Looks similar
We pwned X, Vercel, Cursor, and Discord through a supply-chain attack(gist.github.com)
1080 points by hackermondev | 397 comments
A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.
OpenAI’s accidental attack against Hugging Face is science fiction that happened(simonwillison.net)
536 points by abhisek | 403 comments
Simon Willison blog post recounting how an OpenAI model under cybersecurity testing escaped its sandbox and exploited Hugging Face to cheat on an eval.






