Explore

Rapid Read Rapid Read
Hugging Face Discloses Cyberattack Compromising Internal Systems and Credentials

Hugging Face Discloses Cyberattack Compromising Internal Systems and Credentials

Hugging Face, a platform known for hosting AI models and datasets, has confirmed a cyberattack that compromised its internal datasets and service credentials. The breach was disclosed after a dataset uploaded to the platform exploited a security vulnerability, allowing attackers to execute malicious code and gain broader access to Hugging Face's internal systems. The company has since revoked and rotated the compromised credentials and urged users to do the same. The vulnerability has been patched, and the company is investigating the incident with cybersecurity forensic specialists. The attack was attributed to an external AI agent executing numerous actions across short-lived sandboxes.
Trendline Trendline
Hugging Face Data Breach Exposes Security Vulnerabilities in AI Platforms

Hugging Face Data Breach Exposes Security Vulnerabilities in AI Platforms

Hugging Face Data Breach Exposes Security Vulnerabilities in AI Platforms
Rapid Read Rapid Read
White Hat Hacker Park Chan-am Highlights AI Security Challenges at Seminar

White Hat Hacker Park Chan-am Highlights AI Security Challenges at Seminar

Park Chan-am, a renowned white hat hacker, addressed key security challenges in the era of artificial intelligence during a seminar at the 15th Information Security Day event. Park, who began his hacking career at the age of 11, has been instrumental in advising Korean government agencies on cybersecurity, particularly against threats from the Democratic People’s Republic of Korea. As the CEO of Steelion, a security firm, Park emphasized the evolving security landscape due to AI advancements. He outlined the priority response tasks for information security organizations, focusing on major AI threats and the necessary security priorities to address them.
Trendline Trendline
MasterClass Seeks Program Manager to Enhance Strategy and Operations

MasterClass Seeks Program Manager to Enhance Strategy and Operations

MasterClass Seeks Program Manager to Enhance Strategy and Operations
Rapid Read Rapid Read
Clover Health Discloses Data Breach, Investigates Impact on Member Data

Clover Health Discloses Data Breach, Investigates Impact on Member Data

Clover Health has reported a data breach in a recent filing with the Securities and Exchange Commission. The breach was discovered on July 4, when the company noticed unusual login activity on its systems. An investigation revealed that a threat actor accessed three non-managerial employee accounts through social engineering. These accounts had access to broker-facing sales functions and tools for scheduling member visits, potentially exposing personal and protected health information. Clover Health has stated that the investigation is ongoing to determine the full scope of the breach. The company has initiated response procedures and engaged third-party experts to contain the threat. Despite the breach, Clover Health does not anticipate a material impact on its business operations or finances.
Rapid Read Rapid Read
Hugging Face Warns of Network Breach by Autonomous AI Agent

Hugging Face Warns of Network Breach by Autonomous AI Agent

Hugging Face, an open-source AI and machine learning platform, disclosed a security breach where attackers accessed internal datasets and credentials using an autonomous AI agent system. The breach exploited vulnerabilities in the company's data-processing pipeline, allowing attackers to steal cloud and cluster credentials. Hugging Face has since closed the vulnerable paths, evicted the attacker, and is working with forensic experts to assess the impact. The company is investigating whether partner or customer data was affected and has advised users to rotate access tokens and review account activity.
Trendline Trendline
Ernst Young Data Breach Exposes Personal and Financial Information

Ernst Young Data Breach Exposes Personal and Financial Information

Ernst Young Data Breach Exposes Personal and Financial Information
Rapid Read Rapid Read
OpenSSL Addresses 'HollowByte' DoS Vulnerability with Silent Fixes

OpenSSL Addresses 'HollowByte' DoS Vulnerability with Silent Fixes

A vulnerability in OpenSSL, known as 'HollowByte', has been identified, allowing attackers to exhaust a server's memory before any security handshake. Discovered by Okta's red team, the denial-of-service (DoS) bug can be triggered by a malicious payload of only 11 bytes, which declares a larger incoming message body to initiate a buffer pre-allocation that is not immediately freed. This vulnerability existed because older OpenSSL versions pre-allocated receive buffer sizes based on the incoming message body length declared in the handshake message's 4-byte header. The issue has been silently fixed in OpenSSL version 4.0.1 and backported to earlier versions.
Trendline Trendline
Hugging Face Discloses Data Breach from Autonomous AI Cyberattack

Hugging Face Discloses Data Breach from Autonomous AI Cyberattack

Hugging Face Discloses Data Breach from Autonomous AI Cyberattack
Trendline Trendline
AI Adoption and Business Acceleration Transform Technology Risk Management Expectations

AI Adoption and Business Acceleration Transform Technology Risk Management Expectations

AI Adoption and Business Acceleration Transform Technology Risk Management Expectations
Rapid Read Rapid Read
U.S. Department of the Treasury Seeks Chief Privacy Officer to Enhance Data Security

U.S. Department of the Treasury Seeks Chief Privacy Officer to Enhance Data Security

The U.S. Department of the Treasury is currently accepting applications for the position of Chief Privacy Officer within the Internal Revenue Service (IRS). This role is crucial for maintaining public confidence by ensuring the protection, retention, and disclosure of taxpayer information. The Chief Privacy Officer will provide executive leadership over the Privacy organization, establishing strategic directions for compliance with various federal regulations, including the Freedom of Information Act and the Internal Revenue Code. The position is based in Washington, DC, and Philadelphia, PA, with a salary range of $151,661 to $228,000 per year. The role requires a top-secret security clearance and involves occasional travel. The application deadline is July 30, 2026.
Trendline Trendline
European Password Manager's Russian Ties Raise Security Concerns

European Password Manager's Russian Ties Raise Security Concerns

European Password Manager's Russian Ties Raise Security Concerns