Anthropic said Mythos was too dangerous to release. Then four random guys in a Discord gained access on day one by guessing the URL...
This is pretty insane:
→ Group in a private Discord guessed the endpoint from Anthropic's naming conventions
→ They figured out the conventions from the leak in the Mercor breach three weeks ago
→ Used a contractor's legit eval credentials to walk in
→ Have been using it ever since to build simple websites
The AI that finds zero-days in every operating system on earth was defeated by address bar autocomplete... big yikes
‼️🇧🇷 A massive database dubbed "MORGUE" containing 251 million Brazilian CPF records has been put up for sale on a popular cybercrime forum.
‣ Threat Actor: Buddha
‣ Category: Data Breach / Data Sale
‣ Victim: Brazilian Government (https://t.co/xyuwqE50Xj)
‣ Industry: Government
Key statistics:
▪️ Total records: 251,720,444
▪️ Size: 25.1 GB (no indexes)
▪️ Format: .db
▪️ Male: 126,475,434
▪️ Female: 122,050,673
▪️ Undetermined: 2,473,893
The actor notes the database is larger than Brazil's current living population of 212 million because it also includes records of deceased individuals.
The data includes:
▪️ CPF (Cadastro de Pessoas Fisicas, national ID number)
▪️ Full name (NOME)
▪️ Sex (SEXO)
▪️ Date of birth (NASCIMENTO)
▪️ Mother's name (NOME_MAE)
▪️ Father's name (NOME_PAI)
▪️ Death flag (FLAG_OBITO)
▪️ Date of death (DT_OBITO)
▪️ Race (RACA)
▪️ City of birth (CIDADE_NASCIMENTO)
▪️ State of birth (UF_NASCIMENTO)
The asking price is $500 USD in BTC.
Olhando o twitter por 10 minutos a única coisa que sinto é raiva e tristeza. Movimentos extremistas de todos os lados. O mundo a beira da anarquia e caos. Só confirma quão depravado, mau e sem Deus o homem é. Não vê nada além de si mesmo.
[D10-11] Been implementing some new endpoints to list schedules and children. Working with react-admin is really easy and has been very productive. Translated the UI to Portuguese and the panel is mostly functional. #100DaysOfCode
Day 8-9 of 100. Lost huge amounts of time trying to figure out why the lambda handler was being called twice by the cron-job. Now I'm working on the front-end with react-admin and adding firebase auth. Didn't had the time to finish the Twilio hackathon☹️ #100DaysOfCode
Day 7 of 100. Got DynamoDB finally listing, I was doing something wrong with the keys. Now I can retrieve a list of records, check the schedule and send the SMS with Twilio. Almost there! #100DaysOfCode