SoylentNews

Arthur T Knackerbracket writes:

https://arstechnica.com/security/2026/08/thousands-of-servers-can-be-backdoored-by-exploiting-buggy-motherboard-controllers/

Thousands of Internet-connected servers sold by the world's biggest manufacturers can be remotely backdoored by exploiting critical vulnerabilities—some more than a decade old—that lurk deep inside system motherboards, according to research presented Wednesday.

Baseboard management controllers are miniature computers that are embedded into the motherboards of virtually every enterprise server. The microcontrollers, typically abbreviated as BMCs, run with their own operating system firmware, network stack, and IP address. Administrators rely on them to monitor the physical status of large fleets of servers and to perform a variety of tasks, including rebooting machines, installing updates, and even reinstalling operating systems. BMCs provide what's known as "lights out" and "out-of-band" management because they work even when servers they're attached to are turned off or are unresponsive.

Researchers have warned since at least 2013 that BMCs present a golden opportunity for hackers looking for ways to gain deep and persistent access to datacenters. The chief culprit was IPMI, the protocol that allows BMCs to operate independently of servers and to perform administrative tasks. Vulnerabilities in this firmware made it possible for attackers to remotely execute malicious code on the controllers and, from there, infect the servers they manage.

Research presented Wednesday at the Black Hat security conference in Las Vegas shows that little has changed since then. HD Moore, a firmware security expert and the CEO and founder of security firm runZero, uncovered more than a dozen new vulnerabilities in BMCs sold by HPE, Supermicro, Avocent, Huawei, Lenovo, Dell, and others. Moore has also found that some of the weaknesses he warned of in 2013 remain active, despite measures intended to fix them.

"The end result is a pervasive, under-monitored, under-patched parallel attack surface that is both Internet-exposed and widespread inside corporate networks, and is much more exploitable than many folks realize," Moore wrote in an email ahead of his talk.

To highlight and quantify the threat, Moore oversaw two large-scale scans. One scanned Internet-connected BMCs at large, while the other internally surveyed the devices inside corporate networks. The external scan found more than 86,000 BMCs that exposed a management service to the public. More than 54 percent of those devices contained one or more critical vulnerabilities. As many as 75,000 of them remained vulnerable to CVE-2013-4786, a vulnerability in the IPMI 2.0 authentication protocol that enables off-line cracking of administrator-level BMC account passwords. The internal scan of 126,761 BMCs, meanwhile, found that nearly 29 percent of them had one or more critical vulnerabilities.

Arthur T Knackerbracket writes:

https://www.theregister.com/security/2026/08/07/china-launches-mysterious-probe-into-security-of-palo-alto-networks-products/5284453

China's Cyberspace Administration (CAC) has conducted a review of Palo Alto Networks' products.

The regulator's announcement [website in Chinese] of its review says it's needed "to ensure the safe and stable operation of critical information infrastructure, prevent cybersecurity risks and vulnerabilities, and safeguard national security."

And that's all Beijing has to say on the matter.

A Palo Alto spokesperson provided The Register with the following statement: "We maintain the highest standards of business conduct and security practices and ethics across our global operations. At this time, there is no impact to our ability to support customers or deliver our products and services in the region."

This matter has echoes of China's 2023 investigation into the security of products from memory-maker Micron, which the CAC announced out of the blue.

Micron had previously fought intellectual property and antitrust cases in China, but the company and Chinese authorities did not explicitly link those matters to the security probe.

The CAC published its findings weeks after announcing the probe and decided Micron's products represented an unacceptable security risk for critical infrastructure operators – effectively banning sales of Micron products to such entities – but didn't offer a detailed explanation for its decision. The memory-maker eventually stopped selling its datacenter and server products in China, a decision that cost it billions of annual revenue – but created new opportunities for China's own memory-makers, which are largely prohibited from selling to American companies.

China is home to several security companies whose product portfolios overlap with Palo Alto's. Huawei and H3C, for example, have plenty to offer local buyers.

Palo Alto doesn't reveal revenue earned from individual countries, so it's hard to know what a potential ban could cost the company.

