We now have a better understanding how OpenAI hacked into Hugging Face
10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a patch.
Hacking
OpenAI's agents hacked second account during model testing
Coverage of: OpenAI's agents hacked second account during model testing
ExploitGym – Can AI Agents Turn Security Vulnerabilities into Real Attacks?
ExploitGym is a benchmark of 869 real-world vulnerabilities across userspace programs, Google
Iran exploited mobile flaws to locate U.S. troops in the Middle East
The Iranian government exploited well-known flaws in cellphone networks to locate and then strike U.S. military personnel in the build-up and beginning of the war.
Zero-Day in Popular VPN Appliance Exploited by State-Linked Group
Researchers warn thousands of edge devices remain unpatched as attackers deploy custom backdoors for long-term espionage access.
Researchers Uncover Supply Chain Attack Hidden in Popular Dev Library
Malicious code slipped into a widely used open-source package harvested environment variables and cloud credentials from build servers.
Exploiting vulnerabilities in Johnson and Johnson web apps
Campus Recruiting vulnerability exposed student information, and Audit Tracking Management System vulnerability exposed confidential internal audit data.
Critical Flaw in Industrial Control Systems Prompts Emergency Directive
Exploitation could allow remote manipulation of physical processes at water utilities and manufacturing plants.
University Research Networks Targeted in Espionage Campaign
Attackers sought unpublished research in quantum computing and biotechnology, using compromised academic credentials.
Flaw in Smart Home Devices Exposes Millions of Camera Feeds
Weak cloud authentication allowed strangers to view live streams; the vendor has issued mandatory firmware updates.
APT Group Exploits Messaging App Zero-Click Flaw Against Journalists
Forensic analysis of seized devices revealed spyware delivered without any user interaction, prompting emergency patches.
Massive DDoS Attack Peaks at Record 9.4 Tbps, Cloudflare-Class Defenses Hold
The hyper-volumetric assault leveraged compromised IoT devices and virtual machines across 130 countries.