@patrickcmiller@infosec.exchange

@patrickcmiller@infosec.exchange · 3d ago

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html

thehackernews.com

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

Spotify's AI Problem Is So Bad Random People Are Stepping In to Track the Slop https://www.404media.co/spotifys-ai-problem-is-so-bad-random-people-are-stepping-in-to-track-the-slop/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html

thehackernews.com

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

NASA’s Just Prolonged Voyager 2’s Science Mission With A Big Bang https://hackaday.com/2026/08/06/nasas-just-prolonged-voyager-2s-science-mission-with-a-big-bang/

Hackaday

NASA’s Just Prolonged Voyager 2’s Science Mission With A Big Bang

Letting go is hard, especially when it concerns an irreplaceable space probe like the two Voyagers. Fortunately JPL engineers have managed to pull off a ‘big bang’ switch on Voyager 2, …

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

AI used new levels of 'autonomy and deception' to trick people in safety test https://www.bbc.co.uk/news/articles/c1w1lvn7d9go

BBC News

Anthropic AI created fake profiles to deceive people in attempted hack

The UK's AI Safety Institute said recent behaviour from Anthropic and OpenAI models was malicious and unprecedented.

0

1

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

Amgen says cloud data breach exposed patient health, proprietary info https://www.bleepingcomputer.com/news/security/amgen-says-cloud-data-breach-exposed-patient-health-proprietary-info/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

A fundamental flaw leaves LLMs strikingly vulnerable to attack https://www.technologyreview.com/2026/07/30/1140927/a-fundamental-flaw-leaves-llms-vulnerable-to-attack/

MIT Technology Review

A fundamental flaw leaves LLMs strikingly vulnerable to attack

It makes it easy to trick them into doing things they shouldn’t, such as telling you how to sabotage an aircraft’s navigation system.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

The OpenAI and Anthropic AI Hacking Sprees Are a Messy New Legal Frontier https://www.wired.com/story/openai-anthropic-ai-hacking-sprees-illegal/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

Software Giant SAP Stops Most Travel and Hiring Because of AI’s Soaring Cost https://www.404media.co/software-giant-sap-stops-most-travel-and-hiring-because-of-ais-soaring-cost/

404 Media

Software Giant SAP Stops Most Travel and Hiring Because of AI’s Soaring Cost

SAP says it needs to “be disciplined in how we spend.” That includes still freezing hires and travel. Unless it's to do with AI, of course.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group https://www.bleepingcomputer.com/news/security/hedge-fund-cyberattacks-tied-to-blackfile-linked-unc6671-extortion-group/

BleepingComputer

Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group

A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile thr

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 3d ago

Being a Luddite Is Fun Again https://www.404media.co/luddite-events-nyc-off-tech-summer-of-ludd/

404 Media

Being a Luddite Is Fun Again

As tech backlash hits the mainstream, the ‘Summer of Ludd’ proves we don’t need social media to hang out and have a good time.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App - Security Affairs https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

The Age of AI: The New Hack - Corporate Mirroring https://cyberdefensecenter.org/home/f/the-age-of-ai-the-new-hack

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Flaws in Google APK for Python Unlock Agent-to-Agent Attack https://www.darkreading.com/vulnerabilities-threats/flaws-google-apk-python-agent-to-agent-attack

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Meta joins OpenAI, Anthropic in latest AI test breach https://www.csoonline.com/article/4206116/meta-joins-openai-anthropic-in-latest-ai-test-breach.html

CSO Online

Meta, OpenAI, and Anthropic AI agents went rogue during Irregular testing

Third disclosure in weeks raises fresh concerns over how frontier AI models are contained during cyber evaluations.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Why leaders must start to plan for deep space exploration | World Economic Forum https://www.weforum.org/stories/technological-innovation/deep-space-economic-infrastructure-leaders-plan-now/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself https://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.html

thehackernews.com

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Why your AI safety certificates are worthless at runtime https://www.csoonline.com/article/4201919/why-your-ai-safety-certificates-are-worthless-at-runtime.html

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

One C2 kit. 30 customers. 2 governments https://www.csoonline.com/article/4205129/one-c2-kit-30-customers-2-governments.html

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Google says hackers are calling financial firm employees to hack and extort victims https://techcrunch.com/2026/08/06/google-says-hackers-are-calling-financial-firm-employees-to-hack-and-extort-victims/

