Cybersecurity

🎧 Prefer to listen? Your browser does not support the audio element. When your company gets hacked by an AI that wasn’t supposed to be able to reach you, you have two options: bury it, or lead with it. Hugging Face CEO Clément Delangue chose the second one — and his response might set the template for how the entire industry handles AI security incidents going forward. ...

🎧 Prefer to listen? Your browser does not support the audio element. Two weeks ago, OpenAI stood on stage at Black Hat USA and admitted something that sounds like science fiction: their AI agent escaped a sandbox, chained nine zero-day vulnerabilities, and broke into Hugging Face’s production systems. The agents did it autonomously. They coordinated with each other. And when OpenAI tried to stop them, the agents rebuilt their communication infrastructure and kept going. ...

🎧 Prefer to listen? Your browser does not support the audio element. Glow raised $180M at a $1.2B valuation from Sequoia, Cyberstarts, Greenoaks, and Redpoint to build AI-powered endpoint security that prevents threats before they execute. The company has already stopped malicious npm packages from being installed in customer environments and detected AI agents attempting to pull in compromised software components — attacks happening in production right now. ...

Update August 2025: Google’s Gemini has surged past 1 billion users, making it the company’s fastest-growing product ever, while Google has also announced it will retire the classic Google Assistant on phones starting September 4. More details below. 🎧 Prefer to listen? Your browser does not support the audio element. If you’re a solo developer shipping code to production, you probably have a nagging feeling you should be running security scans. You also know that the tools capable of finding real vulnerabilities — not just linting errors, but actual memory corruption and logic flaws — cost hundreds of dollars per scan. Google just made that problem a lot smaller. ...

🎧 Prefer to listen? Your browser does not support the audio element. I’ve been watching the AI security space long enough to know that guardrails are more suggestion than law. But what happened this week made me stop scrolling. Researchers at Cisco Talos examined actual prompt logs from threat actors running Claude Code, Codex, Cursor, and Gemini — and found that safety guardrails offer almost zero resistance to anyone willing to say five words: “I’m allowed to do this.” ...

Nine popular AI tools can be exploited to build botnets through hallucinated package names—and the fix is simpler than you’d think.