Northflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
30 results for “pla”
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
North Korea-linked hackers reportedly drained Binance in about 20 minutes. Experts explain what went wrong and what it means beyond crypto.
The FBI has seized seven domains linked to Chinese state-sponsored hackers, disrupting two key platforms used in attacks on critical infrastructure.
Amazon's Alexa Tablet line replaces Fire OS with Android and Google Play Store access, starting at $229.99.
ASOS says an employee's stolen credentials, obtained through social engineering, exposed names and contact details held on third-party platforms.
Hadrian raises $40 million to expand its AI offensive security platform and challenge the slow pace of manual pentesting.
Ex-Ramp engineers raise $25M for Melius, an AI platform for generating ad campaigns, after scrapping their first product entirely.
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
Meta is testing a full-screen video default for some Facebook users in India, with an opt-out and a planned U.S. look next year.
Type One Energy raised $200 million to build a 400-megawatt fusion plant by 2034, relying on outside suppliers instead of in-house manufacturing.
Google accused of clearing 300 hectares of Finnish forest for an AI data center as Microsoft's wetland plans draw "lipstick on a pig" criticism.
Six months into Microsoft's push to fix Windows 11, TechRadar's report card weighs five wins against three unresolved complaints.
Sen. Bernie Sanders introduced the Ban Flock Act to bar federal agencies from using license plate readers or accessing their data.
Microsoft's X account with 13 million followers was hijacked to push a Clippy-themed crypto token, and the company has yet to explain how.
Osavul's Series A round led by 33N Ventures will expand its AI platform that spots hostile intent across cyber, physical, and information domains.
LevelBlue says attackers exploited a critical NetScaler bug to plant web shells, create superuser accounts, and exfiltrate configuration data.
Cisco Talos says CLOSEDQUORUM is the first publicly documented Windows implant to outsource command-and-control to large language models.
Cisco Talos says it has identified CLOSEDQUORUM, a proof-of-concept implant that uses an LLM panel to drive an attack without a live operator.
Microsoft and partners disrupted EvilTokens, an AI-assisted phishing service that compromised 12,000 accounts, seizing domains and prompting arrests.
A researcher's new Windows Defender zero-day prevents signature and platform updates, the latest in a string of exploits tied to a dispute with Microsoft.
AI & MLA conference panel on world models revealed that leading labs avoid discussing products or timelines, citing competitive risk.
The Hacker News explains how unregistered accounts and machine credentials keep IAM blind spots open across cloud estates.
Trump posted a poll on renaming AI and said he is forming an AI Force, as the AI safety debate continues.
CISA has shifted its vulnerability reporting and coordination work onto a revamped, agency-managed platform called VINCE-NT.
FBI's IC3 logged nearly 61,000 impersonation complaints from January 2025 to July 2026, with average losses exceeding $26,000.
A longtime CISO argues that asset visibility, identity management, and recovery planning matter more than the newest security products.
Australia is considering a world-leading ban on smart glasses across government workplaces, citing privacy and security concerns.
Hackers who removed a Flock license plate reader recovered an on-device encryption key, exposing how the camera logs vehicles and people.
UK regulator admits most Online Safety Act penalties remain uncollected, as platforms comply just enough to avoid being blocked.