During the July 2026 Hugging Face intrusion, an autonomous AI agent stashed its own working files in public repos. We found 500+ of them - tool source, C2 code, exfil'd data, etc. - and analyzed the whole lot.
#AI#CyberSecurity#AISecurity#ThreatIntel
https://t.co/NZ3TsUEV0u
Howdy! Hiring another 2 adversarial AI/ML operators/pentesters on my team - fully remote, challenging ops, very very very good comp, & great team. If I know you or you're interested, reach out. Hiring is open to canadians/majority of the globe. https://t.co/z1qgixyogw
The first-ever NDC Toronto is only 4 weeks away💥
Secure your spot → https://t.co/W7uyoxIwtg 🎫
🎙️ World-class speakers. Incredible sessions. Hands-on workshops. Featuring @nickchapsas, @shanselman, @gregcons, @richcampbell and @lefticus to name a few!
🧠💻 Your AI coding assistant could be executing invisible instructions without your knowledge.
We found a way to hijack Cursor using nothing more than a README file.
No malware. No alerts. Just invisible prompt injections.
🔗 https://t.co/cfvzjLN6Wq
Another week, another new Crucible Challenge.
Shoutout to these three for being the first to solve our reasoning model Challenge, DeepTweak!
Get your tweak on: https://t.co/h3sTSEGOxz
All these competitions are basically handing your TTPs to model providers. If you’re a red teamer who values their TTPs, I have no idea why you would participate. You can do it against the real model without a proxy.
New Research: New Gemini for Workspace Vulnerability Enabling Phishing and Content Manipulation. Our latest blog examines vulnerabilities in Google’s Gemini for Workspace, a versatile AI assistant.
🔗 Read more: https://t.co/dq9IYsAFEx
Today, we publicly disclosed 14 new CVEs across three critical machine learning projects. These vulnerabilities highlight the importance of proactive security in AI and reinforce our commitment to safeguarding the future of machine learning.
👉 https://t.co/qfQNEHFjjD