China has for years accused Western tech companies of assisting US surveillance and offensive hacking activities. The Register would not be surprised at all if Beijing reuses that reasoning in its findings about Palo Alto products. Western governments level the same accusations at Huawei and ZTE.

Beijing's ban on Micron didn't noticeably impact the company's reputation elsewhere. Indeed, the AI boom has brought Micron such great riches that past dents to its bottom line are now almost irrelevant.

Original Submission

Arthur T Knackerbracket writes:

Turning two Mars testbeds into one lunar explorer may prove anything but cheap:

NASA Administrator Jared Isaacman has stated "we simply will not fly it" if claims about the costs of the repurposed Mars rover engineering model prove anywhere near accurate.

Isaacman was responding to the Planetary Society's chief of space policy, Casey Dreier, who had run the numbers on his plan to send a robot to the Moon, built from parts of engineering models of the successful Mars rovers Perseverance and Curiosity.

Dreier estimated that the Polar Rover for Observation, Mapping, and In-Situ Exploration (PROMISE) mission, as discussed by Isaacman in a June presentation, would cost between $723 million and $1.33 billion.

Dreier's figures include a low-end launch and landing cost of $234 million and a high-end estimate of $320 million.

PROMISE is intended to put a rover on the Moon for a fraction of the usual cost. There are engineering testbeds for both Perseverance and Curiosity, dubbed OPTIMISM (Operational Perseverance Twin for Integration of Mechanisms and Instruments Sent to Mars) and MAGGIE (Mars Automated Giant Gizmo for Integrated Engineering) respectively.

While not 100 percent identical to what was sent to Mars, the pair are designed to be close enough to allow engineers to perform activities such as plotting drives on simulated Martian terrain and seeing how the hardware will react to commands sent from Earth.

NASA bosses looked at the engineering models, considered ways to score easy "wins," as Isaacman put it, and came up with an idea.

Engineering models are common enough in spaceflight. A Development Test Model (DTM) of Voyager can be found hanging in the Exploring the Planets gallery at the National Air and Space Museum in Washington DC. The DTM's bus was liberated in 1987 for developing NASA's Magellan Venus spacecraft. The Register also paid a visit to a test model of the European Space Agency's Solar Orbiter on a 2022 visit to the agency's Darmstadt site, which looked more like an explosion of wiring than a simulacrum of a spacecraft.

Arthur T Knackerbracket writes:

https://www.engadget.com/2228894/eu-announces-new-rules-on-ai-transparency/

The European Union has announced that it's new AI transparency rules are now in effect and enforceable across the bloc as of August 2nd. Article 50 of the AI Act requires content publishers to mark and label certain types of AI-generated content, as well as informing users when they are interacting a AI chatbot or agent rather than a real person.

"These obligations are intended to foster trust and integrity in the information ecosystem," the European Commission wrote in its new guidelines. "People should know when they are interacting with AI or exposed to AI-generated content. This will help them make informed decisions, calibrate their trust and reliance on AI and avoid mis information or deception."

The new rules require an "AI" mark if machines assisted in the creation of "authentic-looking" deepfake content (image, audio, video) or published text. If the image, audio, video or text is generated fully by AI, it must carry an "AI-Generated" label. For the latter, regulators cite examples like "fully AI-generated deep fake videos with politicians or fictional events," "full AI-composed music or art" or "AI-generated news summaries."

Other types of AI must also be labeled, like models that recognize your emotions or process biometric data. "The goal is simple: whenever AI plays a vital role, you are entitled to know," the EC said in a video explainer.

The Commission will oversee providers of general-purpose AI models as well. Those organizations will be required to document information, publish training data summaries and implement copyright policies, with non-compliance subject to enforcement by national authorities.

The new law has some teeth, with fines up to €15 million or three percent of global annual revenue for companies and €750k for EU institutions, bodies and agencies. Proportionality will be taken into account for small and medium-sized companies and small mid-cap companies. The rules exempt personal content like group chats along with "evidently artistic" satirical and fictional works.

