT and Codex accounts using passkeys or physical security keys, and will also receive alerts about new logins to their accounts. …
… The attackers appeared to have targeted high-value usernames, like ones that are a single letter or word, such as “h” or “eggs.” Even Jane Manchun Wong, a security researcher and reverse engineer who uncovers new features within popular apps, says her account got taken over. “The password got chang… …
… OpenAI also says ChatGPT can’t make any changes to your bank accounts or see “full account numbers.” But it can see your balances, transactions, stock portfolio, and liabilities like a mortgage and credit card debt. …
… Last week, Instructure said hackers had exploited Free-For-Teacher accounts to breach its systems and responded by temporarily shutting down those accounts. Instructure has not announced when access to Free-For-Teacher accounts will be restored.
When hackers got access to an account belonging to the maintainer of Axios, they inserted a script that granted remote access to users’ Windows, macOS, and Linux devices. …
… In a small percentage of cases, dates of birth and the last four digits of Social Security numbers or Tax IDs were included. Critically, no payment information — including bank accounts or credit cards — was accessed, and customer security systems were not affected or compromised in any way. …
… The company has not mentioned when those accounts are expected to be restored. Instructure said last week that it “deployed patches to enhance system security” following the breach. …
… Security Reporting To improve security reporting in the future, we are launching a dedicated security response channel and security contact process for vulnerability reports and responsible disclosure: security@yarbo.com The public will also be able to find our security contact information on the Y… …
… Link: Notice of a security incident — March 2026 | https://www.ultrahuman.com/legal/notice-march-2026/ | Ultrahuman
… It also enrolled all potentially impacted accounts “into a mandatory security checkpoint requiring authentication before any account access.”