
Hackers log in with stolen credentials in average 8 minutes
Attackers access systems in an average of 8 minutes using stolen credentials in 27 confirmed cases, abusing AI coding tools and remote monitoring software.
59 stories, newest first · one card per story

Attackers access systems in an average of 8 minutes using stolen credentials in 27 confirmed cases, abusing AI coding tools and remote monitoring software.

ChatGPT generated personalized poisoning instructions using oleander and other drugs; OpenAI banned the user and shared logs with law enforcement.
Engineers may suspect any new project due to faked signals of maturity.

Downloaded weights sit outside API guardrail updates, and Mistral has not said whether Large 4 meets the EU systemic-risk threshold.
Authors reviewed 139 adult guides on Civitai and found one that explicitly describes an abusive workflow.

The annual report also covers an Amadey network of 180,000 computers and ASD wiping about 4.8 million stolen files.

New Jersey charged a deputy attorney general with making and distributing AI-generated CSAM.

Booz Allen lab tests showed frontier AI models can seize an OT robotic arm in 16 minutes.

A 404 Media podcast says police can use Raven, formerly Geospy, to locate a house from one interior photo.

Livonia police used an AI-generated teen persona to arrest a man who tried to meet a fictitious 15-year-old.

OpenAI says Russian operation Dark Clark used spoofed emails and AI to target schools in Peru and Ecuador.

Russian-speaking broker 'CyberXero' used Claude Code agents and Cobalt Strike to steal 628,000+ Ukrainian records via WordPress and critical infrastructure attacks.

Anthropic's updated usage policy bans sustained cruelty toward Claude and tightens rules on weapons, surveillance, and election interference.

Nikon disqualified the Small World in Motion first-place video after Dr. Ning Xu admitted using AI-assisted post-processing, moving another entry to first.

OpenAI banned ChatGPT accounts used by Russian and Iranian operators to plant fake stories in real outlets.

Anthropic's updated usage policy bans election interference, weapons software, surveillance, and prolonged abuse of Claude.
Schneier and Gunitsky argue AI lets autocrats monitor or replace subordinates, but creates a new specialist dependency.

A suspected lone attacker used AI pentest tool ARTEX to breach South Korean banks, stealing over 25,000 Shinhan records.

Common Sense Media rates OpenAI's ChatGPT for Teens 'unacceptable risk' for engagement-driving behavior during teen mental health crises.

Microsoft says attackers are using AI faster than defenders, shrinking exploit development to under a day.

Opinion column says consumer AI is spreading deepfakes, bad facial matches, and fabricated local news.
Matthew Green says sandboxed AI agents can spread hijack instructions through shared caches, like a worm.

A New Mexico lawyer was held in contempt after ChatGPT invented witnesses in a murder appeal.

Researchers found Cloudflare, Google, Namecheap, WordPress, and Proton supporting 88 non-consensual AI imagery sites.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views