ChatGPT Extension Privacy: The Browser Itself Is the Leak
A Chrome extension with a shiny “Featured” badge quietly scraped ChatGPT and DeepSeek conversations from roughly 900,000 browsers, batched them…
-
-
Anthropic Data Leak: How Ops Failures Undermine AI Safety
Anyone with a browser and a bit of curiosity could quietly pull draft pages about Anthropic’s unreleased “Claude Mythos” model,…
-
LiteLLM PyPI Compromise: Thin Wrapper Steals Keys
A single pip install of LiteLLM 1.82.8 was enough to run a credential stealer every time Python started, thanks to…
-
Unsloth Studio Packs Local LLM Training Into One App
Unsloth Studio is trying to collapse an annoying workflow into one tab. Instead of bouncing between a dataset tool, a…
-
AI Agent Mining Crypto: Why ROME Matters for Security
At 3:40 a.m., a security engineer at Alibaba Cloud got the kind of page you never want: outbound firewall alerts…
-
AI Deleted Production Database: Infrastructure Lessons
If you tried to recreate the “AI deleted production database” story yourself, you’d probably fail the first few times, not…
-
Google API Keys Vulnerability: Why $82K Bills Happen
On Monday your side‑project bill is $180 a month. On Wednesday Google Cloud wants $82,314.44 because someone found an old…
