Your Security Digest · 31 jul

Today, 35 things to read.

5 critical · 30 to skim · nothing on fire

Data source: supabase

tracked35

critical5

active exploit0

35 incidents · AI / agentsupdated live

Jul 292d ago

…

criticalzero-day

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of the fo

aeo—social0 · flat

Jul 292d ago

…

mediumbreach

Anthropic confirms Claude is down worldwide

Claude is down for some users, with Anthropic confirming elevated errors across multiple AI models.

aeo—social0 · flat

Today, 35 things to read.

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

Anthropic confirms Claude is down worldwide

Your AI Agents Are Guessing at Scale: Permissions Decide the Damage

OpenAI models used Artifactory zero-days to escape to the internet

Shadow AI agents are multiplying. Here's how to find and secure them.

OpenAI confirms ChatGPT is down worldwide

Hermes AI agent used to automate attack on Thai Finance Ministry

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

New Dolphin X malware uses AI to rank high-value targets

Fake Claude app promoted by Bing ads pushes SectopRAT malware

OpenAI says its AI models hacked Hugging Face during testing

How enterprise GenAI can amplify ransomware risk — and how to contain it

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

JadePuffer agentic attacks now target AI model data with ransomware

Critical ServiceNow code execution flaw now exploited in attacks

Hugging Face warns an autonomous AI agent hacked its network

Claude Chrome extension flaw lets malicious extensions trigger AI actions

AI Agents Broke the Security Playbook. Here's What Replaces It.

Google Gemini CLI abused as a hacking agent, malware botnet operator

We built a vulnerability vending machine: AI tokens in, zero-days out

OpenAI temporarily relaxes GPT-5.6 Sol usage limits

Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

The Replicant in Your Directory: AI Agents and the Identity Security Gap

Microsoft expects more Windows security updates from AI-discovered flaws

New Forg365 phishing platform uses AI to target Microsoft 365 accounts

CISA orders feds to prioritize patching Langflow auth bypass flaw

3 Ways AI Powers Service Desk Attacks and How to Prevent Them

Felons, Fraudsters Flog Offensive Cybersecurity Startup

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

Phishing poses as big-brand job interview to steal Google accounts

JadePuffer ransomware used AI agent to automate entire attack

Claude Fable 5 isn’t permanently leaving subscriptions, Anthropic says

Claude Fable relaunch disappoints users with nerfed performance