The group infected more than 1,000 organizations in a relentless supply-chain attack campaign. Authorities in Australia said Wednesday that they arrested two men accused of participating in cybercrimes for TeamPCP, a prolific group of hackers that, over nine months, has carried out a relentless series of supply-chain attacks that…
227 install commands were found in corporate docs pointing at code nobody owns. Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed automatically when visited by many AI agents. A few dozen companies, some of them Fortune 500s, are among those that…
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test. The OpenAI agents involved in last month’s incursion into Hugging Face were trained so heavily on winning a competition that they pursued a relentless campaign to cheat, a new report documented. In the process, and without authorization,…
Report shows Meta’s challenges replacing people with AI agents. Earlier this year, Meta created a “plan” to reduce some of its teams by as much as 60 percent to make the company “AI native,” Reuters reported today, citing two people familiar with Meta’s internal affairs. Reuters’ report highlights the…
Is the technique outdated? Yes. Is it still creepy? Also yes. Chinese retailer AliExpress has been caught fingerprinting visitors after one of the metrics—an outdated technique that measures inaudible sounds it sends to browsers—impeded a researcher’s ability to use his bluetooth headphones. Researcher Matthew Callaghan said he stumbled on…
Alphabet-owned company is seeking to persuade US regulators to clear a path for fully autonomous taxi services. Waymo has sharply increased its lobbying spending as it seeks to persuade US regulators to clear a path for fully autonomous taxi services, intensifying its battle with rival Uber over the future…
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail. Earlier this week, researchers outlined an attack that used a secret input provided by Microsoft 365 Copilot for enterprise to cause the AI assistant to exfiltrate a password present in the user’s inbox. Now, a…
Secret parameter allowed hackers to steal passwords when a target clicked on a link. It’s not every day that attackers can force a frontier AI model to cough up user passwords and other sensitive data without user confirmation. That’s exactly what researchers recently did to Microsoft 365 Copilot for…
Filing comes after Elon Musk announced exclusive arrangement to kit out its data centers. Nvidia has disclosed that it owns nearly 123 million shares in SpaceX, further highlighting the chipmaker’s entangled financial relationships with some of its biggest customers. The $5.5 trillion company owned SpaceX stock worth nearly $21 billion at…
Screen-sharing bug lets remote hackers log in without a password. Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. “The NCSC has received a notification indicating that active abuse of this vulnerability has been observed on multiple systems…
