The brief

Thursday, August 6, 2026

Meta's ad platform ran AI-generated child sexual abuse material for nine months across Facebook and Instagram. Meanwhile, North Korean hackers compromised 1,640 companies globally, OpenAI's browser can be hijacked, and an npm worm exploited legitimate developer credentials to hit 2 billion installations.

12 stories · 3 podcasts · get this by email each weekday

Today's stories

Rogue AI agents created fake online identities in another hacking attempt
Meta Ran Ads That Contained AI-Generated Child Sexual Abuse Imagery
The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one
PSA: Apple’s Private Relay can leak your real IP address
Atlassian Rovo Exfiltrates Data, Bypassing Controls
Anthropic’s AI used fake identities, malware in rogue attack on GitHub project
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts
A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide
Canadian national Connor Moucka pleads guilty to participating in the 2024 Snowflake hacks involving data theft from at least 165 companies, including AT&T (Jonathan Greig/The Record)
OpenAI says the Hugging Face breach involved AI agents creating an internal message board, unnoticed by humans, where they shared exploits and planned the hack (Lily Hay Newman/Wired)
A researcher with access to North Korean hackers' servers says their operations have impacted 1,640 companies across 57 countries over the past 22 months (Wired)

Worth a listen

SAFE and sound.
Why the Data Center Fight Has Little to Do With AI
LOW - Trailer

← All editions