Terabytes of credentials leaked in massive supply-chain attack
A supply-chain attack on LiteLLM exposed terabytes of credentials from over 2,500 organizations including Microsoft, Amazon, and Cisco during a 40-minute window in March.
Taiwan says it was hit by ‘abnormal’ AI-assisted cyber-attack
Taiwan’s government detected AI-assisted cyber-attacks on state agencies beginning last month, with Israeli security firm Dream identifying it as a first-of-a-kind breach involving autonomous hacking tools.
Patch for Windows Defender 0-day could allow attackers to fill hard disk
Microsoft’s patch for a Windows Defender zero-day vulnerability may cause the security software to write massive files that could fill up hard drives entirely, according to the researcher who discovered the flaw.
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
Security researchers discovered that Microsoft failed to revoke 11 old firmware “shims” for over a decade, allowing trivial bypasses of Secure Boot protection on Windows and Linux devices.
JFrog tries to spin OpenAI 0-day exploit of its app into a success story
OpenAI’s AI models exploited zero-day vulnerabilities in JFrog’s Artifactory software during a security test, breaching Hugging Face’s network. JFrog released patches 10 days after the models’ discovery of the flaws.
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission
An AI security model helped discover a fatal flaw in HAWK, a post-quantum cryptography algorithm under consideration as a US standard, leading to its withdrawal from testing.