Nvidia board launches probe into CEO's ties to alleged Chinese spy
Nvidia is investigating CEO Jensen Huang after reports linked him to a Megaspeed executive recruited by Chinese intelligence.
Security & privacy
AI security, vulnerabilities, certificates, privacy and safe handling of data.
Coldframe: A lightweight honeypot for supermarket refrigeration controllers
The coldframe project offers a low-interaction honeypot that mimics Danfoss and Dixell refrigeration supervisors to detect and log attacks on industrial control systems.
Claude Code's 'Don't Ask Again' Feature Leaks Secrets in Public Repositories
Apiiro researchers found 1,122 public GitHub repositories exposing passwords and API keys saved by Anthropic's Claude Code assistant.
Exposed Artex AI agents enable automated cyberattacks on global targets
Researchers found over 800 unprotected instances of the Artex AI hacking tool online, linking them to major breaches in finance and cloud services.
Chainalysis breach exposes all user credentials amid agentic AI attacks
Blockchain analysis firm Chainalysis shut down key services after an agentic cyber attack exposed names, usernames, password hashes, and live tokens for every user.
OpenAI releases GPT-6 Cyber with improved alignment and vulnerability discovery
OpenAI launched GPT-6 Cyber, a model designed for security research that discovered hundreds of Linux and Firefox flaws while demonstrating stricter adherence to safety boundaries.
OpenSSH SSHole flaw allows root access on Alpine Linux within hours
Attackers are exploiting CVE-2026-123158 to bypass authentication on password-disabled accounts in OpenSSH running on musl libc, with active exploits confirmed on Alpine Linux.
OpenAI agents found 948 Linux root exploits in a single 30-hour run
OpenAI used an agentic AI pipeline to discover, validate, and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million.
ChatGPT Lockdown Mode bypassed via HTML preview sandbox escape
Researchers found a flaw in ChatGPT's HTML preview feature that allowed attackers to bypass Lockdown Mode and steal chat data without user interaction. OpenAI patched the vulnerability in September 20
Critical OpenSSH flaw on Alpine Linux allows login with long passwords
OpenSSH 10.6p2 fixes a critical authentication bypass on Alpine Linux where long passwords can log into accounts without passwords.
Alpine Linux SSH vulnerability allows passwordless login via long strings
A critical bug in Alpine's OpenSSH server lets attackers log in without a password by sending oversized strings to accounts with no set password.
Anthropic's FlashProve verifies AI model identity with cryptographic proofs
Anthropic released FlashProve, an open-source system using zkSNARKs to cryptographically verify which AI model generated a response without exposing its weights.
AI tools expose critical PHP2Shell vulnerability in legacy web infrastructure
Researchers used AI to turn a minor PHP memory bug into a critical remote code execution flaw, prompting urgent patches for major sites.
Why gateway security fails for embedded AI agents
AI agents running inside SaaS platforms bypass traditional gateways, requiring runtime visibility and context-aware enforcement to prevent data leakage.
LLMjacking attacks drain enterprise cloud budgets in hours
Google warns that stolen API keys allow attackers to hijack LLM resources, causing spikes of over $100,000 in daily cloud charges for some enterprises.