The new rules make Europe the most prominent regulator of AI technology. They have drawn criticism from the industry, which has argued that the rules are an undue burden which will slow innovation.

However, Europe's tech regulator stated that the rules will simplify development for AI providers by creating a single market with harmonized rules. "It also addresses potential risks to people's health, safety, and fundamental rights, while safeguarding democracy and the rule of law," the EC wrote. "Ensuring its effective implementation is now a key priority for the Commission."

Original Submission

Arthur T Knackerbracket writes:

https://www.cnet.com/science/space/august-lunar-eclipse-north-america/

The lunar eclipse will cover most of the moon and also make it rusty red.

August is already shaping up to be one of the best months for skygazing in recent memory, and the hits just keep on coming. In addition to a planet parade, a meteor shower and a solar eclipse, there is also a lunar eclipse set for the end of August for those in North and South America. 

The eclipse coincides with the full moon, which occurs on the evening of Aug. 27. Per Time and Date, the eclipse begins at 9:23 p.m. ET and lasts until 3:01 a.m. ET, for a total of about 5 and a half hours. The Old Farmer's Almanac says that August's full moon peaks in brightness at 12:18 a.m. ET on Aug. 28, which means this is all happening at the same time.

The path is pretty large and includes all of North and South America, along with all of Africa and Europe, seeing at least part of the action. It's not a full lunar eclipse, even if you're in the best spot. NASA says that about 93% of the moon will be covered, which means you'll still see a sliver of the moon along with a "rusty, coppery tint" along the edge that's covered. Time and Date bumps that figure up to 96%, so it's likely somewhere between the two. 

Those in the eastern US and the eastern half of the Midwest will have the best seats in the house for this one. People along the Rocky Mountains will have a better view than most, with the West Coast and Alaska getting at least a partial eclipse. Unlike solar eclipses, which can be dangerous to view, a lunar eclipse is perfectly safe to watch with the naked eye. In fact, using a telescope or binoculars is encouraged so you can see the eclipse more clearly.

Since it's not a total lunar eclipse, August's Sturgeon Moon doesn't qualify as a blood moon. It's close enough that it'll certainly look like one, though. This is due to the way sunlight interacts with Earth's atmosphere. The atmosphere scatters blue light away, which is known as Rayleigh scattering. This leaves only red and orange light to pass through. It's bent by the Earth's atmosphere and lands on the moon, giving it a reddish appearance.

The Perseids is summer’s most active meteor shower. 

The partial lunar eclipse caps off what should be a very active month for sky enthusiasts. Somewhat strangely, most of the action takes place over just two days. The first day is Aug. 12, which features a planet parade, the peak of the Perseids meteor shower, and for those fortunate enough to be in the path, a solar eclipse that might take place at sunset. That's a lot of activity for just one day. You do have 15 days to sleep it off if you want to catch the lunar eclipse on the evening of Aug. 27. 

This is also the best month of 2026 to view Venus, which is taking a vacation from its spot near the sun, making it much easier to see in the evening after the sun goes down.

Original Submission

Arthur T Knackerbracket writes:

https://www.engadget.com/2229768/open-ai-says-apple-is-wrong-in-trade-secret-lawsuit/

OpenAI calls the trade secret theft lawsuit Apple filed against it "careless, aggressive and oddly personal." It also denies any wrongdoing in its scathing response to the lawsuit and claims Apple got it wrong when it accused OpenAI of hiring its employees to get confidential company information.

If you'll recall, Apple sued OpenAI and two of its former employees, Chang Liu and Tang Yew Tan, in July. In its new lengthy response to the lawsuit, the ChatGPT-maker has published communications between Liu and his former colleagues at Apple to show that they reached out to him to ask for help locating certain confidential information after he had already left.

