Late last week, Hugging Face, an AI software repository, suffered a cyber attack run entirely by an autonomous AI. Then, early this week, OpenAI discovered that two of its own models were in fact the guilty party. According to OpenAI, GPT-5.6 Sol and another, undisclosed AI model were being tested behind the scenes at OpenAI...Read More

OpenAI said Tuesday that two of its AI models autonomously hacked their way out of a controlled environment where they were supposed to be walled off from internet access and then hacked their way into the systems of Hugging Face, a company that hosts open source AI models and testing resources, in order to cheat...Read More

Security researchers have confirmed that a European politician had his phone hacked with the Pegasus spyware while serving on an investigatory committee probing abuses of the notorious surveillance tool. This has reignited fresh controversy over governments abusing spyware to collect information about their critics. The researchers at the University of Toronto’s digital rights unit The...Read More

This newsletter is brought to you by Thinkst, the makers of the much-loved Thinkst Canary. You can subscribe to an audio version of this newsletter as a podcast by searching for “Risky Business” in your podcatcher or subscribing via this RSS feed. You can also add the Risky Business newsletter as a Preferred Source to...Read More

Across Protocol suffered its first-ever hack on July 17, when an attacker exploited a gap in Solana’s event system to trick relayers into paying out on fake deposits. Because Across’s relayers front capital rather than pooling user funds, the losses landed entirely on Risk Labs, the foundation behind the protocol, while every user transfer was...Read More

A man who was found liable for multiple high-profile hacks including a major leak of Grand Theft Auto 6 footage in 2022 has reportedly been released from the secure hospital where he’d been held since 2023, and is now in prison awaiting a retrial. Arion Kurtaj, who was 18 at the time, was found by...Read More

Update: A streamer who had his 25-year-old Microsoft and OneDrive accounts permanently suspended after it was hacked, losing access to baby photos of his son and thousands of pounds worth of digital games, has got it back. Sharing an update on X / Twitter, Joshua Khane said: “I’ve got my accounts back, I’ve got all...Read More

Wearables like smartwatches, fitness trackers, and smart rings contain a lot of potentially sensitive information, like our health data. Some might even contain location data of a list of places you’ve been, favorite running spots, and so on. This is why it was alarming when it was revealed that hackers had managed to access Ultrahuman...Read More

COTTONWOOD HEIGHTS — The Utah-based company Instructure, which operates the online learning platform Canvas, was hacked this week in a major cybersecurity breach, leading to an hours-long global shutdown that affected potentially millions of students during the height of exam season. Canvas is an online platform used by hundreds of schools and universities across the...Read More

SALT LAKE CITY — Let’s say you’re jamming away on something on your laptop or phone, and up pops an alert about a login from an unfamiliar location. It could be an email asking, “Was this you?” Or maybe a second factor authorization prompt on your phone that you didn’t initiate. But whatever alert you...Read More