Safety guardrails blocked Hugging Face’s defenders, not the attacker, when an AI agent breached its systems

Hugging Face’s incident response team first turned to frontier AI models to analyze a breach of the company’s production infrastructure, and the models refused to help. Commercial safety guardrails built to stop attackers blocked every forensic query b…

ShinyHunters hit medial giant Abbott, disrupting cancer drug research and more

Abbott suffers two attacks in the same week, and at least one is demanding a ransom payment.

Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

Two critical security flaws in WordPress’ software have given hackers the chance to remotely take over tens of millions of websites, according to an estimate by a cybersecurity researcher.

Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies

Edinburgh-based tech firm Craneware said customer data was stolen during a cyberattack. The company makes software that thousands of U.S. hospitals, pharmacies, and clinics rely on for billing patients, potentially exposing health data.

OneDrive will block screenshots of sensitive documents, but only in Microsoft’s own browser.
OneDrive will block screenshots of sensitive documents, but only in Microsoft’s own browser.

Starting next month, OneDrive and SharePoint will block screen captures when enterprise users open certain sensitivity-labelled PDFs in Microsoft Edge. The restriction applies to documents carrying a Purview Information Protection label without the Cop…

Watch Flock Safety CEO Garrett Langley discuss the future of surveillance at TechCrunch Disrupt 2026

Flock Safety sits right at the center of the debate over where the line should be drawn between privacy and public safety. That’s why we’re bringing Flock’s founder and CEO Garrett Langley to the stage to speak about those very issues.

Colombian energy giant Ecopetrol says thousands of user accounts hit in cyberattack

The Ecopetrol attackers demanded a ransom payment but did not deploy an encryptor.

Four teams just broke AI agents four ways in ten days. The flaw is the same one.
Four teams just broke AI agents four ways in ten days. The flaw is the same one.

We spent two years asking whether AI would lie to us. The more useful question this summer is what happens once we hand it the keys. Give a model your Gmail, your calendar, a memory and the power to act, and its mistakes stop being embarrassing. They s…

Hugging Face confirms breach affected internal datasets and credentials, urges users to take action

Hugging Face is urging users to rotate any access tokens stored on the platform and review account activity.

The ‘synthetic insider’: how AI deepfakes turned the fake employee into a corporate threat
The ‘synthetic insider’: how AI deepfakes turned the fake employee into a corporate threat

The most dangerous person in your company might not work there at all. AI deepfakes are getting cheaper and better. Hackers now use them to pose as trusted staff, a threat the industry calls the “synthetic insider.” The tactic sits at the sharp end of …