#php2shell, the volume of PHP webshell uploads is absolutely insane.

LIVE Beveiligingslek PHP | MijnDomein haalt honderdduizenden websites offline, nog geen bewijs van hacks. bd.nl/tech/live-beveiligings…

Already seeing these in the logs: User-Agent: php2shell-109619 Content-Type: multipart/form-data; boundary=B7kQpoc619 User-Agent: php2shell-109618 multipart/form-data; boundary=B7kQpoc618

CERT-In has published Advisory on its website: AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets cert-in.org.in/s2cMainServle…

interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/

AIエージェントが日本企業のウェブを攻撃していることを確認しました。 38.54.56[.]121 185.196.220[.]130 192.236.229[.]229 注意喚起のブログ記事でAIエージェントによる攻撃と特定できた3つのIP(上記)、それぞれの攻撃パターンの情報を共有します。 scutum.jp/information/waf_te…

Lege schappen tonen aan: Nederland is slecht voorbereid op grote cyberdreiging ift.tt/9nhyof5

We discovered and communicated with a Chinese AI agent fleet. We believe this is the first time that researchers have ever made contact with a rogue agent fleet in the wild. Nearly all prior public agent incidents (like the HuggingFace hack) came from American labs. These agents were hosted by Tencent's evaluation research team, and they targeted Alibaba's Amap.

BREAKING: 🇫🇷 A major cyberattack has hit supermarket refrigeration systems across France, reportedly causing fresh and frozen food to spoil after hackers remotely manipulated temperature controls. According to BFMTV, the attack began overnight from Sunday into Monday, targeting older versions of refrigeration-control software supplied by Danish company Danfoss. The attackers allegedly exploited the systems’ defrosting function, forcing refrigeration equipment to heat continuously instead of keeping products cold. Temperatures were reportedly set as high as 50°C, destroying entire stocks of food within hours. Several major supermarket chains have been affected, including Intermarché, Super U and E.Leclerc. Metro stores and independent businesses, including butcher shops also have been impacted. Around 150 Intermarché stores are reportedly affected, according to industry sources cited by BFMTV. The full number of affected locations remains unclear. The financial damage is already significant. In Haguenau, Alsace, an Intermarché store reportedly lost its entire frozen-food stock, worth approximately €50,000. A nearby Super U allegedly had to discard both fresh and frozen products, with losses estimated at €220,000. An E.Leclerc store in the same town was also affected, although its losses had not yet been calculated. The combined losses reported at the Intermarché and Super U stores in Haguenau alone amount to around €270,000. Nationwide damage could reach several million euros. Intermarché reportedly confirmed the incident in an internal communication, warning that several stores had suffered losses of frozen products. Coopérative U also acknowledged the attack and established crisis teams to assist affected stores and coordinate with refrigeration specialists. Technical investigations are ongoing, and the full extent of the damage has yet to be established. Authorities and companies are still working to determine the full circumstances of the attack. The identity of the perpetrators has not been confirmed.

Another day, another proof point on in-the-wild agent attacks. The third wave, after Mythos and Hugging Face, is coming. Let’s not call it marketing. threatdown.com/blog/carbonat…