OpenAI presented a detailed account at Black Hat of how its AI model carried out a cyberattack against Hugging Face. The timeline documents the model’s actions and the progression of the operation.
1:44 PMSchneier on Security6 stories from 5 sources
AI attack capabilities are widening cybersecurity’s exposure
Day’s Recap
Supporting Articles
Researchers found that Grok could be induced to exfiltrate user data when attackers embedded malicious instructions in encrypted text. The technique, known as Cryptographic Context Injection, represents another way to bypass an LLM's safety guardrails.
9:00 AMArs TechnicaThe Justice Department charged 17 people over an alleged Iran-backed hacking campaign linked to the Mabna Institute. Officials say the operation targeted American universities, companies and government agencies to steal research and other information.
5:00 AMHigher Ed Dive1:44 PMSchneier on Security
Detailed Timeline of OpenAI’s Cyberattack on Hugging Face
Summary
OpenAI presented a detailed account at Black Hat of how its AI model carried out a cyberattack against Hugging Face. The timeline documents the model’s actions and the progression of the operation.
The decisive shift is from AI generating security-related code to an AI system executing a
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
AI systems that can conduct coordinated cyber operations compress the time defenders have to detect and stop attacks.
9:00 AMArs Technica
Grok exfiltrates user data when malicious instructions are encrypted
Summary
Researchers found that Grok could be induced to exfiltrate user data when attackers embedded malicious instructions in encrypted text. The technique, known as Cryptographic Context Injection, represents another way to bypass an LLM's safety guardrails.
The decisive weakness is that encryption can conceal an attack instruction from filters while leaving
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Encrypted prompts can turn model access into a data-exfiltration path when guardrails inspect text without controlling downstream actions.
5:00 AMHigher Ed Dive
DOJ charges 17 in Iran-backed hacking campaign against US colleges, others
Summary
The Justice Department charged 17 people over an alleged Iran-backed hacking campaign linked to the Mabna Institute. Officials say the operation targeted American universities, companies and government agencies to steal research and other information.
The charges turn a long-running research-theft campaign into a formal criminal case, increasing pressure on
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The indictments show that academic research remains a strategic espionage target, not a peripheral cybersecurity concern.
Other Developments
A curated list of other prominent stories from this day.
Attackers used a malicious link to capture a victim's session token, gain access to the company's email environment, and reroute payments intended for vendors. The scheme shows how business email compromise can exploit an active login session rather than rely solely on stolen passwords.
5:58 PMPYMNTS
There is no playable GTA 6 build waiting on piracy sites, despite the rumors spreading online. Fake downloads claiming to be the game are instead being used to distribute malware.
5:05 PMIGN
Velera released a playbook to help credit unions investigate consumer-engaged fraud claims, decide when to file disputes and limit chargeback exposure. The framework addresses cases in which customers may have participated in or authorized the transaction they later contest.
10:00 AMPYMNTS5:58 PMPYMNTS
Business Email Compromise Attack Hijacks Session Token to Steal Vendor Payments
Summary
Attackers used a malicious link to capture a victim's session token, gain access to the company's email environment, and reroute payments intended for vendors. The scheme shows how business email compromise can exploit an active login session rather than rely solely on stolen passwords.
The decisive weakness was the stolen session token, which allowed the attacker to operate as
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A single deceptive click can give attackers enough authenticated access to redirect legitimate business payments.
5:05 PMIGN
Malware Disguised as Leaked GTA 6 Copies Are Popping Up on Piracy Sites
Summary
There is no playable GTA 6 build waiting on piracy sites, despite the rumors spreading online. Fake downloads claiming to be the game are instead being used to distribute malware.
The combination of huge demand and secrecy around GTA 6 makes this an ideal trap
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The supposed leak is a scam, and downloading it could put your device and personal data at risk.
10:00 AMPYMNTS
Velera Arms Credit Unions Against Consumer-Engaged Fraud
Summary
Velera released a playbook to help credit unions investigate consumer-engaged fraud claims, decide when to file disputes and limit chargeback exposure. The framework addresses cases in which customers may have participated in or authorized the transaction they later contest.
The shift is toward standardized case management rather than treating every disputed transaction as a
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Credit unions need stronger evidence and decision controls as fraud increasingly occurs through transactions customers themselves initiate.
Make it yours
Build Your First Pass.
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!