5+ day, 12+ hour ago   (510+ words) The implications extend past any single vendor’s product. As more companies route support through autonomous AI, the researchers argue these systems need to be treated as privileged applications with their own attack surface, not as simple chat widgets bolted onto…...

2+ week, 5+ day ago   (385+ words) Hugging Face CEO Clément Delangue addressed the incident publicly, writing that the company worked closely with OpenAI in the hours afterward and did not believe there was malicious intent behind the attack. He also noted how unusual it was that…...

2+ week, 6+ day ago   (534+ words) Hackers are actively exploiting a pair of severe security flaws in a widely used WordPress single sign-on plugin, and thousands of sites that rely on paid versions may not even know they are exposed. Researchers say the bugs allow attackers…...

3+ week, 3+ day ago   (323+ words) Investigators say the intrusion did not exploit a flaw in Rust itself. Instead, attackers appear to have obtained the login credentials of arrayref’s legitimate maintainer, or gained direct access to that person’s machine. With that access, they published altered versions…...