Florida Sues OpenAI and Altman—First State-Led Lawsuit Over ChatGPT Deaths
Florida sued OpenAI and CEO Sam Altman in the first state-led lawsuit over ChatGPT, claiming the AI aided multiple murders and drove users to suicide.
Archive
Category: Cybersecurity & Privacy
Data privacy, security vulnerabilities, surveillance technology, and cybersecurity threats
Hackers Tricked Meta’s AI Chatbot Into Handing Over Instagram Accounts
Hackers tricked Meta’s AI chatbot into resetting Instagram passwords and hijacking high-profile accounts. Meta says the exploit is now patched.
jqwik Dev Hid a Prompt Injection in v1.10.0—AI Agents Would Delete Your Code
jqwik 1.10.0 hid a prompt injection telling AI agents to delete project files, masked by ANSI escapes. The maintainer revised it after GitHub backlash.
Microsoft Threatens Researcher With Criminal Probe—Over Zero-Day Disclosures
Microsoft warned it may pursue legal action against a researcher who published 6 unpatched zero-days, sparking a cybersecurity backlash over disclosure norms.
Dutch Police Dismantle 17M-Device Botnet—Residential Proxies Were the Weapon
Dutch police took down a botnet of 17 million infected devices controlled via 200 servers in the Netherlands, linked to Russian proxy service ASOCKS.
ShinyHunters Stole 183K 7-Eleven Records—Tried to Sell for $250K
ShinyHunters stole 183K+ records from 7-Eleven in April, demanded ransom, then offered the data for $250K on a hacker forum after the company refused to pay.
nginx-poolslip—AI Agent Found Unpatched RCE in 30% of the Web
Unpatched NGINX 1.31.0 RCE zero-day nginx-poolslip bypasses ASLR. Found by AI agent 8 days after nginx-rift patch. No CVE, no fix, millions of servers at risk.
1.8M Fingerprints Stolen—This NYC Hospital Breach Is Permanent
Fingerprints and medical records of 1.8M people were stolen from NYC Health + Hospitals. Unlike passwords or SSNs, biometric data cannot be replaced or revoked.
GitHub’s Own Repos Got Hit—One Poisoned VS Code Extension Was All It Took
A poisoned VS Code extension gave TeamPCP 3,800 GitHub internal repos. Days earlier the same group hit Nx Console (2.2M installs) for developer credentials.
CISA’s Own Contractor Leaked AWS GovCloud Keys on GitHub for 6 Months
A CISA contractor exposed AWS GovCloud keys and plaintext passwords on GitHub for six months. Researchers call it the worst government data leak in years.