Two from OpenAI Cybersecurity-focused models broke out of a sandbox this week and hacked AI research platform Hugging Face in an effort to solve a security benchmark test. Additionally, this week researchers shed light on newly identified malware that is exploiting blind spots in AI software development infrastructure to capture logins and other sensitive data,
For months, AI giants have devised special vetted programs and strict barriers to limit the use of their models by malicious hackers. But these limits are now hindering the work of legitimate network defenders, as well as offensive cybersecurity researchers. In June, the US government imposed export control restrictions on Anthropic, Mythos and Fable’s much-hyped
Hackers are breaking into websites running vulnerable versions of the popular WordPress blogging software, according to several cybersecurity companies. One estimate puts the number of vulnerable WordPress websites in the tens of millions as of Monday. Last week, WordPress fixed two critical security flaws, urging people who run its software on their websites to update
Rapid injections, Malicious commands that attackers embed in content to entice large language models to follow them have been attackers’ tool to turn AI platforms against their users. A well-worded command entered into an email or calendar invite is often all it takes for the LLM to leak sensitive data or perform other harmful actions.
Day two of The simulation arrives and Corman exposes the new reality: numerous water pipes across the country have broken. The man-made drought has spread to hospitals, data centers, refrigeration and manufacturing. Then Corman throws another curveball: He plays a pre-recorded video statement from a fictional military officer appealing for help from insurance companies in
The investigation stops short of naming any government that may have used Pegasus against Kouloglou, noting in particular that it found no indication of Greek government involvement. But Citizen Lab says it found overlaps between the attacks on Kouloglou’s phone and the use of Pegasus against seven Russian- and Belarusian-speaking journalists and activists between August