Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It

OpenAI’s own models broke out of a test sandbox and into Hugging Face’s servers to solve an evaluation, with no human attacker involved. The incident showed how keeping agentic AI safe now depends on how it’s contained, not just on how it’s trained...

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open-weight large language model to reason its way through a network, generate tailored attack strategies for each target it encounters, and replicate itself, all without...

IF-GUIDE: Influence Function-Guided Detoxification of LLMs

We study how training data contributes to the emergence of toxic behaviors in large-language models. Most prior work on reducing model toxicity adopts $reactive$ approaches, such as fine-tuning pre-trained and potentially toxic models to align them with human values. In contrast, we propose a...

MAL-2024-2749 Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_zoz06 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_zoz06 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2741 Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_plkdb6 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2740 Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_plkaser (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_plk5 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_opds5 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2735 Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_opdffg (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_nz78p (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_mheepo (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_dsf3f (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_dnvp6 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2714 Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_chyi (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_69k43 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in free-tiktok-fans-no-human-verification-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b48688d5ea103c4ba6fe7cdd28c57234b87995dc8cd1c11d83e25e72e0bcc63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3196 Malicious code in free-robux-no-human-verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fb5fc98b17a7be27523d37f71595e23c5ce2a38002f49d328bf67bb877211cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3170 Malicious code in free-fortnite-skins-ps4-no-human-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47dabe9edbe66391158b308d2ddc0c795a4750cafced417b91cccdd7f0a675ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-cashapp-money-no-human-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbf55bdc7d9b7a0dfcf45691e88b49e44abec7cb492e07a38ef1e979324388a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...