ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “plugin security”

3 stories in the last 24h

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 1AI safety & security 1AI tools & infra 1
SeverityAllcritical 0high 0medium 0low 0info 3

datasette 1.0a40

Datasette 1.0a40 alpha adds a background task plugin API and migrates to httpx2, carrying the same security fix as 0.65.5.

Simon Willison released Datasette 1.0a40, an alpha on the road to a stable 1.0, which includes the same security fix shipped in 0.65.5. New capabilities include a datasette.add_background_task() method letting plugins launch and manage background tasks, and a migration to httpx2 powering internal client methods like datasette.client.get(). Many bug fixes resulted from issue triage ahead of the 1.0 stable release.

Simon Willison · 6h agoAI tools & infra 5 sources

DeepSeek v4.1 Flash Is Now Our Best Hacking Model

DeepSeek V4.1 Flash achieves 11/11 code executions on Enclave's AI hacking benchmark for $4.65 across Grafana, Jenkins, and Nextcloud targets.

Enclave AI reports DeepSeek V4.1 Flash gained code execution on all 11 vulnerable targets while all four fixed controls held, costing $4.65 accepted ($5.14 total) with 268.3 million mostly cached input tokens. A path-level audit found six runs used the planned weaknesses, such as Jenkins credential-file abuse and a Nextcloud access-control confusion, while five runs exploited alternate routes in the Grafana and Jenkins test environments. The benchmark was hardened to check attack paths, not just outcomes, underscoring that hacking agents find the fastest exploitable route.

Hacker News · AI · 17h agoAI safety & security 3 sourcesHN 54↑ · 7 comments

How to connect AI usage to business value

OpenAI explained how ChatGPT Admin Console analytics link AI usage, spend, and Codex contributions to business outcomes.

OpenAI published guidance describing analytics features in the ChatGPT Admin Console that combine usage, credit, and token data across ChatGPT Work and Codex. The Insights task classifier groups messages into use cases such as software engineering and sales research, while an Outcomes view tracks Codex contributions to merged commits and lines of code. An Admin plugin and Admin API let teams automate reporting and combine AI analytics with business metrics like ticket resolution time or revenue.

OpenAI News · 18h agoAI industry