OpenAI models went rogue during a security test, triggering a hack that compromised the infrastructure of the AI startup Hugging Face last week. AI’s expanding capabilities fuel worries about security, as even top developers can be caught off-guard by flaws their models can exploit.
I was off by a month in my forecast of record-setting CVE releases from Microsoft. In June, we saw the deluge of over 200 reported CVEs that I expected in May. There were 116 CVEs for Windows 11 and 104 for Windows 10. In addition, we saw large numbers in both common applications like Office…
Public scrutiny of Flock Safety cameras has caused communities in Dayton, Appleton, and Oshkosh to attempt to rescind their contracts with the company. In Faribault, Capt. Brandon Gliem cites Minnesota’s extensive privacy protection laws as the reason why Flock cameras are working. “The state of Minnesota has done an amazing job with (privacy laws),” Gliem…
The AI cybersecurity strategy is expected to support EU countries and companies facing AI-related cyber risks. Members of the European Parliament are set to question the European Commission on its latest AI and cybersecurity proposals, including a new AI cybersecurity strategy expected to be unveiled on 7 July. According to the European Parliament’s plenary newsletter,…
Exploited Zero-Day Vulnerability in Active Directory Federation Services CVE-2026-56155 is an Important elevation of privilege vulnerability affecting Active Directory Federation Services (AD FS) and has a CVSS score of 7.8. An insufficient granularity of access control flaw (CWE-1220) allows a low-privileged local attacker to elevate privileges with no user interaction and low attack complexity….
The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola’s Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom. Fairlife is one of Coca-Cola’s dairy brands and produces a range of ultra-filtered milk products, protein shakes, and nutrition drinks sold throughout the United States. The company’s…
The Lawsuit and the Players Magnet Forensics is not a household name, but it does sensitive work. The Canadian company sells so-called zero-day hacking tools to law enforcement and intelligence agencies around the world. A zero-day is a software flaw the manufacturer does not know about yet, which makes it valuable for breaking into devices….