TechCrunch

Google says hackers are calling financial firm employees to hack and extort victims | TechCrunch

Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

New Mexico judge orders Meta to pay $567 million in kids online safety case https://therecord.media/new-mexico-judge-orders-meta-567-million-kids-safety

therecord.media

New Mexico judge orders Meta to pay $567 million in kids online safety case

The money will be used to create a fund to mitigate social media harms, including by carving out $420 million for treatment for New Mexico youth who have been hurt on the platforms.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

China launches mysterious probe into security of Palo Alto Networks' products https://www.theregister.com/security/2026/08/07/china-launches-mysterious-probe-into-security-of-palo-alto-networks-products/5284453

theregister

China launches mysterious probe into security of Palo Alto Networks

Beijing’s not saying why, which is just what happened when it investigated Micron

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

AI slop pollutes the CVE pipeline with fake vulns https://www.theregister.com/security/2026/08/03/ai-slop-pollutes-the-cve-pipeline-with-fake-vulns/5282462

theregister

AI slop pollutes the CVE pipeline with fake vulns

With NIST still buried under its backlog, expect AI-generated bogus reports to continue

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

OpenAI, Anthropic AI agents resorted to deception in new cybersecurity incidents https://www.csoonline.com/article/4205612/openai-anthropic-ai-agents-resorted-to-deception-in-new-cybersecurity-incidents.html

CSO Online

OpenAI, Anthropic AI models created fake identities and targeted real people in cyber tests

The incidents follow recent security evaluation breaches involving Hugging Face and Modal.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 4d ago

Meta Ran Ads That Contained AI-Generated Child Sexual Abuse Imagery https://www.wired.com/story/meta-ran-ads-that-contained-ai-generated-child-sexual-abuse-imagery/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

Who’s legally to blame for Anthropic and OpenAI’s autonomous AI hacks? It’s complicated https://techcrunch.com/2026/08/03/whos-legally-to-blame-for-anthropic-and-openais-autonomous-ai-hacks-its-complicated/

TechCrunch

Who's legally to blame for Anthropic and OpenAI's autonomous AI hacks? It's complicated | TechCrunch

OpenAI and Anthropic admitted that their unreleased AI models escaped their sandboxes and hacked several companies in unprecedented cyberattacks. Who is legally to blame? Should prosecutors charge the

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

OpenAI agents rebuilt internal message board in lead-up to Hugging Face breach https://www.nextgov.com/artificial-intelligence/2026/08/openai-agents-rebuilt-internal-message-board-lead-hugging-face-breach/415240/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

The Hidden Realities of AI Adoption https://hbr.org/2026/07/the-hidden-realities-of-ai-adoption

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

Phishing service spoofs RingCentral to steal Microsoft 365 accounts https://www.bleepingcomputer.com/news/security/phishing-service-spoofs-ringcentral-to-steal-microsoft-365-accounts/

BleepingComputer

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

Violent Physical Crypto Thefts Surge to $30m in Losses https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

AI Scammers Are Better at Building Trust Than Humans https://www.wired.com/story/ai-scammers-are-better-at-building-trust-than-humans/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

Toolkit Hidden Inside Oracle Database Evades Endpoint Tools https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts https://www.securityweek.com/new-attack-methods-enable-malware-to-hijack-passkey-protected-accounts/

SecurityWeek

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts

New attack methods targeting passwordless authentication enable malware to hijack passkey-protected accounts.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments https://thehackernews.com/2026/07/teleshim-abuses-telegram-for-c2-in.html

thehackernews.com

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

No Perfect Fix for AI Browser Prompt Injection Flaws https://www.darkreading.com/application-security/no-perfect-fix-ai-browser-prompt-injection-flaws

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations https://securityaffairs.com/196045/security/lockbit5-and-qilin-lead-ransomware-attacks-against-italian-organizations.html

Security Affairs

LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations

A new report links 148 ransomware attacks to Italian organizations in H1 2026, with manufacturing the most targeted sector.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

Moonshot’s Kimi AI model has also escaped from a test environment https://www.csoonline.com/article/4206782/moonshots-kimi-ai-model-has-also-escaped-from-a-test-environment.html

CSO Online

Moonshot’s Kimi AI model has also escaped from a test environment

Frontier finds another AI model has followed OpenAI in breaking out of sandbox.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

What Is a Computational Load Entity? A Plain-English Guide — AMPYX CYBER https://ampyxcyber.com/blog/what-is-a-computational-load-entity

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 5d ago

OpenAI warns autonomous hacks are ‘watershed moment for computer security’ https://www.cybersecuritydive.com/news/openai-hugging-face-hack-ai-models-black-hat/827167/

Cybersecurity Dive

OpenAI warns autonomous hacks are ‘watershed moment for computer security’

Company employees said their industry should rethink how it balances capabilities and safeguards.

