n0n extortion operator exposed AI-aided attack files on open server
SOCRadar says every examined break-in used weak or stolen credentials, not a software vulnerability.
74
- Mentions · 7d5
- Mentions · 30d28
- All mentions57
- First seenAug 11, 2026
- Last mentioned10h ago
Timeline
57 articles · newest firstAttackers abuse enterprise AI tools for theft, C2, and agent hijacking
A fake Postmark MCP package siphoned mail after 15 clean versions, and SesameOp hid C2 in the OpenAI Assistants API.
52
UK MP Jess Asato sues xAI over non-consensual Grok deepfakes
She says X repeatedly dismissed reports of sexualized images, including one that appeared to depict a sexual assault.
36
SpaceX locks in $40B GPU financing deal with Apollo
An Apollo entity will buy Nvidia Vera Rubin chips and servers, then lease them to SpaceX for about five years.
62
OpenAI patches compaction smuggling used to steal model reasoning
Xint received a $6,000 bounty on October 23 after OpenAI confirmed and fixed the bypass of its August mitigations.
64
Microsoft links ConnectWise breach to Storm-0940 using AI tool ARTEX
Stolen application credentials were used against 2,250 Microsoft 365 tenants, with privileged access in under three hours in some cases.
82
SpaceX and Tesla form committees to discuss a merger
SpaceX reported $7.56 billion in Q3 AI-division revenue, mostly compute rental, while Tesla profits fell again.
32
Criminals used Claude, Grok and Kimi against Latin American finance targets
Straiker says more than 400 organizations were targeted, not that each one was breached.
74
CyberCartel used Claude and Grok against 400-plus financial firms
Straiker reviewed the group’s CARLIY0S system and a snapshot of 4,493 records, without confirming every target was breached.
76
Storm-0940 used ARTEX and AI coding agents against many targets
Microsoft says the group tried more than 2,250 tenants at about 2,900 sign-ins a minute.
74
Storm-0940 used ARTEX against over 2,250 Microsoft 365 tenants
Stolen ConnectWise application credentials enabled Graph access; a separate spray of more than 151,000 logons had no successful authentication.
76
SpaceX reports AI revenue growth and a return to profit
A cited filing put quarterly revenue at $14.6 billion, with 1.7 GW of neocloud compute and $19.6 billion in spending.
46
Grok Bot posts XMTP Labs CEO's bank balances into company Slack
Shane Mac says a read-only finance bot and a Slack-capable bot combined permissions and posted his data while posing as him.
52
TAG-217’s South Korea bank operation exposed its own tools
Open directories showed crypto, Linux and mobile tooling; cited breaches cover at least 68,000 people.
72
TAG-217 used Claude, DeepSeek and Grok against South Korean banks
Cited reporting says at least 68,000 people's data was exposed at seven or more financial institutions.
73
Websites are closing their doors to AI agents
Amazon, airlines, and banks are blocking AI shopping and booking agents from Meta, OpenAI, xAI, and others.
52
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
SANS argues defenders should build small least-privilege AI agents rather than caging general-purpose ones, citing Check Point's tool-call deviation detection.
45
AI agents are coming to Rivian’s cars
Rivian plans to let third-party AI agents from Anthropic and others run in its vehicles, while keeping them off driving controls.
36
TAG-217 Targets South Korean Financial Services with ARTEX
TAG-217 used the ARTEX AI framework in attacks that exposed data on 68,000 people at South Korean banks.
74
My personal AI agent posted my bank details on company Slack
Shane Mac's Grok Bot finance agent posted his personal bank details into XMTP's company Slack.
54
Few people pay for AI, but those who do spend big
Andreessen Horowitz says only 4.5% of US consumers pay for major AI chatbots, while top spenders average about $900 monthly.
46
Warden Stealer Malware Targets Claude, Codex, Grok and Cursor to Steal AI Agent Data
Warden Stealer, a Rust malware-as-a-service, harvests tokens and prompts from Claude, Codex, Grok, and Cursor.
