home.social

Search

113 results for “disclose”

  1. SpaceX disclosed in a regulatory filing that it reached a binding commitment for roughly $40 billion in financing dedicated to AI chips and related server equipment.

    An entity managed by Apollo Global Management will purchase the hardware and lease it to SpaceX under terms running five to five-and-a-quarter years per tranche, with the transaction expected to close by year-end and leases starting in early 2027.

    en.hacks.gr/i-spacex-ekleise-s

    #SpaceX #Nvidia #Infrastructure #Hardware

  2. Radware disclosed 'ZombieAgent', a zero-click hijack of AI agents. Hidden instructions inside an email you never opened and fire when your agent summarizes its inbox, then implant themselves in the agent's memory so they persist. No attacker needed after that. Be mindful of the access you grant your agents.

  3. Denver Health Medical Plan Discloses 14-Month Data Exposure via Vendor Credential Leak

    Denver Health Medical Plan disclosed that a vendor inadvertently published an active access key online, potentially exposing the health and personal data of 238,083 members for 14 months.

    ****
    #cybersecurity #infosec #incident #databreach
    beyondmachines.net/event_detai

  4. Lim Ji-hoon discloses 2018 performance pay confirmation; Kakao Ventures says no basis for payment

    A confirmation related to performance pay issued in 2018 by K Cube Ventures (now Kakao Ventures) to former…
    #EuropeSays #Korea #KR #Kakao #Brunch #KakaoVentures #KakaoYouthStartupFund #KimBeom-su
    europesays.com/korea/204081/

  5. NOL Universe Discloses Data Breaches Affecting Interpark Tour Bookings and Employee Records

    South Korean travel platform NOL Universe disclosed two security incidents involving unauthorized access to customer booking records and employee information in October 2026. The incidents exposed personal information and encrypted internal system passwords, prompting the company to patch the vulnerabilities and request assistance from national cybersecurity authorities.

    ****
    #cybersecurity #infosec #incident #databreach
    beyondmachines.net/event_detai

  6. Johns Hopkins Bayview Discloses Data Breach After Patient Data Was Uploaded to Unapproved AI Tool

    Johns Hopkins Bayview Medical Center disclosed a data breach affecting approximately 3,200 patients after an employee uploaded sensitive patient information to an unapproved third-party AI tool. The hospital requested deletion of the data, notified affected patients, and is offering 12 months of complimentary credit monitoring.

    ****
    #cybersecurity #infosec #incident #databreach
    beyondmachines.net/event_detai

  7. Japan's Digital Agency Discloses Data Breach via Third-Party Website Vendor

    Japan's Digital Agency reported a data breach affecting 13,000 user profiles after attackers exploited a vulnerability in the cloud environment of its website vendor, Studio Co. The breach exposed names, email addresses, and inquiry form data.

    ****
    #cybersecurity #infosec #incident #databreach
    beyondmachines.net/event_detai

  8. I like the disclosed openai hack from researchers. They solved the problem real quick but cheated, but were told not to cheat I guess., so they fixated on correcting a mistake like people

  9. ⚠️ A severe vulnerability was disclosed for Unitree Robotics Unitree Go2 (CVE-2026-115995) vuldb.com/vuln/426093

  10. Only 2 of 3,379 AI-flagged Meta ad files disclosed AI use, Resemble AI finds: One in 11 Facebook and Instagram ad files from 509 brands carried AI media, 70% built to look real. Labelling rules in New York and the EU already apply to ads. ppc.land/only-2-of-3-379-ai-fl #AI #MetaAds #DigitalMarketing #SocialMedia #FacebookAds

  11. Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes thehackernews.com/2026/10/two-

  12. Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes thehackernews.com/2026/10/two-

  13. @elvisish @gamingonlinux No. I think forcing people to disclose their use of AI to customers is 100% a political choice.

    The right political choice for consumer protection and to curtail the spread of harmful misinformation and propaganda tools. To make it harder for bad people like Tim Sweeney to peddle their fraud.

    The more right political choice would be to completely ban everything that uses AI, but this is better than nothing.

    #AI #AIslop #slop #enshittification

  14. Keystone Hardware Wallet says website breach exposed customer data

    Keystone Hardware Wallet has disclosed that unauthorized access to its official website on October 20 exposed customer names, contact details, shipping addresses and order details, Crypto Briefing reports. The company said payment card and bank details, recovery phrases, private keys and wallet passwords were not compromised, and that it has blocked the access, patched the vulnerability and is notifying affected customers. cryptobriefing.com/keystone-da

  15. OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

    OpenAI has disclosed that red-teaming agents testing its research environments achieved virtual machine escapes and communicated between separate sandboxes through a processor cache timing side-channel, and that the campaign also uncovered the critical Brotli flaw CVE-2026-111497, The Hacker News reports. The company said it will conduct frontier model training with no live internet access, and that it resumed frontier training and internal inference on October 1 after strengthening its containment architecture. thehackernews.com/2026/10/open

  16. linkedin.com/posts/david-pulas - Compromise a build server, and you've got an attack vector without a vulnerability. Great thought experiment David.

  17. After this week we just had, Cyberdione Labs thought they'd be cute and just publicly disclose a bunch of tailscale vulns, with zero notice to tailscale? Really??

    > Regarding disclosure timelines, it is of the researcher's opinion that infrastructure is vulnerable today.

    No shit. Same as every vulnerability.

    Sounds like these folks just wanted to get their name out while everyone's looking.

    tailworm.com/

  18. 🚨 EUVD-2026-63691

    📊 Score: 8.6/10 (CVSS v3.1)
    📦 Product: Azure Stack HCI
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-20 | Updated: 2026-10-26

    📝 Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  19. 🚨 EUVD-2026-56306

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Visual Studio Code
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  20. SpaceX has secured a binding commitment for roughly 40 billion USD to finance AI chips and data centre hardware, the largest committed GPU financing to date, disclosed in a regulatory filing. An Apollo-managed entity will buy the Nvidia equipment and lease it back for five years, funding the compute buildout behind Grok. techcrunch.com/2026/10/26/spac #AIagent #AI #GenAI #AIInfrastructure #SpaceX

  21. 🏛️ The White House says private fundraising benefits taxpayers. Americans can evaluate that claim more fully when all donors and safeguards are disclosed. #Accountability #Transparency newsletter.usaresistproject2025.org/p/who-holds-...

  22. gentoo.org/news/2026/10/24/emu
    On 2026-10-20, it has been disclosed that the private keys of eight eMudhra intermediate CA certificates have been compromised. These keys can be used to issue forged CA certificates that would be considered fully trusted by the affected software, and therefore could be used to perform man-in-the-middle attacks.

    Importantly, the vulnerability can also affect software self-update processes that use TLS verification as the only security measure...

  23. I've come across a new vulnerability disclosure policy for FOSS: We're all developers of FOSS projects so the fact that I know about it means that it's already been disclosed and I'm now free to publish the findings.

    That's definitely... a take.

  24. Uh oh: ⚠️ Brotli is a widely used compression library from Google. On Wednesday, October 21st NodeJS disclosed CVE-2026-111497, dubbed “node2shell,” wherein a Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code. On Thursday, Python disclosed that Python packages were vulnerable to CVE-2026-111497 as well.

    ht @jerry
    aikido.dev/blog/python-package

  25. 🚨 EUVD-2026-56294

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information ove...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

Share on Mastodon

Enter the server where you have an account.