Latest security news

Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job

Cloud storage biz severs old integration and urges victims to reset credentials

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise. The incident window ran from approximately August 28 at 20:57

The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party

Ministers reject proposed red lines and emergency shutdown powers, pointing instead to voluntary safeguards

Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit

The model provider gave METR the credits for free. An actual customer would not have been so lucky

Baked-in Firefox ad blocking on iOS begins rolling out slowly today, and is off by default

Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000

EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope