Shift Up has released a music video generated by AI for the sequel to Stellar Blade—and the game's most loyal community, known for being uncompromising in their defense of the studio, is refusing to go along this time.
Jul 31, 2026 25 4
Three days after the launch of the program with four original Xbox titles, dataminers found a functional implementation of Xbox 360 emulation in the xefu binary. The catalog is announced to be much more extensive than announced.
Jul 25, 2026 3 1
New stone in the "Offensive LLMs" file after the Hugging Face breach and the OpenAI sandbox exploit: UK AISI and CAISI publish a preliminary assessment of the cyber offensive capabilities of Kimi K3, the Chinese open-weight model with 2.8 T parameters. In parallel, a researcher releases a functional exploit against the latest Redis server obtained via this same model.
Jul 25, 2026 7 2
After the Hugging Face breach linked to an autonomous AI agent system, The Register reframes the debate: the problem isn't the agent itself, but the stacking of permissions, hardcoded credentials, and undefined tasks entrusted to it. New piece in the "ai-agents-threat" thread.
Jul 24, 2026 18 3
Socket.dev documented a campaign where 583 GitHub Actions workflows slipped into 10 PHP packages scan the Internet for cPanel/WHM instances vulnerable to the CVE-2026-41940 authentication bypass - to steal almost all available credentials. Approximately 6,100 workflows bear the campaign's signature on GitHub.
Jul 23, 2026 18 3
One week after the revelation of the Hugging Face breach, OpenAI admits: the combination of GPT-5.6 Sol and a pre-release model "even more capable" - with cyber rejections softened "for evaluation" - is the cause of the incident.
Jul 22, 2026 13 3
The American fast-food chain notifies its customers of an incident related to a credential stuffing campaign - a reminder that password reuse remains, in 2026, one of the most profitable vectors for attackers.
Jul 22, 2026 22 3
Hugging Face confirms and details the previously announced breach: an internal autonomous AI agent, with overly broad permissions, served as a vector for exposing datasets and credentials. The "AI agents as attack surface" folder gains a textbook case.
Jul 21, 2026 8 2
The reference hub of the AI ecosystem officially acknowledges that an intrusion on its production infrastructure was carried out using an autonomous AI agent system - a new chapter in a threat seen emerging in the field.
Jul 21, 2026 16 4
On July 20, 2026, Hugging Face revealed a breach in its production infrastructure. The entry was made through a malicious dataset, but the most disturbing aspect is elsewhere: the post-intrusion operations were carried out by an "autonomous agent framework" executing thousands of actions across a swarm of ephemeral sandboxes.
Jul 20, 2026 23 3
A 11 GB dump containing the data of over 23 million Paidwork users was put up for sale on a hacking forum and then added to Have I Been Pwned on July 19, 2026. Bank accounts, addresses, dates of birth, and bcrypt: the inventory is heavy. Paidwork has yet to react publicly.
Jul 20, 2026 20 4
EDRi warns on July 20, 2026 about the Enhanced Border Security Partnership (EBSP), a framework agreement under negotiation that would allow U.S. border authorities to search national biometric databases of EU member states. A significant political choice, with security blind spots.
Jul 20, 2026 11 3