OpenAI says that after Apple filed its complaint, it admitted that its employees reached out to Liu. However, Apple allegedly tried to "shift the blame to 'residual access'" but didn't disclose that it was a common issue "caused by [the company] failing to properly manage system access when people leave." As a result, former employees can still access Apple files whether they want to or not, OpenAI writes. Sometimes, they aren't even aware that they still have access. Apple accused Liu of "surreptitiously [accessing and downloading] dozens of [its] confidential hardware-related files, including voluminous, detailed information about unreleased products, engineering presentations, technical specifications, and proprietary project data."

Meanwhile, Apple accused Tan of directing job candidates still working for it to bring 'actual parts' that they can show to OpenAI personnel at interviews. Tan and his team would use interviews to "solicit additional confidential Apple information," the company claimed. OpenAI's defense of Tan isn't as detailed, but it says he has always been clear with his team that the company doesn't want and must not use any confidential information from other firms. Tan was with Apple for 24 years and was the vice president of product design.

In addition to defending the two former Apple employees, the company says Apple's claim that it had tried to contact OpenAI in February about its concerns and didn't receive a response isn't true. Apple apparently emailed the wrong person after confusing two different Asian last names. You can read the chat logs and emails OpenAI has posted on its website.

Original Submission

janrinok writes:

https://arstechnica.com/space/2026/08/the-first-self-driving-vehicle-on-mars-has-proven-to-be-a-smashing-success/

Sometime next week, NASA's newest rover on Mars, Perseverance, will set a record for the most distance driven by any vehicle on another world.

The automobile-sized rover, which landed on Mars in February 2021, will traverse beyond 45.16 km (28.06 miles) across the Martian surface. In doing so it will break the previous distance record held by the long-lived Opportunity rover, which ceased communications with NASA in 2018.

So how did Perseverance reach this record-setting distance in just a third of the time?

"The real enabling technology has been its auto navigation system," said Steven Lee, the project manager for the Perseverance rover at NASA's Jet Propulsion Laboratory, in an interview.

Much like self-driving cars on Earth, Perseverance has sophisticated onboard cameras that image the surrounding terrain, and these images are then processed algorithmically by an onboard computer to calculate the safest route. Terrestrial vehicles have some advantages of course, like clearly defined maps, street signs, lanes, and more. Additionally there are plenty of "road" hazards on Mars, from large boulders to sandy slopes. But at least Perseverance does not have to contend with other traffic and bad drivers.

The Curiosity rover, largely a twin of Perseverance that launched nine years earlier, had similar imaging capability and algorithms. But its onboard computer was a generation older, and some of its chipset dated back to the 1990s, Lee said. As a result, only about 10 percent of Curiosity's driving is autonomous because its processing capabilities are too slow. In its decade and a half on Mars, Curiosity has driven 38.6 km.

By contrast, about 90 percent of the distance driven by Perseverance has been autonomous thanks to its (slightly) more modern Vision Compute Element. This allows the vehicle to perform all of its sensing and computation while its wheels are turning. Not that the vehicle is going super fast, as Perseverance's maximum wheel speed is about 150 meters per hour.

Still, because Perseverance has not had to spend much time stopped to wait for navigation commands from drivers on Earth, the vehicle has been able to maximize the amount of scientific return.

Arthur T Knackerbracket writes:

https://www.theregister.com/cyber-crime/2026/08/03/police-national-legal-database-confirms-data-theft-after-dark-web-leak/5282332

The Police National Legal Database (PNLD) is the latest UK public sector outfit to admit that cybercriminals made off with its data, including the names and work email addresses of police officers, justice staff, government partners, and customers.

The legal lookup service relied upon by police forces and criminal justice agencies across the UK said it discovered the "data security incident" on July 26 and is investigating alongside specialist cybersecurity firms and the National Crime Agency. 

According to the PNLD, the leaked information includes the names, organizations, and work email addresses of police officers, police staff, criminal justice professionals, government partners, and customers. It insists there is "no evidence" that passwords or other authentication data were compromised.

The breach also affected Ask the Police, a public-facing legal advice website operated by PNLD. There, the fallout appears limited to the names and email addresses of people who previously submitted questions through the service.

That's about where the explanation ends. PNLD has yet to say how attackers got in, when the data was stolen, how many people were affected, or whether anyone tried to shake it down before the information appeared online. West Yorkshire Police, which operates PNLD, did not immediately respond to The Register's questions. 

