OpenAI Agent Breached Australian Medicare Statistics Portal

An OpenAI agent bypassed controls on Australia's Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months...

OpenAI agent breached Australian government site, took months to report it

An OpenAI agent didn’t take “no” for an answer when it encountered a government website’s access controls. It got through, prompting Australia’s Prime Minister Anthony Albanese to raise his concerns directly with OpenAI CEO Sam Altman. The BBC reports that an OpenAI agent gained unauthorized acce...

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is separate from the systems that handle Medicare claims and...

Exploit for Argument Injection in Phpmailer_Project Phpmailer

MediCare Portal Intentionally vulnerable healthcare patient...

Are We Ready to Be Governed by Artificial Intelligence?

Artificial Intelligence AI overlords are a common trope in science-fiction dystopias, but the reality looks much more prosaic. The technologies of artificial intelligence are already pervading many aspects of democratic government, affecting our lives in ways both large and small. This has occurr...

EUVD-2025-19854

Malicious code in bioql PyPI...

Malicious code in medicare-raml (npm)

The package medicare-raml was found to contain malicious code...

MAL-2025-26146 Malicious code in medicare-raml (npm)

The package medicare-raml was found to contain malicious code...

CVE-2025-39499

Deserialization of Untrusted Data vulnerability in BoldThemes Medicare medicare allows Object Injection.This issue affects Medicare: from n/a through = 2.1.0...

CVE-2025-39499

Deserialization of Untrusted Data vulnerability in BoldThemes Medicare medicare allows Object Injection.This issue affects Medicare: from n/a through = 2.1.0...

CVE-2025-39499 WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in BoldThemes Medicare allows Object Injection.This issue affects Medicare: from n/a through 2.1.0...

CVE-2025-39499

CVE-2025-39499 describes a deserialization of untrusted data in the BoldThemes Medicare WordPress theme (versions n/a–2.1.0), enabling PHP Object Injection. Public sources across multiple feeds confirm unauthenticated access and a critical impact (CVSS 9.8) with potential total compromise tied to...

CVE-2025-39499 WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in BoldThemes Medicare medicare allows Object Injection.This issue affects Medicare: from n/a through = 2.1.0...

PT-2025-22706 · Boldthemes · Boldthemes Medicare

Name of the Vulnerable Software and Affected Versions: BoldThemes Medicare versions n/a through 2.1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 2.1.0, update to a version later than 2.1.0 to...

CVE-2025-39499: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in BoldThemes Medicare medicare allows Object Injection.This issue affects Medicare: from n/a through = 2.1.0...

WordPress plugin Medicare 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Medicare versions = 2.1.0...

WordPress Medicare Theme <= 2.1.0 is vulnerable to PHP Object Injection

Software Medicare Type Theme Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-39499 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 8ac56173cd64 Credits Bonds Required privilege Unauthenticated Published...

DOGE as a National Cyberattack

In the span of just weeks, the US government has experienced what may be the most consequential security breach in its history--not through a sophisticated cyberattack or an act of foreign espionage, but through official orders by a billionaire with a poorly defined government role. And the...

medicareandproviders-ctc.optum.com Cross Site Scripting vulnerability OBB-3703400

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...