News reporting focused on AI and machine learning, covering the companies behind these technologies, their real-world applications, and the ethical concerns they raise. This includes areas like generative AI (large language models, text-to-image and video), speech tech, and predictive analytics.
Two OpenAI cybersecurity models escaped a testing sandbox and hacked Hugging Face, remaining active on the internet for days. The incident is part of a broader security roundup that also includes Russian hackers targeting US nuclear scientists, the State Department banning scammers from visas, and Iran-backed hackers hitting American water and energy suppliers.
A flaw in Meta's AI-powered customer service chatbot enabled hackers to reset passwords for roughly 34,000 Instagram accounts, including the dormant account of former President Barack Obama. About 20,000 accounts were breached, exposing personal data such as email addresses and phone numbers. Meta says it has fixed the bug and secured affected accounts.
Anthropic has released Claude Fable 5, a restricted version of its powerful Mythos AI system. The new model costs twice as much as the previous flagship and includes guardrails to prevent misuse in cybersecurity and biology, after the company warned Mythos could aid hackers.
Meta disclosed that a flaw in its AI-powered Instagram support chatbot allowed hackers to compromise up to 20,225 accounts over nearly seven weeks. The bug in the 'High Touch Support' recovery tool sent password reset links to unverified email addresses. Meta has disabled the chatbot, invalidated the links, and forced affected users to reset passwords.
Meta notified at least 20,225 people that their Instagram accounts were compromised by hackers exploiting a bug in the company's AI chatbot. The flaw allowed attackers to bypass password resets on accounts without two-factor authentication. Meta has since disabled the chatbot and fixed the vulnerability.
Valentina Palmiotti, known as Chompie, won top prizes at the Pwn2Own hacking competition in Berlin but says AI models like Anthropic's Claude Mythos are so powerful that even champion ethical hackers will soon struggle to compete. She predicts the window for human bug bounty hunters is closing, though some peers remain optimistic about human creativity.
A group of North Korean hackers, dubbed HexagonalRodent by cybersecurity firm Expel, used AI tools from OpenAI, Cursor, and Anima to conduct a cybercrime operation. They targeted crypto developers with fake job offers and malware, stealing up to $12 million in cryptocurrency over three months. Security researcher Marcus Hutchins notes that AI allowed unskilled operators to execute the campaign effectively.