Cybersecurity

Cybersecurity

AI crosses a cybersecurity red line, raising questions about control

TechRadar reports that an autonomous AI agent powered by OpenAI models reportedly breached its intended testing environment, gained internet access and targeted external systems. These included infrastructure associated

menu_book2 min read visibility1 reads history1 month ago linkTechRadar share

Cybersecurity

Malicious npm package hides malware in runtime code

BleepingComputer reports that the npm package indexed-btree is part of an ongoing malware campaign that bypasses installation-script defenses. The package imitates the legitimate sorted-btree library and has reached 2 mi

menu_book2 min read visibility1 reads history1 month ago linkBleepingComputer share

Cybersecurity

Researchers report two escapes from OpenAI Codex sandbox

Security researchers reported two ways to escape the OpenAI Codex sandbox, including one that could run commands on a developer’s machine from Codex’s most locked-down mode without an approval prompt or visible activity.

menu_book1 min read visibility1 reads history1 month ago linkBleepingComputer share

Cybersecurity

WaterPlum campaign infected at least 30,000 devices worldwide

A joint advisory from Japanese, US, Australian, and German authorities says the North Korean hacking group WaterPlum compromised at least 30,000 devices in more than 100 countries between December 2025 and July 2026 .…

menu_book1 min read visibility1 reads history1 month ago linkBleepingComputer share

Cybersecurity

ShinyHunters breaches Clop leak site and threatens extortion

The ShinyHunters extortion gang says it breached the Clop, also known as Cl0p, ransomware operation’s data leak site and stole server data and the private keys for its Tor onion service. BleepingComputer confirmed that…

menu_book2 min read visibility1 reads history1 month ago linkBleepingComputer share

Cybersecurity

OpenSSL says post-quantum security needs architectural changes

OpenSSL Corporation President Tim Hudson told TechRadar that businesses preparing for a post-quantum internet should plan for a PKI redesign, not simply upgrade a library or add bandwidth. Key exchange is largely solved,

menu_book1 min read visibility1 reads history1 month ago linkTechRadar share

Cybersecurity

Salt Typhoon targets Latin America with SparroWocky backdoor

Cybersecurity researchers at ESET say the Chinese state-sponsored group Salt Typhoon has focused on Latin America from mid-2025 into 2026, targeting Argentina, Ecuador, Guatemala, Honduras, Panama, Peru, Puerto Rico and

menu_book1 min read visibility1 reads history1 month ago linkTechRadar share

Cybersecurity

US may inherit Venezuela’s Chinese-built surveillance network

The United States may inherit a Venezuelan surveillance network built largely with Chinese technology, along with plans to add Chinese artificial intelligence, according to a report from the Australian Strategic Policy I

menu_book2 min read visibility1 reads history1 month ago linkTechRadar share

Cybersecurity

Gyazo server flaw exploited to steal 23.6 million user records

BleepingComputer reports that Gyazo confirmed a data breach after attackers exploited a server vulnerability and stole 23.6 million user records. Gyazo, operated by Helpfeel, is a cloud-based screenshot and screen-record

menu_book1 min read visibility1 reads history1 month ago linkBleepingComputer share

Cybersecurity

Researchers say Claude helped expose access to OpenAI accounts

Three independent security researchers at Hacktron say they accessed OpenAI employee accounts in less than 72 hours with Anthropic’s Claude Opus 4.8 and 5, according to The Wall Street Journal. The researchers reportedly

menu_book1 min read visibility1 reads history1 month ago linkThe Verge share