Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.

ReliaQuest observed attackers pairing ClickFix with the PySoxy proxy tool to establish redundant encrypted access paths and ...

The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...

Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ...

John Hammond is a Security Researcher at Huntress as well as a cybersecurity instructor, developer, red teamer, and CTF enthusiast. John is a former Department of Defense Cyber Training Academy ...

AI tools work well on their own, but they work best in combination ...

KongTuke has been regarded as the original access broker and has switched to Microsoft Teams for social engineering attacks, ...

A fake repository mimicking OpenAI’s Privacy Filter on Hugging Face accumulated ~244,000 downloads before being removed. It delivered a multi-stage Rust infostealer ...

OpenAI has published a technical explanation of its Windows sandbox for Codex, detailing a stricter local setup for the coding agent on developer PCs. Codex can still read broadly across a system, ...

Weekly ThreatsDay Bulletin: supply chain attacks, fake support lures, AI tampering, data leaks, ransomware, and exploited ...

OpenAI has brought its Codex coding agent to the ChatGPT mobile app, providing iPhone and Android users with remote access to ...

OpenAI has released a new way to interact with its Codex app from your smartphone. An update to ChatGPT’s mobile app brings ...