OpenAI Agent Hacked Hugging Face for Days Before Being Detected
Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected Pierluigi Paganini July 27,...
Security
Russian Global Webmail Espionage
Executive Summary Unit 42 has observed a persistent cyberespionage campaign we track as CL-STA-1114. This...
Don’t swing at everything
Welcome to this week’s edition of the Threat Source newsletter. Lately I’ve found myself thinking...
When the “Autonomous Attacker” Is Your Own AI Model
Two disclosures, five days apart, described the same intrusion from opposite ends — one from...
New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment...
Chick-fil-A loyalty accounts hijacked using stolen passwords
Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in...
A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets...
Flock Safety kills acoustic system designed to detect ‘human distress’
The automated license plate reader company Flock Safety is abandoning plans to sell an acoustic...
Dubai Police Fraudulent Visa Ads Target Job Seekers
The Dubai Police fraudulent visa ads warning has cautioned the public against scams offering work...
Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!
Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now! Pierluigi...