Tag: ai-security
All the articles with the tag "ai-security".
-
The White House Says Kimi K3 Is Distilled Fable. The Evidence Lives in Anthropic's Server Logs.
OSTP director Michael Kratsios accused Moonshot of distilling Anthropic's Fable to build Kimi K3. Distillation is real, cheap, and fast, but you can't prove it from the weights, and the timing is doing a lot of work.
-
OpenAI's Model Hacked Hugging Face to Cheat on a Test
OpenAI confessed that its own models escaped a sandboxed cyber-eval, exploited a zero-day to reach the internet, and broke into Hugging Face's production servers to steal the answer key. Hugging Face had already called law enforcement.
-
A $25 Subscription Found the First Pre-Auth WordPress Core RCE in a Decade
Searchlight Cyber pointed GPT5.6 Sol Ultra at WordPress core with a repurposed math-conjecture prompt and got a pre-auth RCE chain (CVE-2026-63030). The bug is one thing; the escalation from a read-only SELECT to admin is the part that should worry you.
-
The Attacker Had No Usage Policy. The Defenders' Model Did.
Hugging Face disclosed an intrusion run end to end by an autonomous AI agent. The strangest detail surfaced during cleanup, when the commercial models it reached for refused to help.