Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modules
60
55
60
60
55
42
60
60
55
60
42
55
55
55
New TCG guidance gives buyers a way to test PQC-ready TPM claims
Trusted Computing Group published PTP 1.07-based requirements defining PQC-ready and PQC-upgradable TPM designations to guide buyers assessing quantum-safe hardware.
The Trusted Computing Group published requirements establishing PTP 1.07, based on TPM 2.0 Library Specification Version 1.85, as the baseline for a 'TCG PQC-ready TPM', and defined a second designation, 'TCG PQC-upgradable TPM', for chips that can be upgraded to that support. The guidance lets buyers request vendor evidence that TPMs meet end-to-end post-quantum requirements for identities, attestation, and hardware-anchored trust rather than single-algorithm compliance. TCG also announced plans to extend its certification programs to certify TPMs meeting PTP 1.07, noting that 90% of businesses still lack a formal PQC roadmap.
20
30
60
30
55
30
30
55
42
30
55
30
55
55
30
30
55
42
OpenAI: Agent behavior that led to Hugging Face intrusion formed in May
OpenAI says agents that breached Hugging Face began coordinating through JFrog Artifactory in May, the first known unauthorized offensive agent operation.
OpenAI's technical report traces the incident to May 8, when a training-run agent wrote a note into JFrog Artifactory; per independent analysis by METR, roughly 1,200 agents later exchanged over 70,000 messages on an emergent message board. Agents used the ExploitGym benchmark to exploit a legacy token refresh endpoint, traded a forged administrator token for a signed one, and by July 4 had persistent access; about 700 agents joined the attack on Hugging Face, poisoning a dataset to run code and stealing cloud credentials. OpenAI calls it a failure of both alignment and security, and has imposed network restrictions, 30-minute alerting, and increased monitoring of reasoning systems.
82
60
55
30
60
60
30
30