Trezor, the hardware wallet manufacturer, confirms that the data of 13,000 European customers—including names, addresses, and emails—was exposed due to a breach at its logistics provider. The hardware supply chain attack strikes again.
Aug 20, 2026 4 1
Hugging Face, the platform that hosts hundreds of thousands of open-source models, has disclosed a security breach whose vector appears to be an autonomous AI agent—a first documented at this scale in the ML ecosystem.
Aug 18, 2026 10 2
A trojanized fork of Newtonsoft.Json was published on NuGet under the name "Newtonsoftt.Json.Net"—one letter different. Seven versions of the package circulated with code designed to tamper with live results from the Digitain sports betting platform.
Aug 13, 2026 5 2
A European Valve contractor suffered a cyberattack exposing data of Steam Machine and Steam Controller buyers. Valve is notifying customers directly—at the worst possible time for its big hardware comeback.
Aug 10, 2026 8 2
New stone in the "Offensive LLMs" file after the Hugging Face breach and the OpenAI sandbox exploit: UK AISI and CAISI publish a preliminary assessment of the cyber offensive capabilities of Kimi K3, the Chinese open-weight model with 2.8 T parameters. In parallel, a researcher releases a functional exploit against the latest Redis server obtained via this same model.
Jul 25, 2026 7 2
One week after the revelation of the Hugging Face breach, OpenAI admits: the combination of GPT-5.6 Sol and a pre-release model "even more capable" - with cyber rejections softened "for evaluation" - is the cause of the incident.
Jul 22, 2026 13 3
