Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۲:۲۸

OpenAI raises top bug bounty payout to $172,000 with bonuses

OpenAI increased its security bug bounties to encourage independent researchers to find vulnerabilities in its software. The program now offers bonuses for high-quality reports. The program encourages researchers to disclose vulnerabilities responsibly and complements OpenAI’s Defense Factory, where engineers use the company’s models to find and reproduce vulnerabilities and test fixes. New bounty payouts and bonuses…

Vulnerabilities & Zero-Day Penetration Testing

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۴:۲۳

Armed with AI, hackers target endpoint security blind spots, raising stakes for CISOs

A China-linked hacking group’s use of AI agents to identify security weaknesses during a global espionage campaign is raising concerns about whether enterprises can detect gaps in their defenses before automated attacks exploit them. CrowdStrike reported that the group, tracked as VAPOR PANDA, used an AI-powered penetration testing framework called ARTEX to target more than 200 organizations worldwide over an 11-day…

Vulnerabilities & Zero-Day AI Security Threat Intelligence

Source

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۳:۳۰

Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware

ESET has been tracking a Russia-aligned group it calls Gorbag, which has been breaking into Ukrainian organizations since at least February 2025 using spearphishing attachments and a stealer that erases itself once the data is gone. Spearphishing email message from a compromised email sender (Source: ESET) Every target ESET identified sits in Ukraine. About a quarter are law enforcement and justice bodies, another qu…

Malware & Threats Threat Intelligence

Source

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۳:۰۹

Stolen AI access leaves companies with cloud bills of up to $1 million

Criminals who break into corporate cloud accounts are using the stolen access to run AI models at the victim’s expense, in some cases racking up more than $100,000 in charges in a single day, Google Threat Intelligence Group (GTIG) and Mandiant researchers have found. Usage chart showing LLMJacking generating a spike in API requests (Source: Google) In 2026, Mandiant responded to several of these LLMJacking incidents…

Threat Intelligence

Source

دیجیاتو سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۲:۳۳

اپل برای کاربران ۹۹ کشور درباره حملات جاسوسی با بدافزار هشدار صادر کرد

هکرها با بهره‌گیری از یک آسیب‌پذیری و بدون نیاز به تعامل کاربر، تنها با در اختیار داشتن شماره تلفن حملات را پیش برده‌اند. The post اپل برای کاربران ۹۹ کشور درباره حملات جاسوسی با بدافزار هشدار صادر کرد appeared first on دیجیاتو.

Malware & Threats Vulnerabilities & Zero-Day

Source