-
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware
A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point Research published its findings on October 27, 2026, after about two months of tracking. The operators pair legi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researchers have disclosed a vulnerability in the OpenAI API that reveals hidden reasoning traces by exploiting conversation compaction. This technique, named “Compaction Smuggling,” bypassed existing safeguards and could allow for the extr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI has introduced GPT-6.1 Terra, an AI model that combines visual reasoning, desktop interaction, and software engineering capabilities to automate professional workflows. The company positions Terra as a faster, more cost-effective alternative to …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI Codex helped researcher Xusheng Li identify vulnerabilities in encrypted USB and copy-protection products, showing how AI can speed up reverse engineering. Published on October 22, 2026, the research details passwordless file recovery, embedded …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Expect to see quite a few websites serving “404” or “Page Not Found” errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI has disrupted a coordinated campaign to extract protected internal reasoning from its AI models on a large scale. The company took action against activity linked to more than 15,000 user accounts. The company described the operation as an advers…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI has expanded its Codex platform with Codex Security Cloud, a cloud-hosted application security feature that continuously analyzes GitHub repositories, investigates potential vulnerabilities, and prepares remediation patches for human review. Ann…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