However, the breach appears linked to the same extortion crew that last week claimed responsibility for a similar breach of the Department for Education (DfE). The group, which calls itself "ExfilSquad," currently lists both the PNLD and DfE among its latest victims on its dark web leak site, seen by The Register. 

For PNLD, the crooks claim to have lifted a 1.9 GB dataset containing roughly 135,000 law enforcement contact records, including names, email addresses, and police force areas. The DfE listing boasts of around 600,000 parent and staff contact records, plus another 7,000 from its Turing Portal. The education department confirmed last week that more than 607,000 records had indeed been exposed.

The DfE has confirmed that the compromised information was limited to customer service contact details from its Customer Help Portal and Turing Scheme, and said no other departmental data had been accessed.

Like most cyber-extortion outfits, ExfilSquad doesn't exactly do understatement. Its leak site warns victims that once data appears there, it is "NEVER leaving the public eye," before suggesting any ransom would amount to little more than a rounding error compared with the legal bills that might follow.

The DfE and PNLD's confirmations don't validate everything ExfilSquad posts on its leak site. It also lists Microsoft as a victim, alleging a 13 GB haul containing millions of records, password hashes, internal support tickets, and access permissions. 

Having two organizations confirm breaches claimed on its leak site makes ExfilSquad harder to ignore. Whether the gang's other boasts are equally well founded, or simply the usual cybercrook embellishment, remains to be seen.

Original Submission

Arthur T Knackerbracket writes:

https://www.theregister.com/science/2026/08/04/nasa-puts-astronauts-lives-in-the-hands-of-teslas-flaky-cybertruck/5282628

Tesla has recalled its Cybertruck 11 times to fix issues such as exterior trim panels falling off and an accelerator pedal that can become stuck, but NASA has nonetheless decided the rust-prone vehicle is up to the job of rescuing astronauts if trouble strikes on the launchpad of a forthcoming crewed mission.

Muskmobiles will get the job currently performed by the Mine Resistant Ambush Protected vehicle (MRAP), a heavily armored military personnel carrier that can survive small arms fire and even the effects of a mine explosion. Several companies make MRAPs, and the US military operates dozens of different models tailored to different missions.

NASA uses MRAPs as launchpad getaway cars in case mission controllers decide astronauts or other personnel involved in rocket launches must make a rapid exit. In 2015, the aerospace agency described the MRAPs it uses as possessing "armor is so thick that each door weighs 600 pounds" and said the vehicles have "the sound and feel of a bank vault" and can therefore "function as a bunker on its own, even if it stays put."

News of the Cybertruck's new role came during a Monday event at which NASA discussed SpaceX Crew-13, a mission it has scheduled to carry four astronauts to the International Space Station no earlier than 12 September 2026. The four will travel aboard a SpaceX Falcon 9, and as Elon Musk's rocket company already uses Cybertrucks during its own launches, NASA has decided to adopt them for this launch.

During the event, media asked if SpaceX has modified the Cybertrucks. Joel Montalbano, deputy associate administrator at NASA's Human Spaceflight Mission Directorate, said he was not aware of any modifications. Tesla says the Cybertruck is made of stainless steel and are therefore "tough on the outside to keep you safe on the inside." The company also trumpets "Cabin windows and glass roof have shatter-resistant armor glass that can handle the impact of hail the size of a baseball (or an actual baseball)." When launching the Cybertruc, Elon Musk claimed the glass was impervious to heavy metal balls, but his demo of that strength went comically awry.

Montalbano said NASA is comfortable using Cybertrucks because they're faster than MRAPs and easier to drive while wearing gloves. The exec added that the main reason for using the Muskmobiles is that it means NASA doesn't have to arrange for an MRAP crew to attend launches, an effort he characterized as wasteful given that SpaceX has its own way of doing things involving Cybertrucks.

