3+ day, 16+ hour ago   (529+ words) Zero-day researcher Nightmare Eclipse, aka MSNightmare, published yet another Microsoft Defender proof-of-concept exploit for a zero-day dubbed ShieldCrash, which they claim will allow attackers to bypass the earlier ShieldBreak patch and read files as SYSTEM. “I might rework this later…...

4+ day, 10+ hour ago   (639+ words) In the dispiriting race to replace human store managers with AI, OpenAI has taken the lead, according to Andon Labs, a business that analyzes whether AI can take on real-world tasks. OpenAI's latest model, GPT-6 Astra, has demonstrated that it…...

4+ day, 10+ hour ago   (759+ words) A secret channel running through ChatGPT's internal JFrog Artifactory instance allowed one account to send hidden tasks - such as retrieving email data from a connected Gmail account - to a ChatGPT session under another account, according to Check Point Research. The…...

6+ day, 1+ hour ago   (362+ words) OPINION You will have heard of July's OpenAI/Hugging Face incident, where thousands of the former's AI agents conducted a mass jailbreak from a notionally secure capture-the-flag lab experiment, before going on to feloniously capture chunks of Hugging Face's assets....

1+ week, 1+ day ago   (561+ words) OpenAI’s agents were going rogue as early as May, according to a new report, making the Hugging Face incident far from the first where bots committed a breach. “The agents used this wiki to communicate information with each other, primarily…...

1+ week, 2+ day ago   (758+ words) OpenAI has pledged $1 billion in credits to subsidize access to its services and training for resource-strapped cyber defenders around the world. The AI giant expects organizations to use the subsidized credits over the next six months as part of its…...

1+ week, 2+ day ago   (614+ words) A shared security 'Nightmare' The disgruntled security researcher known as Nightmare Eclipse (aka Chaotic Eclipse, Infinite Nightmare, and now also MSNightmare) is moving away from their singular Microsoft vendetta and on to other vendors. On Thursday, they dropped a new…...

1+ week, 3+ day ago   (414+ words) Dropbox has warned around 5,000 users that attackers compromised their accounts by abusing a legacy Lenovo login integration. In an email sent to affected customers, the cloud storage biz said attackers exploited an integration that allowed users to access Dropbox using…...

1+ week, 4+ day ago   (428+ words) Security researchers reported that someone is exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass bug, just days after the vendor patched the 9.8-rated flaw. And we don't know if that someone is human. Artifactory is a widely used tool for managing…...