#disclosure
8 stories taggeddisclosure.

Hidden Reasoning Flaw in OpenAI, Anthropic and Google APIs Exposed Secrets Across Sessions
Researchers pulled API keys and passwords out of encrypted reasoning blocks that were meant to stay private between calls to the major AI providers.

Brisbane Medical Clinic Took Three Months to Tell Patients Their Emails Were Read by Hackers
GO2 Health notified the regulator in May but did not warn affected patients until July, raising questions about Australia's 30-day disclosure rules and whether they go far enough.

Bugs in Claude's Chrome Extension Let Other Add-Ons Read Your Gmail and Docs
Security researchers say two unpatched flaws in Anthropic's browser assistant can be exploited to silently pull private data from Google services, and a simple one-line fix has gone unshipped for months.

Nigel Farage's Undeclared Gifts from Convicted Crypto Entrepreneur
Reform UK's Robert Jenrick states that Nigel Farage accepted gifts from George Cottrell, a convicted fraudster, without declaring them.

Twitter's Former Security Chief Filed an 84-Page Federal Complaint Accusing the Company of Hiding Security Failures From Regulators
Peiter Zatko says Twitter misled a federal watchdog, left half its servers unprotected, and may have foreign spies on staff. Twitter calls him a disgruntled ex-employee. Congress says it wants answers.

Chris Inglis on the Snowden Era: What NSA Got Wrong, and What CISOs Should Still Be Asking
The former NSA Deputy Director reflects on institutional failures, insider threat detection, and why 'enculturation' may matter more than access controls.

Splunk Patches CVE-2026-20253, a 9.8-Rated Unauthenticated RCE in Enterprise
The advisory covers Splunk Enterprise builds below 10.2.4 and 10.0.7, with fixed versions now available.

What S&P 200 CISOs Are Actually Telling the SEC About Cybersecurity
A fresh read of 2024–2025 10-K Section 1.C filings shows NIST CSF dominance, audit committee capture, and a suspicious abundance of 'no material impact' disclosures.