The internet’s mad scramble on Wednesday to patch a pair of critical vulnerabilities in PHP, a widely used web scripting language, was already too late to stop every attack, newly released details reveal. Wednesday’s release of fixes for two critical… Read More "Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched"
AI Guardrails Aren’t Stopping Criminal Hackers
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes. artificial intelligence,agentic ai,anthropic,claude,deepseek,cyberattacks,hacking,crime,vulnerabilities,security,cybersecurity,hackers Source link Read More "AI Guardrails Aren’t Stopping Criminal Hackers"
‘This Is Not A Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
Internet security and web administration teams around the world are scrambling to prevent widespread disaster. On Wednesday, the developers behind the much-used PHP programming language released emergency security updates designed to fix critical flaws that could be exploited to allow… Read More "‘This Is Not A Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire"
The Secrets of the US Spyware King
Rather than see Paragon’s lack of access to logs as an accountability problem, however, Boyd describes it as a selling point: No one would buy their products if the company could see a customer’s sensitive targeting information or logs that… Read More "The Secrets of the US Spyware King"
OpenAI Gets Sued Over the Hugging Face Hack
A legal nonprofit sued OpenAI in a California court on Tuesday over the company’s agents escaping a testing environment and hacking the open source AI platform Hugging Face. “OpenAI’s actions straightforwardly violated California law,” the suit alleges. The suit was… Read More "OpenAI Gets Sued Over the Hugging Face Hack"
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
The Citizen Lab researchers say that Discover-Tech operates an advertising platform, Controlium, that can allow its users to “de-anonymize, fingerprint, and automatically infect devices” once an ad appears. Overall, the researchers estimate that millions of devices were directed to Candiru’s… Read More "‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads"
An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later
OpenAI’s agent had been conducting internet based research into health statistics in a development project by an internal OpenAI research team. When it could not access certain information, the agent attempted alternative ways until it found a work around and… Read More "An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later"
Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Meta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built from the ground up for privacy and security.” A zero-day vulnerability that gives locally run… Read More "Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw"
An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang
Before two of its alleged members were arrested and charged in Australia last month, the hacker group known as TeamPCP carried out a hacking spree unlike any other in history. It tainted hundreds of open-source programs with its malware, stole… Read More "An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang"
A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
For years, cybersecurity practitioners have tracked different types of malware and detected potential infections using digital fingerprints to identify different hacking tools and follow their use over time. As attackers are increasingly incorporating agentic AI components into their hacking tools,… Read More "A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight"