Researchers found common points of failure, like software used to organize and display web content, could have allowed hackers to run riot through government websites.

OpenAI says it is pausing “internal activities” around an in-development AI model, Astra, because it doesn’t yet meet new security standards the company is putting in place. The announcement follows its recent disclosure that OpenAI models accidentally hacked Hugging Face. Anthropic and Meta have also since admitted that they had AI models that went rogue […]
AI without oversight creates patches that rarely fix the issue entirely and sometimes just create new problems.

Security researchers at Zenity Labs uncovered a credential-stealing campaign on skills.sh, a public registry of add-ons for AI agents run by Vercel. They unveiled the research at the Black Hat conference. Attackers had cloned real skills into typosquat…
What if your AI agent suddenly turned rogue and sent all your passwords to a hacker?
Framework told “all” of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.
BlackFile (now known as Redact) has been busy, raking in more than $10 milllion since the start of the year.
In the Kimi test, the sandbox designed to contain the experiment was not properly configured.
Huntress spotted a white whale – a malicious toolkit stored as a database object.
No one has claimed the attack yet.