Since CDK discovered the breach and shut off systems on June 19, chaos has ensued at many of the roughly 15,000 car dealerships that it counts as clients.
How a 40-Minute Window Brought Down a $10 Billion AI Startup: The Mercor Data Breach, Explained
A poisoned open-source package, a credential-stealing payload, and 4 terabytes of stolen data here’s what every AI company needs to learn…
Mercor Data Breach | What You Need to Know
A massive data breach at AI startup Mercor exposes risks in AI supply chains, third-party tools, and data governance. Here’s what security teams need to know.
AI Agent Executes 'First' End-To-End Ransomware Attack - Slashdot
Sysdig says it has documented the first ransomware attack carried out end to end by an AI agent, which autonomously exploited exposed systems, stole credentials, established persistence, compromised a production database, and destroyed data. The research team named the attacker "JadePuffer" and said...
Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen Lab
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. We call the technique AdFection, and show how it was used to infect devices at Al Jazeera with Candiru’s spyware. We also uncover Discover-Tech, and show how the company helps mercenary surveillance vendors track and hack devices around the world.
What Happened to HackerOne?
The rise and fall of the largest bug bounty platform in the world
Bug bounty businesses bombarded with AI slop
Never-ending" AI slop strains corporate hacking reward schemes.
Hacking Capitalism | A Guide To Exploiting The Tech Industry
This is an independently published book about modeling the tech industry as a system. Particularly this book will model computers, humans, and money and their subsequent relationships. Understand the alarming state of the tech industry for better or for worse.
The Money In Open-Source Software | TechCrunch
It’s no secret that open-source technology -- once the province of radicals, hippies and granola eaters -- has gone mainstream. According to industry estimates, more than 180 young companies that give away their software raised roughly $3.2 billion in financing from 2011 to 2014. Despite the growing popularity of open-source software, though, many open-source companies are not financially healthy.
‘Doom Loop’: OpenAI and Microsoft Admits LLMs Are Destroying the Web and Built on Theft
"Millions of people around the world will soon consider large models ‘hoovering up’ all their work to be an astonishing theft of unprecedented proportions."
Hackathon on Decentralised Media - TEP (Trusted European Platforms) Bluesky, Nostr · Luma
Every year, thousands of developers of free and open-source software from all over the world gather at FOSDEM. For two weeks around this event – from the 26th…
Mercor, a $10 billion AI startup, confirms it was caught up in a major security incident | Fortune
The high-flying startup that provides AI training data to OpenAI, Anthropic, and Meta confirms it was hit by a “supply-chain attack.”
The $11 Billion Marketplace Enabling the Crypto Scam Economy
Deepfake scam services. Victim data. Electrified shackles for human trafficking. Crypto tracing firm Elliptic found all were available for sale on an online marketplace linked to Cambodia’s ruling family.
“Claude Mythos doesn’t just find vulnerabilities - it exploits them” | Ctech
Anthropic restricts access to its most powerful AI model to around 40 companies, including Apple, Google, Microsoft, Amazon, Nvidia, Palo Alto Networks and CrowdStrike, as part of a $100 million cybersecurity initiative aimed at using the system to detect and patch critical software flaws before similar capabilities spread more widely across the ecosystem.
Unauthorized access, personal data leaks surge in Japan | NHK WORLD-JAPAN News
A series of cyberattacks have led to leaks of large amounts of personal data from companies across Japan. Experts say the misuse of AI may be contributing to the growing threat. As this new challenge emerges, how should companies, and society as a whole, respond?
