Critical vulnerability in AI coding platform Base44 allowing unauthorized access(wiz.io)

106 points by waldopat 1 year ago | 68 comments

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 9 months ago | 27 comments

Data accidentally exposed by Microsoft AI researchers(wiz.io)

661 points by deepersprout 3 years ago | 212 comments

Wiz Research blog post describing how a misconfigured Azure SAS token in a Microsoft AI GitHub repository exposed 38TB of internal data, including Teams messages.

PHP2Shell: AI uncovers critical RCE in PHP(wiz.io)

398 points by danlark1 5 days ago | 184 comments

Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.

TeleMessage, used by Trump officials, can access plaintext chat logs(micahflee.com)

203 points by micahflee 1 year ago | 53 comments

CosmosEscape: Taking over Every Database in Azure Cosmos DB(wiz.io)

45 points by uvuv 2 months ago | 12 comments

Anthropic’s paper smells like bullshit(djnn.sh)

1070 points by vxvxvx 11 months ago | 300 comments

Blog post criticizing Anthropic's report on disrupting an AI-orchestrated cyber espionage campaign; the captured page shows a Cloudflare block screen.

Disrupting the first reported AI-orchestrated cyber espionage campaign(anthropic.com)

341 points by koakuma-chan 11 months ago | 261 comments

Anthropic news post describing how it detected and disrupted a cyber espionage campaign largely orchestrated using its Claude AI model, with a linked full report.

Hacker wipes Romania's land registry database(news.risky.biz)

677 points by speckx 3 months ago | 380 comments

Risky Bulletin security newsletter reporting a hacker wiped Romania's land registry database, plus news on Graykey, Hugging Face hack, and WordPress RCE.

Cryptographers solve decades-old privacy problem(nautil.us)

324 points by Brajeshwar 2 years ago | 124 comments

Nautilus article by Madison Goldberg on cryptographers' advance toward fully private database lookups and internet searches (private information retrieval).

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

I found a Vulnerability. They found a Lawyer(dixken.de)

831 points by toomuchtodo 8 months ago | 381 comments

Blog post by a diving instructor and platform engineer recounting how reporting a security vulnerability led to a legal response from the affected organization.