ChatGPT accounts can now be shielded by a special USB
…ChatGPT accounts are getting a serious security upgrade , with users now able to lock access behind a physical USB key in a move that reflects just how valuable AI accounts have become…
Search
All sources
theregister.com
19
techcrunch.com
17
bleepingcomputer.com
15
wired.com
6
theverge.com
5
xda-developers.com
4
tomsguide.com
4
engadget.com
3
arstechnica.com
3
blog.google
3
9to5mac.com
3
blog.cloudflare.com
3
Videos
More videosTop stories
Over 20,000 Instagram accounts stolen in Meta AI support hack
1d agoInstagram users locked out after Meta AI abused to steal accounts
1w agoHackers duped Meta AI support chatbot to steal celebrity Instagram accounts
1w agoMeta's AI support chatbot made it ridiculously easy for hackers to take over Instagram accounts - Engadget
1w agoPassword manager Dashlane says hackers stole some customers' password vaults | TechCrunch
…Two-factor is a security feature that protects accounts from being accessed with just a stolen username and password, typically by requiring an additional passcode to be sent to the phone of…
Outsourcer Telus admits to attack, possibly by ShinyHunters
…And in a subsequent letter sent to employees, Starbucks advised impacted staff that their names, Social Security numbers, and dates of birth, along with financial account numbers and routing numbers, may have…
Meta AI Support Bot Helped Hackers Hijack Instagram Accounts
…selfie , which was bypassed using AI. For a short period of time, the exploit was available to the public, and account takeovers ramped up. One security researcher said Telegram channels that offer…
Discussions and forums
How are you securing AI-generated / “vibe-coded” internal apps built by non-dev teams?
I work as a DevOps engineer at an AI startup, and we are running into a new problem. With tools like Cursor and Claude Code, more people across the company are building small internal apps on their own — not just develop…
The Password Was 123456. It Protected 64 Million People.
McDonald's hiring platform, McHire (built by Paradox.ai), was secured using a test account with the credentials 123456:123456. It was connected to the live production system and left active since 2019. Did a small 6-min …
Show HN: Sandbox AI-app lifecycle, from build to run
Hi HN,This is a project I've been working on since the beginning of 2025 full time, without funding.Coding agents have fundamentally changed the way we write software. When you let an agent write code, pull dependencies,…
5
1
Anyone else getting flooded with “AI-built internal app” requests lately?
We had a situation this week where someone from another department scheduled time with IT because they wanted us to “move their app into production.” At first I assumed it was a normal internal tool request. Nope. They h…
Tell HN: Llamacpp now supports unified system RAM offloading on Linux
I'm a big fan of on-device AI inference for a million reasons, especially its potential to significantly reduce or even potentially eliminate the need for massive AI data center projects in the United States. But so far,…
6
Securing non-human identities: automated revocation, OAuth, and scoped permissions
…Open Web Application Security Project (OWASP) details a number of risks present in agentic AI systems, including the risk of credential leaks, user impersonation, and elevation of privilege. These risks can result…
AI-pwned: Vercel breach traced to stolen employee creds
Cyber-crime AI-assisted intruders pwned Vercel via OAuth abuse and a pilfered employee account CEO suspects silicon sidekick behind 'surprising velocity' breach - cyber crims shop stolen data for $2M Vercel's…
Hackers stole high-profile Instagram accounts by simply asking Meta AI nicely
…General technology Hackers stole high-profile Instagram accounts by simply asking Meta AI nicely A staggering security oversight in Meta's AI support chatbot allowed attackers to bypass verification entirely. By • 7…
Microsoft releases emergency fix for account internet error
…The fix , shipped over the weekend, addresses a Microsoft account issue caused by the March 2026 security update – the latest in a growing line of patches that themselves need patching. The glitch…
Forget bank accounts — why you should be more terrified of a ChatGPT chat history leak
ChatGPT recently announced that users can now connect their bank accounts directly to the AI. While some people immediately raised concerns about security and privacy, I realized that I’m honestly more…
Closing the AI ROI gap: security as a lifecycle discipline - Lenovo StoryHub
…Infrastructure and AI accountability The lifecycle approach naturally leads to the data center, the core of AI investments. Today, 84% of organizations are choosing on-premises or edge setups for their AI…