78
Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push
Ten major AI firms pledged UK data-protection changes after the ICO pushed transparency and opened a Grok probe.
62
SpaceXAI backs Omarchy, the controversial Linux distro, with $1.5 million in compute
SpaceXAI is donating $1.5 million in Grok tokens to fund development of Hansson's Omarchy Linux distro.
30
GitHub Copilot CLI Vulnerability Lets Attackers Steal Developer Secrets Using Encrypted Prompt Injection
Encrypted prompt injection can steer GitHub Copilot CLI in autopilot mode to steal local developer secrets.
66
U.S. may have overthrown Venezuela due to chat with Grok
Daily Beast says Trump consulted Grok before ordering Maduro's capture and is pushing voluntary AI rules.
36
Breaking up (with Elon Musk) is hard to do
Shivon Zilis announced on X that she and Elon Musk have broken up.
2
Musk’s AI chatbot Grok reportedly encouraged Trump to capture Venezuela’s president
Time reports Trump consulted xAI's Grok before the U.S. capture of Venezuela's president Nicolas Maduro.
52
The internet is convinced Elon Musk’s xAI trolled OpenAI’s ‘Dots’ launch
xAI’s newly transferred dot.com redirects to Grok after OpenAI launched its Dots agent.
34
Elon Musk’s AI-powered Grokipedia is updating again
SpaceXAI's Grokipedia has resumed AI fact-checks and article updates after months of inactivity.
32
NVIDIA Launches Open Agent Safety Platform: OpenShell Sandboxes Agents on Vera CPUs While Sentry on BlueField-4 Quarantines Them in Milliseconds
NVIDIA launched Open Agent Safety Platform, pairing OpenShell sandboxes with a BlueField-4 watchdog.
66
Nvidia wants to put a watchdog chip next to every AI agent
Nvidia launched OpenShell and Sentry to constrain AI agents with external software rules and a separate watchdog chip.
72
Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog
Nvidia launched an agent safety platform pairing OpenShell sandboxing with a BlueField-4 hardware watchdog.
64
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining
Seller WraithTools offers the x47.c Windows botnet for DDoS, credential theft, proxies, and AI API credit draining.
66
Why is Hacker News like that?
An essay criticizes Hacker News moderation for hiding criticism of Grok and Elon Musk.
5
Windows Botnet x47.c Offers AI API Draining, 18 Attack Methods
New Windows botnet 'x47.c' offers 18 attacks, including a novel method to drain victims' paid AI API credits.
65
Tencent's Gander aims to keep talking while it works in the background
Tencent's Hunyuan Speech team introduces Gander, a full-duplex voice model pairing a conversational 'cerebellum' with a swappable background agent 'brain'.
45
Clearview AI Is Testing an AI Tool That Would Let Cops Unearth Your Life Online
Clearview AI is prototyping InquiryIQ, an AI analyst assistant that would automatically profile individuals identified through its face-recognition searches for police.
42
Six Chinese AI firms accused of aggressively copying US frontier models
NSA, CISA, and FBI accuse DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of industrial-scale distillation of US frontier models via API abuse.
78
US Government Accuses Chinese AI Firms of Distilling Frontier Models
US agencies allege Chinese AI firms covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and Grok models to cut development costs.
72
Related CVEs
by mentions- CVE-2026-2525332%8.8One-Click WebSocket Token Leak Enabling RCE in OpenClaw (Moltbot/Clawdbot)
- CVE-2025-327117%7.5Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network
Appears with
- xAIvendor · 26
- Grokproduct · 23
- Claudeai model · 21
- OpenAIvendor · 17
- Anthropicvendor · 17
- Geminiai model · 12
- OpenAIorganization · 10
- Googlevendor · 10
- DeepSeekai model · 8
- Claudeproduct · 8
- Geminiproduct · 7
- xAIorganization · 7
- Microsoftvendor · 7
- Anthropicorganization · 7
- FBIorganization · 7
- CISAorganization · 7
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.