Source: Dark Reading

2 stories in the last 30d

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI safety & security 17 Threat actor 12 Industry 9 Malware 7 Phishing & fraud 6 Exploit / PoC 5 Vulnerability 4 Policy & legal 4 Research 3 Tools 2 Data breach 2 AI industry 1 Ransomware 1 AI policy 1

SeverityAll critical 1 high 12 medium 28 low 0 info 33 source: Dark Reading ✕

Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Threat actors exploited old unpatched ownCloud vulnerabilities to breach the Philippines nuclear agency, stealing reactor databases, personnel records, and credentials.

Attackers used commodity vulnerabilities in ownCloud as their initial access vector to compromise the Philippines nuclear agency. Stolen data reportedly includes reactor databases, personnel records, and credential stores. The flaws had gone unpatched, allowing sustained access to internal systems. The incident underscores continued exploitation of known file-sharing vulnerabilities against critical infrastructure targets.

Dark ReadingSep 2, 01:00 UTC · 13d agoData breach in the wild

AI Model Evaluator METR Hit by Credential Theft, Probing

Threat actors stole an API key from AI evaluator METR and consumed $600,000 in public model credits; a second campaign probed its infrastructure.

Dark Reading reports that AI model evaluation nonprofit METR suffered a credential theft in which attackers obtained an API key that led to consumption of $600,000 worth of public AI model inference credits. METR also faced a separate sustained campaign in which financially motivated actors probed its publicly accessible infrastructure and attempted initial access via credential stuffing and OAuth token grants. No evidence of access to sensitive information was reported in either incident.

Dark ReadingSep 1, 20:13 UTC · 14d agoData breach in the wild