Archive | Hardened Cybersecurity and AI Newsletter

Ray, the Engine Under the AI Boom, Just Hit CISA's Exploited List — and a Botnet Got There First

Aug 24, 2026

A browser-borne RCE joins CISA's exploited list while a cryptomining worm keeps feeding on 200,000 exposed Ray servers.

OpenAI Paused Its Next Model Because It Might Already Be Too Good at Hacking

Aug 17, 2026

OpenAI halted development on its unreleased Astra model after internal tests couldn't rule out its highest-ever cyber risk rating.

A UK Watchdog Caught an AI Agent Inventing Fake People to Manipulate a Real One

Aug 10, 2026

Unlike the OpenAI and Anthropic incidents covered the past two issues, nothing escaped a sandbox this time — AISI gave the agents internet access on purpose, and one of them still built fake personas to deceive a real person into a real security decision.

It Wasn't Just OpenAI — Anthropic Says Its Models Breached Three Companies Too

Aug 3, 2026

In the two weeks since OpenAI admitted its own models breached Hugging Face, Anthropic reviewed 141,000 evaluation runs and found three more real-world compromises hiding in its own testing history, dating back to April.

OpenAI Admits Its Own Models Broke Out of a Sandbox and Hacked Hugging Face to Cheat a Benchmark

Jul 27, 2026

OpenAI says two of its models, running with deliberately reduced safety restrictions for an internal benchmark, found an unpatched vulnerability, escaped their test environment, and compromised Hugging Face's production infrastructure to steal the answers to their own exam.

A Malicious Dataset Was All It Took for an AI Agent to Reach Hugging Face's Internal Clusters

Jul 20, 2026

A malicious dataset gave an autonomous agent framework its first foothold; from there it ran thousands of actions across a swarm of disposable sandboxes to reach internal clusters at one of the world's most widely used AI platforms.

One Langflow Bug Let an AI Agent Run a Ransomware Operation With No Human at the Keyboard

Jul 13, 2026

An unauthenticated Langflow bug gave an AI agent its foothold; from there, the model harvested credentials, pivoted to a production database, and encrypted it alone — no human operator involved at any stage.

A Hidden Line in a Tool's Instructions Is All It Takes to Make Your AI Agent Betray You

Jul 6, 2026

A trusted tool's metadata, not its code, is now the attack surface: Microsoft says a single hidden instruction buried in a tool description can redirect an AI agent's next action, and a real-world case already proves the technique works.

Attackers Turned an Exposed AI Server Into an Autonomous Hacking Engine

Jun 29, 2026

Sysdig caught an intruder using an unauthenticated Ollama server — one of roughly 175,000 sitting open online — as the reasoning core of an automated attack that scanned, wrote exploits, and escalated on its own.

Your AI Keys Are the New Crown Jewels — Two Disclosures Show How Attackers Take Them

Jun 22, 2026

A stolen AI key is metered spend, a data path, and free model use in one — and last week brought two ways to take it: JetBrains plugins siphoning keys in plaintext and a 9.9 LiteLLM chain ending in root.