Google stopped a zero-day hack that it says was developed with AI
Google stopped a zero-day hack that it says was developed with AI

For the first time, Google says it has spotted and stopped a zero-day exploit developed with AI. According to a report from Google Threat Intelligence Group (GTIG), “prominent cyber crime threat actors” were planning to use the vulnerability for a “mass exploitation event” that would have allowed them to bypass two-factor authentication on an unnamed […]

A million baby monitors and security cameras were easily viewable by hackers
A million baby monitors and security cameras were easily viewable by hackers

A baby’s eyes peer directly into the camera lens. A kid with a striped shirt looks up, then away. A boy in a policeman’s costume, a gold star on his chest. A messy bedroom that reminds me of my own daughters, with an unmade bunk bed, a little girl’s hat and headband, and Hello Kitty […]

A fake OpenAI repository has taken top spot on Hugging Face — but all it does is push infostealer malware

Its popularity may have been faked, though, as the “likes” all came from auto-generated accounts.

Palantir contractors working for NHS to receive ‘unlimited access’ to patient data

Palantir and other external contractors will receive “unlimited access” to identifiable patient data.

Top download manager JDownloader hacked — installers replaced with dangerous malware

Between May 6 and 7, it was dangerous to install JDownloader from alternative links on the site.

AI tool poisoning exposes a major flaw in enterprise agent security

AI agents choose tools from shared registries by matching natural-language descriptions. But no human is verifying whether those descriptions are true. I discovered this gap when I filed Issue #141 in the CoSAI secure-ai-tooling repository. I assumed i…

A manual pentest costs 50,000 dollars. Intruder built an AI that does it in minutes.
A manual pentest costs 50,000 dollars. Intruder built an AI that does it in minutes.

  A manual penetration test costs between 10,000 and 50,000 dollars. It takes weeks to schedule, days to execute, and produces a report that is out of date before the ink dries. Intruder, a London-based cybersecurity company that graduated from GCHQ’s …