Infostealer logs expose replayable AI tokens that bypass MFA
Okta analyzed a 7 GB infostealer dump from Telegram containing data from 5,871 infected machines across 162 countries. Of 44,791 JWTs, 555 were likely AI-service auth tokens, and 2,937 JWEs were mostly set by OpenAI.
2 sources
More stories today
Ethan Mollick: 'Wait Calculations' suggest pausing hard math and biology work
Ethan Mollick·1 hour agoa16z podcast explores how to measure frontier AI intelligence
a16z's Erik Torenberg, Ben Horowitz, and Jennifer Li interview Vals founder and CEO Rayan Krishnan on the challenge of measuring model improvement as public benchmarks saturate and models optimize for them.
YouTube·1 hour ago
Local on-device AI touted as free, privacy-preserving alternative
Clem Delangue·1 hour ago
Cybersecurity by email
Get an email when there's news on Cybersecurity
No news that day, no email.
Cohere video explores where AI tools concentrate
Cohere's video examines which tasks and occupations AI tools concentrate around, based on an analysis published at mcp-landscape-article.vercel.app. It asks whether AI tools are truly everywhere or clustered in specific areas.
YouTube·1 hour ago
AI spend per employee slumped at top firms in August
Ramp data shows 56% of its 70,000 business customers paid for AI products in August, up just 0.4% from July. Spend per employee at top 1% of firms fell nearly 10% to $7,205, as average token costs dropped to $0.68 per million from a March peak of $1.15.
TechCrunch·1 hour ago
Qwen CUA Driver releases v0.20.x with prebuilt binaries
QwenLM released cua-driver-rs v0.20.0 through v0.20.5, providing prebuilt binaries for macOS (codesigned/notarized), Linux (unsigned), and Windows (unsigned). The releases also publish the @qwen-code/cua-sdk npm package.
Qwen Code Releases·1 hour agoChatGPT generates stereotypical US state map
A Reddit user asked ChatGPT to create a map of the US showing what each state stereotypically stands for, with over-the-top single words and small images. The post showcases the model's creative image generation.
r/ChatGPT·2 hours ago
Reddit debates whether AGI has already arrived
Reddit users argue that LLMs already surpass median human performance, suggesting AGI may have been achieved unnoticed. Others contend current architecture is insufficient and AGI remains distant.
r/Singularity·2 hours ago