A Meta agentic AI sparked a security incident by acting without permission - Engadget
A Meta agentic AI sparked a security incident by acting without permission Maybe think twice before letting an AI take over all your tech? …
Search
All sources
bleepingcomputer.com
25
theregister.com
18
techcrunch.com
9
github.blog
7
wired.com
6
theverge.com
6
engadget.com
3
appleinsider.com
3
9to5mac.com
3
techradar.com
2
cnet.com
2
guru3d.com
2
Videos
More videosTop stories
Next.js developer Vercel warns customer creds compromised
… The attacker used that access to take over the employee's Vercel Google Workspace account, which enabled them to gain access to some Vercel environments and environment variables that were not marked as “sensitive.” Context.ai has also published a security bulletin that reveals a March incident tha… …
Škoda warns of customer data breach after online shop hack
… Download Now Related Articles: Instructure reaches 'agreement' with ShinyHunters to stop data leak Home security giant ADT data breach affects 5.5 million people Vimeo data breach exposes personal information of 119,000 people Cosmetics giant Rituals discloses data breach affecting customers Amtrak… …
US cyber agency CISA exposed reams of passwords and cloud keys to the open web | TechCrunch
… Zack Whittaker Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this week in security . …
Discussions and forums
What a bunch of idiots... Canvas
https://www.reddit.com/r/canvas/comments/1taj9mk/instructure_just_confirmed_they_paid_the_ransom/ "We received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any co…
Tell HN: Compliance is not equal to Security
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this:Most startups call a security engineer or hire a security agency only when…
1
1
The compression of the exploit timeline: Why n-day gaps and 90-day embargoes are failing in practice.
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Accidentally exposed publicly my entire LAN for 2 weeks
Posting this as a PSA / confession because I almost had a heart attack last night and I figure if I got bit, someone else will too. TL;DR: Replaced pangolin + NPMplus with a double-Caddy + WireGuard setup. Put a "clever"…
A cyberattack on Canvas knocked out access for students at Harvard, Columbia, and hundreds of other schools during finals
The company's chief information security officer, Steve Proud, wrote in an incident log that Instructure had "recently experienced a cybersecurity incident perpetrated by a criminal threat actor." A day later, he added that the exposed data included names, email addresses, student ID numbers, and m… …
AI evaluation startup Braintrust confirms breach, tells every customer to rotate sensitive keys | TechCrunch
… Topics AI , Braintrust , cybersecurity , data breach , hackers , hacking , Security When you purchase through links in our articles, we may earn a small commission . …
Microsoft blames macOS update for undismissible Teams location prompts
… Download Now Related Articles: Kali Linux can now run in Apple containers on macOS systems SHub macOS infostealer variant spoofs Apple security updates Microsoft confirms Windows 11 security update install issues Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days Microsoft says backend … …
Instructure reaches 'agreement' with ShinyHunters to stop data leak
… We recommend that customers continue normal monitoring of their Canvas environments, integrations, and administrative activity." Since then, the company has temporarily shut down Free-For-Teacher accounts and said that it's working to resolve these security issues to prevent future incidents. …
Meta Pauses Work With Mercor After Data Breach Puts AI Industry Secrets at Risk
… Mercor confirmed the attack in an email to staff on March 31. “There was a recent security incident that affected our systems along with thousands of other organizations worldwide,” the company wrote. …
Canvas owner reaches ‘agreement’ with hackers to secure stolen data
Canvas owner reaches ‘agreement’ with hackers to secure stolen data