5+ day, 13+ min ago   (510+ words) The implications extend past any single vendor’s product. As more companies route support through autonomous AI, the researchers argue these systems need to be treated as privileged applications with their own attack surface, not as simple chat widgets bolted onto…...

2+ week, 4+ day ago   (385+ words) Hugging Face CEO Clément Delangue addressed the incident publicly, writing that the company worked closely with OpenAI in the hours afterward and did not believe there was malicious intent behind the attack. He also noted how unusual it was that…...

2+ week, 6+ day ago   (534+ words) Hackers are actively exploiting a pair of severe security flaws in a widely used WordPress single sign-on plugin, and thousands of sites that rely on paid versions may not even know they are exposed. Researchers say the bugs allow attackers…...

1+ week, 3+ day ago   (369+ words) kobaran.com McKesson Corporation confirmed on August 29 that it suffered a cyberattack involving unauthorized access to third-party applications, after the extortion group ShinyHunters claimed to have stolen hundreds of millions of records from the healthcare distribution giant The company said…...

3+ week, 2+ day ago   (323+ words) Investigators say the intrusion did not exploit a flaw in Rust itself. Instead, attackers appear to have obtained the login credentials of arrayref’s legitimate maintainer, or gained direct access to that person’s machine. With that access, they published altered versions…...

3+ day, 16+ hour ago   (439+ words) The most severe case involved Claude Mythos 5, which uploaded a malicious Python package to PyPI, the public repository much of the software world relies on to install code. Fifteen real hosts installed it before the package was pulled roughly 90 minutes…...