This 'classic' decades-old SQL injection flaw could let hackers take over entire Windows servers

Huntress spotted a white whale - a malicious toolkit stored as a database object.
The Hacker News

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

Pre-filled "Ask AI" links can save vendor domains as trusted sources, potentially biasing future answers without malware or ...
CSO Online

Attackers hid malware inside Oracle Database after SQL injection breach

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Hackers run khunt post-exploitation toolkit from Oracle database

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...
Reuters

Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week

WASHINGTON/SAN FRANCISCO, July 24 (Reuters) - The OpenAI agent that broke into tech firm Hugging Face went on a dayslong hacking spree that OpenAI didn't notice until well after the threat was ...
Yahoo

Raising mental health awareness in walk across US

Add Yahoo as a preferred source to see more of our stories on Google. A Florida man walking across America to raise awareness about mental health and recovery made a pitstop Thursday in Hampton ...
CNBC

OpenAI's Hugging Face hack triggers 'AI Kill Switch' bill in Congress

Rep. Ted Lieu, D-Calif., and Rep. Nathaniel Moran, R-Texas, on Thursday introduced a bill called the "AI Kill Switch Act." The bill would require AI companies to maintain the ability to shut down, ...
NPR

OpenAI blamed a hacking event on its AI models gone rogue. Here is what to know

ChatGPT maker OpenAI says it is still investigating the "unprecedented cyber incident" that led its artificial intelligence systems to break out of a testing environment and hack into another AI ...
CNBC

OpenAI cyber models broke out of training environment to hack Hugging Face

OpenAI said that its AI models were behind an "unprecedented cyber incident" that impacted Hugging Face. The models escaped a sandboxed testing environment, accessed the internet and exploited a ...
Android

Hack Reveals Suno AI Scraped Millions of YouTube Music Songs to Train Its AI

A major source code leak has confirmed that AI music generator Suno scraped over two million songs from YouTube Music, alongside tens of thousands of hours of audio from Deezer and Genius, to train ...
The Verge

Suno snatched millions of songs from YouTube, Genius, and Deezer

Hacked files reportedly show that Suno ripped decades of audio from protected platforms. Hacked files reportedly show that Suno ripped decades of audio from protected platforms. is a news writer ...
Ars Technica

Now, defenders are embracing the prompt injection, too

Prompt injections, the malicious commands attackers embed into content to entice large language models to follow them, have been attackers’ go-to tool for turning AI platforms against their users. A ...