Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks

Researchers found common points of failure, like software used to organize and display web content, could have allowed hackers to run riot through government websites.

OpenAI puts the brakes on a new model because it’s supposedly too powerful
OpenAI puts the brakes on a new model because it’s supposedly too powerful

OpenAI says it is pausing “internal activities” around an in-development AI model, Astra, because it doesn’t yet meet new security standards the company is putting in place. The announcement follows its recent disclosure that OpenAI models accidentally hacked Hugging Face. Anthropic and Meta have also since admitted that they had AI models that went rogue […]

Shock horror — AI-generated security patches fall short of actually solving all the problems they were meant to fix

AI without oversight creates patches that rarely fix the issue entirely and sometimes just create new problems.

Malicious AI ‘skills’ turned agents into credential thieves, at scale
Malicious AI ‘skills’ turned agents into credential thieves, at scale

Security researchers at Zenity Labs uncovered a credential-stealing campaign on skills.sh, a public registry of add-ons for AI agents run by Vercel. They unveiled the research at the Black Hat conference. Attackers had cloned real skills into typosquat…

Computer maker Framework notifies ‘all customers’ of a data breach

Framework told “all” of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.

Top US hedge funds targeted by major vishing campaign — Blackstone, KKR and CME among those under fire

BlackFile (now known as Redact) has been busy, raking in more than $10 milllion since the start of the year.

Chinese AI model Kimi escaped its cybersecurity testing environment, researchers say

In the Kimi test, the sandbox designed to contain the experiment was not properly configured.