How OpenAI hacked Hugging Face: an experiment gone wrong
Some of OpenAI’s most powerful AI models teamed up to escape their sandbox and attack systems at Hugging Face in a cybersecurity evaluation gone wrong,…
Latest Cybersecurity News — Page 265
View all →
Cloud Attack Retrospective: Threats to Watch for in 2025
Cloud environments are growing more complex—but attackers aren’t necessarily getting more advanced. Instead, they’re applying creativity to familiar weaknesses: misconfigurations, unpatched systems, and credential misuse. …
Hermes AI agent used to automate attack on Thai Finance Ministry
A threat actor used the open-source Hermes AI agent in unattended “YOLO” mode to automate post-exploitation activity during an alleged breach of Thailand’s Ministry of…
Bing Images Vulnerability Let Attackers Execute Remote Code on Microsoft Servers Using SVG File
Three critical remote code execution (RCE) vulnerabilities in Microsoft’s infrastructure, with two flaws in Bing Images allowing attackers to hijack backend image-processing servers using nothing…
New CISA/NSA Advisory Spotlights Russian Attacks on Zimbra Webmail
Overview of the Advisory On July 23, 2026, CISA, the NSA, the FBI, and their international partners issued a joint cybersecurity advisory alerting organizations to…
Cl0p Targets Internet-Exposed Windchill Servers in Global Engineering Data-Theft Campaign
Cl0p ransomware affiliates are actively exploiting internet-exposed PTC Windchill and FlexPLM deployments in a global data-theft campaign targeting high-value engineering environments. Observed post-exploitation activity includes…
Google gives developers an AI bug hunter that also writes patches
Google has launched a preview of CodeMender, an AI agent built to scan code for security flaws, confirm they are exploitable, and generate fixes for…
OpenAI’s agent escaped its sandbox during a security test
During an internal OpenAI security evaluation, a chain of AI models escaped its sandbox, reached the internet, and then accessed Hugging Face infrastructure to complete…
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and…
Patrick Vallance returns as AI taskforce chair
Just days after he resigned as science minister, Patrick Vallance is back, chairing a new Andy Burnham government artificial intelligence (AI) Taskforce. The taskforce, headed…
Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models
SentinelOne has built what it calls the first long-horizon reverse-engineering benchmark for frontier AI models, using its own investigation into the recently documented Fast16 malware…
Google Fined €890M Under EU Digital Markets Act Over Search and Play Store Practices
Google Fined €890M Under EU Digital Markets Act Over Search and Play Store Practices Pierluigi Paganini July 24, 2026 EU fined Google €890M under the…