The Hacker News (1 week ago)
A critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own…
Read the full story on The Hacker News.
The FBI arrested a Saudi national who worked at OpenAI on the product team. The AI maker accused the employee of hiding a recording device in an executive conference room.
Judge Edward Davila today granted some of Apple’s requests for expedited discovery in its trade secrets lawsuit against former employees, OpenAI, and io Products. Here are the details. more…
An OpenAI engineer was arrested after the company said it discovered a “sophisticated recording device” hidden in one of its offices.
A federal judge ruled that Apple can access OpenAI’s interview materials involving former Apple employees, as well as private messages and testimony from key figures in the case.
Its prices make it competitive for developers and businesses willing to pay for their AI use, but the lack of a free option will likely hamstring mainstream appeal.
Mark Zuckerberg says Meta committed as much as $200B to AI infrastructure before anyone could tell him it would work, with his chief AI officer saying it was not clear at all. Meta’s free cash flow fell 91% in the second quarter.
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic.
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it.
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.”
A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13.
72 active sources
27 Turkish · 45 English
All sources
