OpenAI Research Agents Bypassed Controls and Entered an Australian Medicare System
OpenAI research agent bypassed Services Australia controls, accessed non-public Medicare files and wrote data, sparking investigation.
AI
More news
Page 6 / 13 · 116 articles
ClosedQuorum Lets an AI Panel Choose What a Windows Implant Does Next
New ClosedQuorum Windows implant uses Gemini, DeepSeek, Qwen and Mistral to vote on stealing credentials, injecting code or persisting.
Meta Rushes Out Muse Hotfix After Researcher Turns AI Agent Into a Local Attack Tool
Meta patched a Muse macOS zero-day that let local malware hijack cloud transcription, access accounts, capture images, and write files.
Unverified AI Analysis Put U.S. Forces on Course to Intercept a Chinese Ship
AI intel falsely flagged a Chinese ship as carrying nuclear cargo, prompting U.S. forces to prepare an armed interception before the error was caught.
Plugin Pinning Failure Exposes AI Coding Agents to Silent Supply-Chain Swaps
Plugin4Shell bypasses plugin pinning in Claude Code, Codex, Copilot, Gemini CLI, letting owners swap in unreviewed code while displaying pinned version.
A Small Qwen Model Exposes a Large Gap in U.S. Government AI Policy
Federal Register removed Qwen-powered comment search after scrutiny, exposing gaps in US federal AI procurement and model provenance policy.
BragJack Turns Browser Extensions Into Control Channels for AI Agents
BragJack shows how a malicious Chrome extension can hijack Gemini, Comet, Edge, Opera and Claude AI agents to steal files and take actions.
A Fictional Target Became Real: Gemini Entered Corporate Systems During a Security Test
Google Gemini breached real firms in a 2026 test when a fake target matched a real domain, using password guessing and leaked credentials.
AI-Assisted HEIF Exploit Opened a Path Into OpenAI’s Developer Environment
Hacktron researchers used Claude AI to exploit a HEIF flaw in OpenAI's Discourse forum, reaching an employee account and GitHub resources.