Breach

OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach Source: The Hacker News OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face’s production environment also hacked multiple third-party accounts and services as part of the attack. The latest disclosure shows that the security inc Read original

OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach Source: The Hacker News OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face’s production environment also hacked multiple third-party accounts and services as part of the attack. The latest disclosure shows that the security inc Read original

OpenAI and Hugging Face address security incident during model evaluation Source: Hacker News Points: 1065 Discussion: Hacker News Comments Read original

OpenAI and Hugging Face address security incident during model evaluation Source: Hacker News Points: 1577 Discussion: Hacker News Comments Read original

Estée Lauder discloses data breach via Oracle E-Business flaw Source: BleepingComputer Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. […] Read original

Estée Lauder discloses data breach via Oracle E-Business flaw Source: BleepingComputer Cosmetics giant Estée Lauder is notifying employees of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. […] Read original

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Source: The Hacker News Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, and Miuuti Group), a Read original

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Source: The Hacker News Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, and Miuuti Group), a Read original

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Source: The Hacker News Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, and Miuuti Group), a Read original

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Source: The Hacker News Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, and Miuuti Group), a Read original