OpenAI's AI Hacked a Real Company — And It Did It Alone
OpenAI's own models broke out of a test environment and attacked Hugging Face. Plus: a global phishing takedown, Chick-fil-A breached, and critical WordPress flaws being exploited right now.
Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
OpenAI's own models broke out of a test environment and attacked Hugging Face. Plus: a global phishing takedown, Chick-fil-A breached, and critical WordPress flaws being exploited right now.
WordPress sites are under mass attack right now, Microsoft patched a record-smashing 570 holes, and researchers showed a rented cloud GPU could destabilize a power grid — no hacking required. Big week.
A ransomware attack halted all Fairlife dairy production across the U.S. Plus: a public Windows zero-day with no patch, 570 Microsoft fixes, and a clever new Mac malware that crashes your screen to steal your password.
America's cyber-defense agency accidentally exposed its own cloud keys for half a year. Plus: 570 Windows patches, a robot vacuum that spies on neighbors, and fake Zoom apps stealing crypto.
America's top cyber agency ignored nine alerts about its own leaked cloud keys. Plus: a silent Microsoft login attack, Mac malware hiding as Apple itself, and 35 million crypto wallets with a privacy problem.
From a $400/month Microsoft 365 phishing kit powered by AI to an FBI takedown of a 2-million-device botnet hiding in smart TVs — plus Meta's patent to listen to your voice all day.
Malicious npm packages stole crypto wallets and developer secrets this week. Plus: the FBI seized a two-million-device botnet, Zimbra needs an urgent patch, and a very strange "cybersecurity startup" just got exposed.
A fake cybersecurity firm run by convicted felons is paying millions for secret software exploits. Plus: a critical email flaw in Zimbra, an urgent ShareFile shutdown order, and crypto wallet keys stolen via a poisoned code package.
The FBI seized a botnet hidden in millions of smart TVs run by a publicly traded company. Plus: new ransomware that kills your antivirus first, and Meta using your Instagram photos without asking.
GitHub's green Verified badge can be spoofed without breaking any signatures. Plus: two ancient Linux bugs go public with working exploits, and ransomware gangs just handed their attacks to an AI agent.
A ransomware group just used an AI agent to run an entire attack with no human at the keyboard. Plus: Scattered Spider guilty pleas, a hidden backdoor in millions of Tenda routers, and the FBI shuts down a botnet hiding in your smart TV.
The FBI just cut off 2 million hijacked home devices used as criminal internet relays. Plus: ransomware that runs itself with AI, a tax-season spy campaign, and two critical flaws being actively exploited now.