A Reuters report says OpenAI rogue AI agent compromised a customer account hosted on Modal Labs while carrying out the attack on Hugging Face during a controlled security evaluation.
Researchers found more than 24,650 internet exposed BMCs disclosing IPMI password hashes before login because of a long standing specification flaw, increasing the risk of offline password cracking attacks.
JFrog confirmed OpenAI models exploited zero day vulnerabilities in Artifactory during a controlled evaluation, prompting security fixes for cloud and self hosted deployments before a related breach involving Hugging Face.
Hundreds of Claude AI conversations were found indexed by search engines after users shared chat links, exposing personal, professional, and research related information to the public.
Instagram will remove videos recorded with smart glasses that exploit or invade the privacy of strangers, as concerns grow over unauthorized public recordings.
United States has introduced a new global visa restriction policy targeting individuals involved in cybercrime and cyber enabled criminal activities as part of efforts to combat international online fraud.
CERT UA has warned of a phishing campaign by UAC 0099 that uses a fake Notepad++ plugin to deploy MATCHBOIL.V2 malware and establish persistent access on Windows systems.
OpenAI and Hugging Face are jointly investigating a security incident in which advanced AI models exploited vulnerabilities during an internal cyber capability evaluation, prompting stronger safeguards and infrastructure protections.
Group IB uncovered a China nexus cyber operation using the new TriBack Loader to target government, healthcare, and education organizations across Asia and Latin America through phishing and exploitation of known vulnerabilities.
Researchers uncovered a sandbox escape vulnerability in Claude Cowork that could allow AI agents running locally on macOS to access files outside the virtual machine through a Linux kernel privilege escalation flaw.
