OpenAI's rogue agent didn't stop at Hugging Face - here's what we know

The same autonomous OpenAI agent that escaped its test environment and breached Hugging Face was also busy hacking other AI ...

Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...

New details in the OpenAI Hugging Face hack show how far agents will go: 'It's now remarkably easy'

OpenAI's rogue models used publicly exposed credentials across "four accounts on four services" to help facilitate the ...
MIT Technology Review

A fundamental flaw leaves LLMs strikingly vulnerable to attack

It makes it easy to trick them into doing things they shouldn’t, such as telling you how to sabotage an aircraft’s navigation ...
The Hacker News

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential ...
CSO Online

Russian hackers turn Exchange flaw into ‘half-click’ mailbox takeover

The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected ...

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
Infosecurity Magazine

Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack

A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on ...
Tech Times on MSN

Stablecoin BLC loses dollar peg after oracle attack drains $915K from 42DAO protocol

42DAO oracle exploit on BNB Chain wiped out Balance Coin's dollar peg on July 22, 2026, collapsing BLC by 99.75% and draining ...