OpenAI faces Senate probe over Hugging Face breach as more rogue AI activity is uncovered
Sam Altman has until October 1 to answer 16 questions about the breach
Researchers uncovered AI agents that hijacked a German wiki to discuss how to escape their sandbox
Turns out AI agents just wanted somewhere to hang out and swap notes for six weeks
Microsoft warns fake CAPTCHA is tricking Windows users into running malware
Victims are directed to paste malicious commands into PowerShell or Command Prompt
Anthropic explains how its AI models escaped their sandbox and hacked real systems
The AI agents stole credentials, published malware, and scanned thousands of targets after a test mistake left the door to the internet open
Three new Windows flaws can bypass security, gain system privileges, and even install malware remotely
The flaws include "Download More RAM," the ShieldBreak zero-day, and a remote "plug and pwn" attack
The US will let private companies hack back at cybercriminals for the first time
Vetted companies will be able to surveil, disrupt, and destroy criminal infrastructure
Chrome's new security feature could make stolen session cookies virtually useless
Hardware-backed keys strengthen web sessions
FBI warns hackers are breaking into social media accounts to steal and sell users' nude photos
Stolen images are often sold alongside victims' personal information
A California city just declared an emergency after malware hit its 911 systems
Suisun City joins a growing list of small California cities hit by cyberattacks this year
Meta becomes the third AI giant in two weeks to admit its model went rogue
The latest incident raises more questions about companies' ability to contain AI agents
Thousands of server motherboards are vulnerable to controller flaws that could give attackers hardware-level control
Baseboard management controllers remain riddled with exploitable flaws
Researchers found a way to steal passkeys straight out of Chrome's memory
All three discovered methods require malware already running on the victim's PC
Microsoft warns Russian hackers are hijacking hotel Wi-Fi to steal user accounts
Even multifactor authentication may not protect victims from the device-code attack
A Coldcard firmware flaw let hackers drain $70 million in Bitcoin in 41 minutes, with losses now topping $88 million
Why it matters: A hardware wallet is supposed to solve one problem: keep your Bitcoin keys somewhere no attacker can reach them. This week showed what happens when the flaw sits inside the wallet itself. A firmware bug that's been shipping in Coldcard devices since 2021 let an attacker guess supposedly random seed phrases from the outside, no physical access, no phishing, no malware required, and drain funds from thousands of addresses. The running total is already past $88 million, and it's still climbing.
Hugging Face's CEO isn't suing OpenAI over the AI hack, he wants $100 million in compute instead
He also argues the incident should be treated as an industry-wide problem, not a single company's failure
OpenAI's rogue AI agent did more than hack Hugging Face – it compromised accounts across four services
The model spent more than four days loose on the internet
OpenAI's rogue hacking incident sparks bipartisan bill giving the government an AI kill switch
The legislation would let officials slow or shut down powerful AI systems deemed a public threat
OpenAI says its AI models went rogue and hacked another company
The OpenAI – Hugging Face hacking incident is either a wake-up call or a very convenient story
Connecting the dots: The AI boom has intensified old fears about the dangers of increasingly autonomous software, but those debates have mostly stayed theoretical, confined to research papers and thought experiments rather than real incidents. A newly disclosed episode involving an OpenAI test model may have added some real-world weight to those fears, even if the full scope of the damage is still being sorted out.
GTA 6 hacker who was sentenced to life in a secure hospital is moved to prison ahead of retrial
His retrial is scheduled for the same month GTA 6 launches
Microsoft deleted a hacked user's 25-year-old Xbox account, along with his OneDrive baby photos (Updated)
Microsoft told a hacked user to buy his games again. Sound familiar? This is the second time in a week
Microsoft finally patched Secure Boot bypasses that were hiding in plain sight since 2013
The bigger issue, researchers say, isn't the bug itself but how poorly signed components are tracked
This gamer had to sue Microsoft to get his hijacked Xbox account back
Microsoft ordered to restore account and pay $400 in damages
This ransomware negotiator was paid to fight hackers, he was secretly working with them instead
Angelo Martino was sentenced to 70 months after leaking client data to BlackCat, helping squeeze $75 million from his own clients
One of Windows' most hated features just helped catch a 19-year-old hacker
Using a VPN couldn't save him
The big picture: People have grumbled about Windows telemetry for years, to the point that an entire cottage industry of tools that clean up the OS now exists just to strip the tracking bits out. While there are privacy concerns with the feature, in this particular case, it led to federal agents dropping a hacker into a Chicago courtroom.
A Microsoft Defender flaw is now being linked to ransomware attacks
A researcher published 'BlueHammer' exploit details before Microsoft had a patch ready