Security

Auto Added by WPeMatico

OpenAI signs AI safety research deal with Poland’s NASK institute

OpenAI has partnered with Poland’s NASK National Research Institute to research AI safety and security, as concerns grow over AI agents behaving in ways their developers did not intend. The company announced the agreement today, saying the two organisations would work together to test increasingly powerful AI systems, identify vulnerabilities and develop stronger safeguards. The […]

This story continues at The Next Web

OpenAI signs AI safety research deal with Poland’s NASK institute Read More »

LiteLLM says hackers poisoned it with GitHub tokens leaked via Claude Code

LiteLLM says hackers took the keys they needed from its own logs. They used them to publish a poisoned version of its software on Wednesday. The open-source AI gateway explained it in an incident report. Its chief executive, chief technology officer and director of security signed it. Its engineers found that Anthropic’s coding agent, Claude […]

This story continues at The Next Web

LiteLLM says hackers poisoned it with GitHub tokens leaked via Claude Code Read More »

Japan to set up AI hacker team as PHP flaws knock services offline

Japan plans to create a team of ethical hackers that will use AI to attack the country’s own systems and find vulnerabilities before criminals can exploit them. The announcement comes as banks, rail operators and government agencies take online services offline to patch two critical flaws in PHP, a programming language used across the web. […]

This story continues at The Next Web

Japan to set up AI hacker team as PHP flaws knock services offline Read More »

Meta fixes Muse links that let anyone find loan files and revenue data

Meta has switched Muse sharing back on. It paused the feature on Tuesday. That came after Ars Technica asked about research showing that anyone could find pages shared from its AI agent. David Singleton, who works on Muse at Meta, announced the fix on Thursday in a post on X. He said Meta disabled sharing […]

This story continues at The Next Web

Meta fixes Muse links that let anyone find loan files and revenue data Read More »

The disastrous PHP vulnerabilities were exploited days before the patch

Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence. CJ Moses, Amazon chief information security officer, writes that the company’s security team found a PHP2Shell exploit attempt on October 17th through a monitoring system designed to bait hackers, as […]

The disastrous PHP vulnerabilities were exploited days before the patch Read More »

Microsoft says China-aligned hackers used AI agents in ConnectWise attack

Microsoft says a China-aligned hacking group used AI agents to breach ConnectWise’s Cloud Backup service, opening a route into customers’ Microsoft 365 accounts. Microsoft Threat Intelligence published its findings on Storm-0940 on October 21. ConnectWise disclosed the breach in a security advisory on October 16, the same day security firm Huntress published its initial account […]

This story continues at The Next Web

Microsoft says China-aligned hackers used AI agents in ConnectWise attack Read More »

eMudhra drops TLS certificates days after browsers blocked its keys

eMudhra is leaving the global SSL/TLS certificate business, days after browsers blocked eight of its certificates. The Indian certificate authority’s board decided to withdraw voluntarily, the company said on Thursday. The business brings in about 1% of eMudhra’s global revenue, its chairman, V. Srinivasan, said. Data sovereignty and compliance rules have made it more complex […]

This story continues at The Next Web

eMudhra drops TLS certificates days after browsers blocked its keys Read More »

Millions of PHP2Shell attempts so far, but officials see no break-in

Hackers have made millions of attempts to exploit PHP2Shell since Wednesday’s disclosure, Cloudflare’s chief executive, Matthew Prince, said on X. Officials in Germany, the Netherlands and Japan say they have not seen one succeed. Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of […]

This story continues at The Next Web

Millions of PHP2Shell attempts so far, but officials see no break-in Read More »

Shopping Cart