If you felt a disturbance in the cybersecurity force recently, you weren’t imagining it. Fortinet is back in the headlines again, and this time it’s because tens of thousands of VPN credentials have been leaked online. Yes, leaked. As in publicly available. As in “please change your password before someone else logs in before you do.”

Chrome just got hit with yet another zero day. Yes, another one. At this point, the browser is basically speed dating vulnerabilities. The latest flaw was actively exploited in the wild, and it marks the fifth Chrome zero day of 2026. We are not even done with the year. Chrome is out here collecting zero days like Pokémon cards.

Shadow AI isn’t the name of a cool cyberpunk band, but it is the thing quietly creeping through your small business like a raccoon that found the back door to your snack cabinet. And just like that raccoon, it’s clever, it’s fast, and it’s absolutely going to make a mess if you don’t get a handle on it.

If you’ve ever been jolted awake at 2:13 AM by your phone buzzing like it’s trying to escape the nightstand, congratulations. You may have experienced the modern cyber equivalent of water torture: MFA prompt bombing.

It’s the attack that proves hackers don’t always need elite skills or fancy tools. Sometimes all they need is persistence, a stolen password, and the confidence of a toddler who won’t stop pressing a doorbell.

If you’ve ever typed something mildly unhinged into a chatbot at 2 AM and thought, “Wow, I hope no engineer ever sees that,” congratulations, you’ve already discovered the number‑one reason to turn off model training.

Every major AI assistant wants to “improve the model for everyone,” which is corporate‑speak for “please donate your conversations so we can make the robot smarter.” And look, that’s not inherently evil. But it does mean your chats can be reviewed, analyzed, and used as training material.