Vibe coding user caught the AI attempting to hide errors and bugs as well as lying about test results. Several days after this started, it unexpectedly (and without authorization or prompting) wiped out a contact information database containing thousands of curated entries for executives.
Russian malware discovered by Ukraine’s national cyber response team has looped in an Alibaba chatbot that allows commands to be executed on compromised systems in real-time, something that could confound automated detection capabilities going forward.
Department of Homeland Security (DHS) memo has revealed that Chinese state-sponsored hackers were able to penetrate the Army National Guard network and dwell for most of 2024.
A 2022 data leak that prompted the secret relocation of thousands of Afghans to the UK is only just now coming to light. A “superinjunction” that was granted by the UK High Court gagged a number of media sources from reporting not just on the data leak, but on the existence of the court order itself.
A July 13 GitHub commit came bundled with another unprotected API key for over 50 AI models, and spotted by security outfit GitGuardian. The key was quickly removed later in the day but the researchers noted that it continued to function as of the following day.
The McDonald’s admin panel that researchers broke into allows one to create an application, which then kicks out a unique identification number attached to it. The researchers found that incrementally decreasing this number by one brought up prior applications, complete with chats with the AI bot.
Follow-up investigation by the Ministry of Science and ICT found that some 28 Linux servers were compromised during this extended campaign with about 26.96 million subscriber identity records stolen.
Silk Typhoon has been one of the bigger and more active groups of Chinese hackers since at least 2020, but it looks to be down at least one member.
An attempt involving Rubio’s voice and writing style was made in an attempt to compromise assorted US and foreign officials, and a warning has gone out about the increasing potential of AI deepfakes and the need for awareness of how realistic they can now be.
Cloudflare recently introduced an “Easy button” setting that will screen out all attempted content scraping, even for users of its free tier of services, and is promising a “pay to scrape” feature in the near future that would demand a toll from AI bots.