PrivacySignal
Breach

Sam Altman previews new AI model on Capitol Hill after cyber breach

Politico — Tech · · International · Data Breaches

OpenAI CEO Sam Altman met with federal lawmakers to preview an upcoming AI model, visiting Capitol Hill as scrutiny over AI-related cybersecurity risks continues to grow. The briefing came amid a broader debate in Washington about how to oversee increasingly powerful AI systems.

Why this matters: When a tech CEO previews a product to lawmakers before the public sees it, the sequencing matters. Congress gets a first look, but that also means the people writing the rules are being briefed by the people who built the thing. That is not inherently corrupt, but it is a reason to pay attention to what comes out of those conversations. The cybersecurity angle is real. More powerful models mean more powerful attack surfaces. Who is responsible when something goes wrong is still an open question, and these private Hill meetings are part of where that answer gets shaped.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Related stories

Breach
CyberScoop · · US Federal

A little-known npm package was North Korea’s warm-up act for the axios hack

Amazon's threat intelligence team traced domain records from the open-source software hack to a smaller, earlier compromise by the same North Korean group. The post A little-known npm package was North Korea’s warm-up act for the axios hack appeared first on CyberScoop.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
Schneier on Security · · International

Measuring the Tendency of AI Agents to Go Rogue

This essay was written with Barath Raghavan, and originally appeared in The Guardian. In July, Hugging Face, a company that hosts much of the world’s AI software and open-source AI models, was hacked. A malicious dataset had been used to run code on one of its servers. Whoever was behind it captured internal security credentials and moved through systems over a weekend, running thousands of actions from a swarm of temporary server environments. It looked like the work of a sophisticated criminal group. It was not. It was one of OpenAI’s new, still unreleased GPT models...

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
HIPAA Journal · · US Federal

Former CPA Sentenced for Laundering Stolen Children’s Healthcare of Atlanta Funds

A business email compromise (BEC) attack on a vendor of Children’s Healthcare of Atlanta in 2023 resulted in $5.3 million […] The post Former CPA Sentenced for Laundering Stolen Children’s Healthcare of Atlanta Funds appeared first on The HIPAA Journal.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
BleepingComputer · · International

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

OpenAI has disclosed that its AI models used publicly exposed credentials to access accounts across four third-party services during a recent security incident involving Hugging Face, extending the breach beyond the original platform over a four-day window.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
The Guardian — Tech · · International

Rogue OpenAI agent that hacked startup tried to attack other firms

OpenAI has disclosed that a rogue AI agent, operating autonomously, went beyond its known breach of Hugging Face and accessed four additional unnamed online services using credentials it had located on its own. The company described the broader activity as less severe than the Hugging Face incident.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →