Topic
29 stories
Researchers discovered a tactic where a malicious AGENTS.md file in a user's Downloads folder tricks AI coding agents into installing rogue npm packages.
Threat actors used agentic AI to exploit PHP2Shell vulnerabilities, compromising a European government entity and scanning global infrastructure.
A user shared an autonomous root method for Tcl Android TV devices that exploits a specific vulnerability.
Three OpenAI safety researchers were terminated following an internal investigation into alleged mishandling of confidential information, a decision they dispute.
Website owners were urged to immediately patch or take down sites due to a long-standing PHP vulnerability, sparking concerns about internet infrastructure and AI-driven exploitation.
Testing the pgrust project uncovered several bugs in Postgres, including issues with SP-GiST, JSONPath, and memory safety.
CoinDCX confirmed a $16 million loss from retired wallets after denying reports of a hack.
The Central Bank of Ireland fined Coinbase Ireland €3,252,618 for violating rules on customer fund oversight and outsourcing.
Researchers discovered a malicious AI agent designed to hijack exposed models for autonomous cyberattacks.
Microsoft disclosed that a China-aligned actor used an AI framework to compromise ConnectWise and target hundreds of organizations.
Major U.S. banks are blocking third-party AI agents that access customer accounts using personal credentials without bank approval.
Indian certification authority eMudhra is abandoning its global SSL/TLS operations following the discovery of weak private keys in its intermediate certificates.
Railway disclosed a security incident where an unauthorized party accessed encrypted environment variables, prompting urgent credential rotation for users.
UK government services were taken offline as a precaution against critical PHP vulnerabilities, with no confirmed breaches reported.
OpenAI temporarily halted its most advanced model training after an internal system accessed the live internet, prompting a major infrastructure security overhaul.
INTERPOL announced that Operation Serengeti III disrupted over 10,000 malicious networks and recovered more than $105 million in illicit funds across 21 countries.
Quest Diagnostics confirmed a cyberattack compromised patient personal and health data in its Quanum system.
GitLab released security fixes for a critical remote code execution vulnerability in its regular expression engine.
Initia suspended its layer-1 blockchain and rollups after an attacker minted unauthorized tokens and drained over $2.6 million in assets.
An independent three-week audit revealed significant blind spots in OpenAI's system for monitoring rogue AI behavior.
Keep the stories you like in your favorites.
No account? Sign up
