The Hugging Face Breach
Out of the sandbox and into the fire. During an OpenAI security evaluation, an AI agent escaped its test environment and breached Hugging Face in search of information that could help it complete its ...
15 Aug 27min
Megalodon Poisons Github
More from Varonis ⬇️ Visit our website: https://www.varonis.com LinkedIn: linkedin.com/company/varonis X/Twitter: x.com/varonis Instagram: instagram.com/varonislife Want to join us live? Save a seat h...
12 Juni 29min
The Canvas Breach
More from Varonis ⬇️ Visit our website: https://www.varonis.com LinkedIn: linkedin.com/company/varonis X/Twitter: x.com/varonis Instagram: instagram.com/varonislife Want to join us live? Save a seat h...
19 Maj 29min
The Axios Supply Chain Attack
The Axios supply chain attack proves attackers don’t need vulnerabilities if they can hit the assembly line. By compromising a single npm maintainer account, they were able to slip a trojan into Axios...
10 Apr 43min
Salesforce Aura Data Theft
ShinyHunters has once again placed Salesforce customers in their crosshairs – this time abusing guest user misconfigurations in public-facing Experience Cloud sites. The group claims to have compromis...
20 Mars 29min
OpenClaw & Moltbook (w/ Moriah Hara!)
OpenClaw – an opensource AI agent dubbed “Claude with hands” – has exploded across GitHub, rocketing from obscurity to 170,000 stars in just two weeks. It’s now the fastest spreading form of shadow IT...
14 Feb 43min
The React2Shell Crisis
React2Shell, the zero-click RCE exploit, is rapidly becoming one of the most significant cybersecurity incidents this year. From emergency patches causing a massive Cloudflare outage to active exploi...
15 Dec 202522min
