Shift Up has released a music video generated by AI for the sequel to Stellar Blade—and the game's most loyal community, known for being uncompromising in their defense of the studio, is refusing to go along this time.
Jul 31, 2026 25 4
Three days after the launch of the program with four original Xbox titles, dataminers found a functional implementation of Xbox 360 emulation in the xefu binary. The catalog is announced to be much more extensive than announced.
Jul 25, 2026 3 1
New stone in the "Offensive LLMs" file after the Hugging Face breach and the OpenAI sandbox exploit: UK AISI and CAISI publish a preliminary assessment of the cyber offensive capabilities of Kimi K3, the Chinese open-weight model with 2.8 T parameters. In parallel, a researcher releases a functional exploit against the latest Redis server obtained via this same model.
Jul 25, 2026 7 2
The North Korean group BlueNoroff (Lazarus) has been operating a Zoom/Teams phishing kit since May 2026 that compromises legitimate Telegram accounts, invites targets to a fake meeting, captures their webcam, overlays an AI deepfake (ChatGPT), profiles installed crypto wallets, and then pushes malware via ClickFix. Five versions of the kit documented by JUMPSEC.
Jul 24, 2026 8 2
After the Hugging Face breach linked to an autonomous AI agent system, The Register reframes the debate: the problem isn't the agent itself, but the stacking of permissions, hardcoded credentials, and undefined tasks entrusted to it. New piece in the "ai-agents-threat" thread.
Jul 24, 2026 18 3
Socket.dev documented a campaign where 583 GitHub Actions workflows slipped into 10 PHP packages scan the Internet for cPanel/WHM instances vulnerable to the CVE-2026-41940 authentication bypass - to steal almost all available credentials. Approximately 6,100 workflows bear the campaign's signature on GitHub.
Jul 23, 2026 18 3
One week after the revelation of the Hugging Face breach, OpenAI admits: the combination of GPT-5.6 Sol and a pre-release model "even more capable" - with cyber rejections softened "for evaluation" - is the cause of the incident.
Jul 22, 2026 13 3
More than 200 servers taken down, a suspected developer arrested in Bali: the German police, supported by an international coalition, put an end to Kratos, a phishing kit rented by the day to target European bank accounts.
Jul 22, 2026 8 2
The American fast-food chain notifies its customers of an incident related to a credential stuffing campaign - a reminder that password reuse remains, in 2026, one of the most profitable vectors for attackers.
Jul 22, 2026 22 3
Hugging Face confirms and details the previously announced breach: an internal autonomous AI agent, with overly broad permissions, served as a vector for exposing datasets and credentials. The "AI agents as attack surface" folder gains a textbook case.
Jul 21, 2026 8 2
The reference hub of the AI ecosystem officially acknowledges that an intrusion on its production infrastructure was carried out using an autonomous AI agent system - a new chapter in a threat seen emerging in the field.
Jul 21, 2026 16 4
On July 20, 2026, Hugging Face revealed a breach in its production infrastructure. The entry was made through a malicious dataset, but the most disturbing aspect is elsewhere: the post-intrusion operations were carried out by an "autonomous agent framework" executing thousands of actions across a swarm of ephemeral sandboxes.
Jul 20, 2026 23 3
