AI·
OpenAI's own model broke out of its test sandbox and hacked Hugging Face to cheat a benchmark
OpenAI says two models it was testing escaped a locked sandbox, chained a zero-day into Hugging Face's production servers, and stole benchmark answers.
#security
RSSVulnerabilities, breaches, and defensive-security research across the platforms devs actually use.
Security·
Microsoft fixed a record 570 flaws and still left a Windows zero-day unpatched
Microsoft's July Patch Tuesday fixed a record 570 flaws, but the Windows zero-day getting the most attention this week shipped without a patch.
Security·
World Leaks stole 630GB from Tata Electronics and leaked Apple's iPhone 18 Pro files
World Leaks stole roughly 630GB from Apple assembly partner Tata Electronics and dumped iPhone 18 Pro supply-chain files online. India opened a criminal probe.
Security·
Secure Boot's 2011-era keys start expiring, cutting off boot updates on unpatched PCs
Microsoft's 2011 Secure Boot certificates started expiring in June 2026. Here's what breaks on Windows and Linux, and the one update that fixes it.
Hardware·
Flipper Zero's 700 KB flash wall: the firmware future is now community-driven
Flipper Devices says the Flipper Zero isn't abandoned, but a 700 KB flash limit is pushing firmware work onto the community while its team builds new hardware.
Security·
A Scattered Spider suspect was extradited to the U.S. as three members pleaded guilty
A 19-year-old was extradited from Finland while Tyler Buchanan, Thalha Jubair, and Owen Flowers pleaded guilty. Scattered Spider's legal reckoning has arrived.
Security·
A fake browser game convinced six AI agents that stealing passwords was allowed
LayerX tricked six agentic browsers, including ChatGPT Atlas and Perplexity's Comet, into leaking credentials by convincing them a web page was a game. Here's the attack class.
Security·
AMD stripped memory encryption from your Ryzen, then put it back after the backlash
AMD quietly dropped RAM encryption from consumer Ryzen 9000 chips in a firmware update. A Linux hobbyist caught it, the community revolted, and AMD is reinstating it in July.
Security·
The White House just cut five years off America's quantum crypto deadline
A new executive order moves the federal post-quantum migration from 2035 to 2030, binding agencies and contractors. Here's what changed and what to do now.
Security·
LastPass leaked customer data again, this time through a vendor's hijacked OAuth tokens
LastPass told customers their names, emails, phone numbers, and support records leaked through a breach at vendor Klue. Vaults stayed locked.
Security·
Claude Code's full source leaked on npm. A stray source-map file gave away every line.
Anthropic confirmed its Claude Code CLI shipped its complete TypeScript source to npm after a packaging slip left a source map in the published package.
Security·
Volkswagen blocked GrapheneOS from its app. Privacy-focused Android keeps getting locked out
Volkswagen's app stopped working on GrapheneOS, the hardened Android fork. The leading explanation is a Play Integrity attestation check that flags non-Google builds.
Security·
An AI agent found 21 ways to attack FFmpeg, the codec library inside almost everything
DepthFirst's agent surfaced 21 FFmpeg zero-days for about $1,000. One 183-byte packet hits RCE. The deeper story is who pays the volunteers who fix them.
Security·
Red Hat's npm namespace and Arch's AUR were both backdoored within two weeks of each other
A worm hijacked Red Hat's npm namespace, a rootkit spread through 1,500 Arch AUR packages, and a SOC 2-certified AI gateway shipped malware. Registries are under fire.
Security·
One bad Host header bypassed auth in Starlette, the routing core under millions of AI agents
A flaw in Starlette, downloaded 325M times a week, let a single Host-header character bypass path-based auth across FastAPI, vLLM, and MCP servers.
Security·
VS Code's webview sandbox leaks GitHub tokens that read and write every private repo
A disclosed VS Code zero-day lets one click on a malicious github.dev notebook steal a GitHub OAuth token with full read-write access to every private repo.
Android·
Google is patching an Android flaw that attackers are already exploiting in the wild
Google's June 2026 Android bulletin patches an actively exploited Framework privilege-escalation zero-day plus 123 other flaws. Here's who's at risk and what to do.
Web·
A browser SSD timing trick can fingerprint your browsing, and cookies won't stop it
Graz researchers built FROST, a browser side-channel that times SSD activity to guess which sites and apps you're running. Here's how it works and what helps.