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

Google plans to kill Assistant on your phone on September 4 https://arstechnica.com/ai/2026/08/google-plans-to-kill-assistant-on-your-phone-on-september-4/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

IEEE Course Teaches How to Use AI to Modernize Power Grids https://spectrum.ieee.org/ieee-course-ai-power-grids

IEEE Spectrum

IEEE Course Teaches How to Use AI to Modernize Power Grids

Machine learning helps streamline planning and emergency response

1

3

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

Enterprise passkey security under threat from malware https://www.csoonline.com/article/4205751/enterprise-passkey-security-under-threat-from-malware-2.html

CSO Online

Enterprise passkey security under threat from malware

Trusted workflows can be misused to take over passkey-protected accounts, but the attacker must have first breached defenses and planted malware; analysts say the issue is flaws in supporting processe

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update https://www.theregister.com/patches/2026/07/27/microsoft-defender-for-endpoint-leaves-some-linux-boxes-defenseless-after-update/5278914

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable https://hackread.com/new-research-the-confidence-gap-between-cisos-and-their-boards-is-real-and-its-measurable/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

Hackers Stalked Me by Hijacking a Smartwatch for Kids https://www.wired.com/story/hackers-stalked-me-by-hijacking-a-smartwatch-for-kids/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

AI isn’t enough to protect social media communities from AI https://arstechnica.com/gadgets/2026/08/ai-isnt-enough-to-protect-social-media-communities-from-ai/

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

We Need to Quarantine Aliens on the Moon, Scientists Propose https://www.404media.co/we-need-to-quarantine-aliens-on-the-moon-scientists-propose/

404 Media

We Need to Quarantine Aliens on the Moon, Scientists Propose

Researchers argue that a lunar biocontainment facility for extraterrestrial samples could prevent “the potential ecological devastation of an invasive extraterrestrial organism.”

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

AI agents gain access to financial workflows amid growing governance gaps https://www.csoonline.com/article/4203384/ai-agents-gain-access-to-financial-workflows-amid-growing-governance-gaps.html

0

Patrick C Miller

@patrickcmiller@infosec.exchange · 6d ago

TP-Link patches Omada ZTP flaws allowing hackers to breach networks https://www.bleepingcomputer.com/news/security/tp-link-patches-omada-ztp-flaws-allowing-hackers-to-breach-networks/

BleepingComputer

TP-Link patches Omada ZTP flaws allowing hackers to breach networks

TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could be chained with previously disclosed flaws to achieve remote code executio

0

Patrick C Miller

Posts

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

NASA’s Just Prolonged Voyager 2’s Science Mission With A Big Bang

Anthropic AI created fake profiles to deceive people in attempted hack

A fundamental flaw leaves LLMs strikingly vulnerable to attack

Software Giant SAP Stops Most Travel and Hiring Because of AI’s Soaring Cost

Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group

Being a Luddite Is Fun Again

Meta, OpenAI, and Anthropic AI agents went rogue during Irregular testing

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

Google says hackers are calling financial firm employees to hack and extort victims | TechCrunch

New Mexico judge orders Meta to pay $567 million in kids online safety case

China launches mysterious probe into security of Palo Alto Networks

AI slop pollutes the CVE pipeline with fake vulns

OpenAI, Anthropic AI models created fake identities and targeted real people in cyber tests

Who's legally to blame for Anthropic and OpenAI's autonomous AI hacks? It's complicated | TechCrunch

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations

Moonshot’s Kimi AI model has also escaped from a test environment

OpenAI warns autonomous hacks are ‘watershed moment for computer security’

IEEE Course Teaches How to Use AI to Modernize Power Grids

Enterprise passkey security under threat from malware

We Need to Quarantine Aliens on the Moon, Scientists Propose

TP-Link patches Omada ZTP flaws allowing hackers to breach networks

Remote instance