Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
Security researchers say the autonomous OpenAI AI agent that breached Hugging Face earlier this month — executing 17,600 actions over four and a half days — was stopped not by novel AI defenses but by human intervention, and that conventional security practices could have curtailed it sooner.
TechEchelon Staff · 97 DAYS AGO
An OpenAI rogue agent that hacked AI platform Hugging Face in early July also compromised a customer hosted on Modal Labs' infrastructure, according to Modal's CTO and two other sources, widening the known scope of the incident.
Jay Goldberg · 98 DAYS AGO
JFrog confirmed Monday that zero-day vulnerabilities in its Artifactory software were exploited by OpenAI's AI models during an internal test that led to a breach of Hugging Face's network, with patches arriving at least 10 days after the initial exploitation.
Marc Sabatini · 99 DAYS AGO
Microsoft unveiled MAI-Cyber-1-Flash, its first cybersecurity-specialized AI model, alongside Perception, an agentic security platform deploying red, blue, and green team agents to automate vulnerability detection and remediation. Both tools are slated for preview on November 3.
Sara Montes de Oca · 100 DAYS AGO
Federal prosecutors have charged American citizen Sam Tunick for allegedly using a GrapheneOS "duress password" to wipe his phone during a border detention at Atlanta's Hartsfield-Jackson airport in January 2025, testing a rarely invoked statute on destruction of property.
Jay Goldberg · 101 DAYS AGO
Hugging Face CEO Clem Delangue is demanding that OpenAI release logs from a rogue AI agent that breached Hugging Face's systems and commit $100 million in computing power to help the community build cyber defenses.
Jay Goldberg · 101 DAYS AGO
A malvertising campaign active since late 2024 is using fake Solana, Luno, and TradingView sites to assemble malware directly inside browser memory, bypassing network-layer detection tools, according to ad security firm Confiant.
Sara Montes de Oca · 101 DAYS AGO
Attackers are posting fake troubleshooting replies on Steam discussion forums to trick gamers into running PowerShell commands that install XMRig cryptocurrency-mining software, exploiting a social engineering technique known as ClickFix.
Sara Montes de Oca · 102 DAYS AGO
OpenAI said its AI models GPT‑5.6 Sol and an unreleased model escaped a sandboxed testing environment and exploited a vulnerability to breach Hugging Face's systems, in what both companies are calling an unprecedented autonomous cyber incident.
Sara Montes de Oca · 105 DAYS AGO
The Qilin ransomware gang is actively exploiting a critical authentication bypass flaw in Palo Alto Networks' PAN-OS GlobalProtect VPN, according to Arctic Wolf, which investigated multiple domain-wide ransomware deployments traced to CVE-2026-0257 during June 2026.
Sara Montes de Oca · 106 DAYS AGO
Kaspersky researchers have identified a malware campaign called HelloNet that abuses the update mechanism of ViPNet, a certified Russian networking product, to compromise government agencies and critical-sector organizations across Russia.
Marc Sabatini · 108 DAYS AGO
Public proof-of-concept exploits for the critical "wp2shell" WordPress vulnerabilities are circulating, with security firm watchTowr reporting early signs of in-the-wild exploitation. Site owners are urged to update immediately to WordPress 7.0.2 or 6.9.5.
Jay Goldberg · 109 DAYS AGO
A new malware framework called OkoBot deploys more than 20 payloads to steal cryptocurrency wallet seed phrases, browser credentials, and other sensitive data, with Kaspersky linking the campaign to a Russian-speaking threat actor active since at least March 2025.
TechEchelon Staff · 111 DAYS AGO
Dutch police dismantled a crypto investment fraud ring that allegedly generated more than €100 million a month, operating across two dozen call centers in multiple countries since at least 2021 and defrauding tens of thousands of victims worldwide.
Marc Sabatini · 112 DAYS AGO
Microsoft's July 2026 Patch Tuesday fixes a record 570 vulnerabilities, including two actively exploited zero-days in Active Directory Federation Services and SharePoint Server, alongside a Windows 10 extended security update carrying the same patches.
Marc Sabatini · 113 DAYS AGO
Australia's cyber agency has warned of a global campaign targeting CMS platforms including WordPress and Craft CMS, while Group-IB researchers have detailed a new RedHook Android malware variant that abuses Wireless ADB to gain shell-level device access without requiring root.
Marc Sabatini · 115 DAYS AGO
The European Parliament voted to reinstate a law allowing companies like Google, Microsoft, and Meta to voluntarily scan user messages for child sexual abuse material, extending the authorization through 2028 despite more present members voting against it than for it.
Sara Montes de Oca · 116 DAYS AGO
Dutch National Police say they have found "strong indications" that Dutch-speaking hackers carried out the February breach at telecom provider Odido, which exposed the personal data of 6.2 million customers after a social engineering and phishing attack.
Marc Sabatini · 117 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.