The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۱۹

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday. It has promised to pay those charges itself when an AI provider will not refund them. The company builds and runs apps for its customers and stores their secrets, such as API keys and database

نشت داده پایگاه داده

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۴۷

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.

آسیب‌پذیری و روز صفر پایگاه داده سیستم‌عامل

منبع

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۰:۵۱

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons

An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, without retraining the model, Microsoft researchers have shown. When a chosen trigger appears, the model outputs an attacker's command, which an agent using that model would run with the agent's own permissions. The attacker must be able to change the model's weights. The team tested the method on

بدافزار و آلودگی

منبع

Industrial Cyber چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۰:۳۴

NIST lays out adversarial machine learning taxonomy to address attacks targeting agentic superintelligence systems

The U.S. National Institute of Standards and Technology has published an initial public draft report that provides a... The post NIST lays out adversarial machine learning taxonomy to address attacks targeting agentic superintelligence systems appeared first on Industrial Cyber.

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ

منبع

Risky Business چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۹:۳۹

Risky Business #859 -- ARTEX damage approaches crisis levels

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including: Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis The French government attributes freezer hacks to Iran’s IRGC Rob Joyce was right and the breachpocalypse has exhausted global IR resources The White Hous…

نشت داده امنیت اینترنت اشیا و صنعتی توسعه موبایل

منبع