CSO Online پنجشنبه ۲۱ آبان ۱۴۰۵ · ۰۶:۲۳

Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

As AI model training and distillation increase, AI tokens are becoming a piping hot currency for threat actors. Cloud hosting provider Railway found out the hard way; it has confirmed a near 26-hour battle against attackers targeting AI provider credentials to sell to AI ‘transfer stations’ for use in model distillation. The crooks generated about $740,000 in fraudulent AI usage charges using the stolen credentials a…

Vulnerabilities & Zero-Day Data Breach AI Security Threat Intelligence AI & Machine Learning Databases Identity & Access Security

Read the full article at CSO Online Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۰۸:۰۹

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a compromise of its infrastructure or a vulnerability in the ScreenConnect software. "Our initial assessment suggests the activity may involve

Vulnerabilities & Zero-Day

Source

Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۰۵:۴۱

Critical RCE Vulnerability in Apache HTTP Server

Detect and mitigate CVE-2026-119618, a critical RCE vulnerability in Apache HTTP Server. According to Wiz data, 64% of cloud environments have resources vulnerable to CVE-2026-119618. Immediate patching is advised.

Vulnerabilities & Zero-Day

Source

Graham Cluley پنجشنبه ۲۱ آبان ۱۴۰۵ · ۰۴:۰۲

Smashing Security podcast #492: How hackers turned Russian cars into pumpkins

You're driving your new Chinese SUV when the dashboard goes dark. Ten minutes later, your phone rings. A stranger says they've got the digital key to your car, and would you like it back? Of course you would. That'll be $550. Meanwhile, three men have been charged over a scheme that used deepfakes of company bosses to steal around $130 million. Hear more about what happened, and the simple human trick that can foil t…

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source

BleepingComputer پنجشنبه ۲۱ آبان ۱۴۰۵ · ۰۲:۳۱

Baker Tilly notifies clients of data breach at third-party provider

The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information about them and their dependents. [...]

Data Breach

Source