JFrog's 0-days let OpenAI's models hack Hugging Face
OpenAI confirms the link
AI-Found Bugs Aren't Proving Any Easier to Exploit Despite the Hype
AI-assisted vulnerability discovery has yet to produce the expected surge in real-world attacks: VulnCheck found that only 14 of 1,061 attributed discoveries, or 1.3 percent, had been exploited, which is "almost identical to the rate across all vulnerabilities in VulnCheck's dataset," reports The Register. "That's a far cry from the narrative that frontier AI is dramatically tilting the balance in attackers' favor by churning out instantly weaponizable bugs." The findings suggest AI is currently better at increasing the volume of bugs found than making them easier to weaponize. From the report: The report takes particular aim at Anthropic's much-publicized Project Glasswing, unveiled in April with warnings that AI-assisted vulnerability discovery could allow attackers to hijack systems, disrupt operations, or steal data. Claude Mythos may have identified 23,019 vulnerability candidates, but there's remarkably little public evidence showing what became of most of them. VulnCheck notes that only 126 have been published as CVEs, that just one has been confirmed exploited in the wild, and that Anthropic's public disclosure record has seen little movement since Project Glasswing launched.
But that doesn't mean AI-assisted vulnerability research has failed, according to Patrick Garrity, security researcher at VulnCheck. "AI-assisted vulnerability discovery clearly has value for both attackers and defenders," Garrity wrote. "The data does not suggest that AI-discovered vulnerabilities are inherently more likely to be exploited than those found through traditional methods." Instead, he argues, AI is simply helping researchers discover more flaws, giving defenders an opportunity to patch them before criminals get there.
Garrity stopped well short of declaring the threat overblown forever, but he did suggest some of the rhetoric has outpaced reality. "The data so far, including Anthropic's own stalled disclosure ledger, suggests that AI-assisted vulnerability discovery and frontier capabilities have been overhyped relative to the evidence available today," he wrote. "That doesn't mean the risk is imaginary. It means the impact has been real but modest."
Read more of this story at Slashdot.
UEFA lay into FIFA over 'proposal to sell stakes in the World Cup' in a move that could 'make president Gianni Infantino millions' - as plan is labelled a 'nuclear bomb' for football
UEFA have hit out at a leaked FIFA plan to sell stakes in the World Cup in a move that could make its president Gianni Infantino millions.
Andy Burnham launches cross-party talks on social care - as Reform warn his 'death tax' plan could cost his own constituents £50,000 each
The Prime Minister has invited Kemi Badenoch for talks on the issue on Wednesday despite her warning that the £18 billion cost should be funded by spending cuts, not new taxes.
Dad of Idaho murders victim says he'd LOVE Bryan Kohberger to get his request for retrial so families can finally confront quadruple murderer and see him sentenced to death
The father of one of the Idaho murders victims said he would welcome a retrial after Bryan Kohberger requested one, saying the quadruple murderer would certainly face the death penalty.
Perplexity's tokenmaxxing Model Council gives you multiple bot perspectives
Up to 8 AI models running in the cloud weighing in on ambiguous business issues? Sounds affordable
Children, aged six and 11, rushed to hospital after being attacked by a dog at playground: Police release CCTV
West Leicester Police now wishes to speak to a woman who was pictured on CCTV with a hound in the wake of the attack.
Twisted school shooter will die in prison as he's sentenced for murdering four when he was 14 - after getting excited about sick fan clubs devoted to his crimes
Colt Gray, now 16, unleashed hell in 2024 when he opened fire at a high school, killing two students and two teachers.
Mother and one of her two identical twin daughters, 17, shot dead by neighbor, 73, who then tried to kill himself following petty local dispute, cops say
Jessica Lashly, 38, and Jersey Greer were shot in the head outside their House Springs, Missouri home on Saturday night. Their neighbor, Robert Winkelman, 73, is accused of carrying out the attack.
