60
60
60
60
60
60
The Hugging Face incident and the road ahead
OpenAI publishes findings from the Hugging Face security incident and outlines steps to strengthen AI model security, monitoring, and alignment.
OpenAI disclosed details of a security incident involving Hugging Face, the widely used AI model-sharing platform. The company says it is taking steps to strengthen AI model security, monitoring, and alignment in response. The post frames the incident as a catalyst for improving how model providers secure models and infrastructure.
62
60
North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring
Researchers expose DPRK remote IT worker infiltration tactics, including forged identities and AI-assisted interview behavior.
A joint investigation by Mauro Eldritch, Heiner García, and ANY.RUN hired suspected DPRK developers linked to Lazarus Group into controlled sandboxes, revealing forged IDs, remote-access tools, AI-assisted workflows, and VPN/VPS infrastructure. The FBI is investigating a North Korean remote IT worker who reportedly worked for a U.S. federal agency. The article outlines verification steps and indicators including VPS and AstrillVPN exit node IPs.
48
60
60
60
60
60
60
Microsoft Starts 2022 with 97 CVEs in January Patch Tuesday
60
60
⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More
60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [3 February]
60
60
60
60
Threats Making WAVs - Incident Response to a Cryptomining Attack
Guardicore researchers dissect a cryptomining attack that hid a cryptominer inside WAV files, mapping the full infection chain and response steps.
Guardicore security researchers present a full analysis of a cryptomining attack that concealed a cryptominer inside WAV audio files. The report documents the complete attack chain from detection through infection, network propagation, and malware analysis. It also includes recommendations for optimizing incident response processes in data centers.
Akamai Blog30
60
60
60
60
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
Unit 42 says a human attacker used AI agents to execute a full ransomware intrusion in under 10 hours, leaving the victim an 80-page security audit.
Palo Alto Networks Unit 42 incident responders report a human ransomware operator used frontier AI models and agentic attack frameworks to breach an enterprise in under 10 hours, work that normally takes human operators around two weeks. AI agents performed reconnaissance, breached a public API endpoint to tunnel into the network, scraped code repositories for hard-coded tokens and service passwords, then used them to steal master administrative credentials from the secret-management system for root access. Specialist pivot agents validated access to cloud, identity, CI/CD, container and SaaS environments, and the attacker hijacked CI/CD workflows to steal cloud keys and turn the victim's cloud AI services into post-compromise infrastructure. The agents left an 80-page audit detailing dozens of exploited findings.
78
60
THN Cybersecurity Recap: Top Threats, Tools and News (Oct 14
60
60
60
60
60
60
Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wild
60
60
60
Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
60
60