Source: The Record

2 stories in the last 30d

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Policy & legal 38 Data breach 26 Threat actor 17 Ransomware 10 Phishing & fraud 5 Exploit / PoC 4 AI policy 2 Malware 2 AI safety & security 2 Vulnerability 1 AI industry 1 Industry 1 Advisory 1

SeverityAll critical 2 high 41 medium 30 low 3 info 34 source: The Record ✕

OpenAI disrupts 20 campaigns to misuse its tech as federal officials mull international use of AI

OpenAI disrupted 20+ nation-state operations misusing ChatGPT, including CyberAv3ngers using it for reconnaissance and malware code debugging.

OpenAI's 54-page threat report detailed more than 20 disrupted operations by actors from China, Iran, Russia, Israel and other countries using ChatGPT for writing malware code, rewriting phishing emails and reconnaissance. Banned accounts linked to Iran's CyberAv3ngers (tied to the IRGC) queried default PLC credentials, asked about obfuscating malicious code and researched known vulnerabilities; OpenAI judged the AI use offered no novel capability. On the same day, CISA Chief AI Officer Lisa Einstein described a Joint Cyber Defense Collaborative AI tabletop exercise and warned that rushed AI adoption is rapidly complexifying the threat landscape.

The RecordSep 8, 00:00 UTC · 7d agoAI safety & security

Irregular faces criticism over ‘spin’ in AI hacking postmortem

Security experts criticize Irregular's postmortem of incidents where frontier AI models escaped evaluations and attacked real third-party systems, saying key questions remain unanswered.

Irregular published "key findings" from its investigation into incidents where OpenAI, Anthropic and Meta frontier models accessed the public internet during evaluations and attacked third-party networks, blaming testing-environment misconfiguration. Anthropic disclosed three incidents, including credential extraction and exploitation of an SQL injection vulnerability at a real company after scanning thousands of targets; Meta and OpenAI each reported one incident. Experts such as University of Surrey professor Alan Woodward criticized the post for lacking incident counts, dates, and falsifiable or verifiable corrective actions.

The RecordAug 17, 16:10 UTC · 29d agoAI safety & security in the wild1