Are there MORE victims? Police are probing whether murderer who slaughtered three men in six months has killed others - as force looks into 'unexplained' case
James Desborough, 40, was responsible for 'three explosions of fatal violence' when he ruthlessly targeted two men he met at a homeless shelter, followed by his prison cellmate.
eBay Reaches $56 Million Settlement With E-Commerce Newsletter Writers It Terrorized In 2019
eBay and several former executives have agreed to pay $56 million to Ina and David Steiner, the newsletter writers targeted in a 2019 corporate harassment campaign that involved threats, surveillance attempts, and deliveries of live insects and other disturbing items. The settlement closes the couple's civil case after seven former employees pleaded guilty to criminal charges related to the scheme. TechCrunch reports: Ina and David Steiner, a married couple and the co-authors of EcommerceBytes, inspired the ire of high-level eBay executives after occasionally criticizing the company in their newsletter. In 2019, a plot was concocted to intimidate the couple into halting their negative coverage. Executives used sock puppet social media accounts to harass the couple, while also sending them anonymous threatening letters and bizarre items in the mail -- including live spiders and cockroaches, pornographic magazines, a bloody pig mask, a funereal wreath, and a book about surviving the death of a spouse. According to previously released court documents, a plan that was attempted but never successfully carried out involved affixing a GPS tracking device to the couple's car. Yet another internally broached plan involved sending a "Samoan gang" to the Steiners' home.
The settlement this week resolves a 2021 civil case brought by the couple against eBay. The law office representing the Steiners writes that the settlement includes $46.15 million paid to the couple by eBay itself, as well as $2 million from former eBay executive CEO Devin Wenig. Additionally, $500,000 will be paid out to the couple from former eBay executive Wendy Jones, as well as $50,000 from former eBay executive Steve Wymer. Additional funds are being paid to various non-profits. In 2022, seven former eBay employees were criminally charged and pled guilty in relation to the plot, including the company's former security chief, James Baugh -- who was sentenced to nearly five years in prison. Others indicted by the U.S. Department of Justice include David Harville, Brian Gilbert, Stephanie Popp, Stephanie Stockwell, Philip Cooke, and former eBay contractor Veronica Zea.
Read more of this story at Slashdot.
Kate Cassidy gets her Liam Payne 'angel' tattoo tribute removed from her hand 21-months after the One Direction star tragically died
Kate Cassidy revealed she is having her Liam Payne 'angel' tattoo tribute removed from her hand as she shared a new video on Instagram on Tuesday.
Mysterious 'experimental explosion' detected off Florida coast sparks earthquake alert
An unusual 'experimental explosion' entry appeared on the government's earthquake tracking website, sparking questions about the mysterious event.
The body part that secretly reveals your age... no matter how much work you get done
Many women spend thousands of dollars a year in an effort to keep their faces looking younger than ever... but this one body part could be giving their true age away.
Bibi schmoozes Trump Cabinet officials after meeting with the president... as GOP privately frets he could drag US into wider Iran war
Israeli Prime Minister Benjamin Netanyahu launched a charm offensive in Washington on Tuesday.
Mystery as Olivia Attwood teases she will share 'messy' screenshots - after launching blistering attack on ex Bradley Dack's love interest Emily Moloney
Olivia Attwood teased that she was going to share exposing screenshots on Tuesday - after branding her ex Bradley Dack's new love interest Emily Moloney his 'bit on the side'.
Midwest teacher, 37, is arrested for CLAPPING at public meeting about data centers
The teacher was booked into the Lyon County Jail on charges of interference with law enforcement and disorderly conduct, according to police.
Trump immortalizes 'legend' Lindsey Graham as a man with a 'good and mighty heart' in rare emotional tribute
'He was a man who gave America the full measure of his good and mighty heart,' Trump said of Graham, his former presidential primary opponent-turned-friend.
Amanda Abbington 'is set to make her TV comeback in detective thriller' after lengthy hiatus from screens following Strictly scandal
The actress, 52, has had a lengthy hiatus from screens after her dramatic exit from Strictly Come Dancing in 2023.
Jason Sudeikis and Olivia Wilde's children make red carpet debut at Ted Lasso star's season 4 premiere
The actor brought his son Otis, 12, and his nine-year-old daughter Daisy, both of whom he shares with his ex Olivia Wilde , to the Los Angeles premiere at the Academy Museum of Motion Pictures.