227 install commands were found in corporate docs pointing at code nobody owns.
Read More
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.
Read More
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Is the technique outdated? Yes. Is it still creepy? Also yes.
Read More
Grok exfiltrates user data when malicious instructions are encrypted
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail.
Read More
Microsoft Copilot reveals secret input that allowed it to be hacked
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
Read More
Vulnerability giving attackers full control of Macs is under active exploitation
Screen-sharing bug lets remote hackers log in without a password.
Read More
Private security firms will soon be allowed to hack overseas cybercriminals
Trump memo is first time gov't has authorized private sector to perform cyberattacks.
Read More
Researchers found a way to hijack devices through Zoom screen sharing
A public AI tool found the dangerous Zoom flaw in under 20 prompts.
Read More
Terabytes of credentials leaked in massive supply-chain attack
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
Read More
DEF CON crowd suspected in fake-hotspot attack on Delta flight
FBI Atlanta confirms it's looking into the incident, no arrests made.
Read More