SpaceX Crew-13's crew comprises NASA's Jessica Watkins and Luke Delaney, plus the Canadian Space Agency's Joshua Kutryk and Roscosmos cosmonaut Sergey Teteryatnikov. They're all destined to join Expedition 75 on the ISS. Watkins will become the first person to twice reach the ISS in a SpaceX Dragon capsule.

NASA says the expedition will explore in-space manufacturing techniques, augmented reality and artificial intelligence methods for crew health checks, and bioprinting human tissue.

SpaceX has conducted 90 launches of its Falcon rockets in 2026 alone, and all made it off the launchpad – suggesting a high likelihood the Cybertruck's suitability as a rescue vehicle won't be tested by Crew-13.

Original Submission

Freeman writes:

https://arstechnica.com/ai/2026/08/ai-chatbots-have-failed-people-in-crisis-can-that-be-fixed/

This year alone, there have been numerous known instances—often via lawsuits—of AI chatbots (most often, OpenAI's ChatGPT) that have gone horrifically wrong.

A January lawsuit described the story of a man who took his own life after being allegedly "coached" into suicide. A college student in Georgia sued OpenAI, claiming that ChatGPT "pushed him into psychosis."

In June, a Canadian family also sued OpenAI and argued that ChatGPT agreed with the young woman's dismissiveness when it first gave her the option to seek professional mental health advice. ChatGPT allegedly "encouraged" her to end her life, too, and she did so.
[...]
On Thursday, OpenAI announced that it had partnered with the American Psychological Association to "bring psychological science into how we think about responsible AI development and use among young people."
[...]
"Third-party evaluation suggests newer LLMs generally recognize distress and can respond with seeming empathy, and actively damaging responses are infrequent," Shaddy Saba, a professor of social work at New York University, emailed Ars. "Where they fall short is actually probing for risk, guiding people to human care, and holding appropriate boundaries around what an AI should and shouldn't do in these situations."
[...]
While the cases that make the news may have resulted in some of the worst-known outcomes, according to the results of a published November 2025 medical survey, many more people are using chatbots in this way, mostly with innocuous results.
[...]
An April 2026 preprint paper by a team from the City University of New York and King's College London found that "unsafe" models, including Chat GPT-4o, Grok 4.1 Fast, and Gemini 3 Pro, "did more than validate delusional claims; they elaborated on them, absorbed the user's interpretive frame as their own, and progressively lost the capacity to distinguish a user in crisis from a narrative to be extended."

However, since that paper came out, all of these models have been deprecated by their respective makers.

Of the major chatbot makers, only Anthropic responded to Ars' request for comment. Google and OpenAI did not respond.
[...]
He noted that Anthropic says it has worked to reduce sycophancy in its models.
[...]
It's not always easy, though, to know precisely what changes to reduce dangerous mental health outcomes have been effective.

Arthur T Knackerbracket writes:

Keyloggers, audio-visual surveillance, and token theft on CaptivePortal's agenda as hospitality sector put on alert:

Conference-goers may want to think twice about connecting to public Wi-Fi after Microsoft disclosed that Russian foreign intelligence operatives (SVR) are compromising captive portal networks to deliver infostealers, keyloggers, and other malware.

With the help of ReliaQuest's earlier work, Redmond fingered Storm-2945, a subdivision of the SVR's Midnight Blizzard (aka Nobellium), in an attack campaign targeting users of public Wi-Fi networks at places like hotels, conference centers, and other shared venues in the hospitality sector.

Microsoft is still trying to determine how the hackers initially compromise captive-portal networks. The broader AI-assisted operation dates to February 2026, with traffic manipulation observed since early May.

After gaining control of the network layer, Storm-2945 manipulates DNS and HTTP traffic to reroute users through attacker-controlled infrastructure, Microsoft said. The crew also abuses operating systems' connectivity checks to trigger malicious prompts and redirects.

This gives the attackers an adversary-in-the-middle (AitM) position.

Such prompts adopt ClickFix-style methods, which in some cases try to convince public Wi-Fi users to install malware under the guise of OS updates, driver repairs, and web verification failures.

Users who follow through on the instructions provided in the prompts may then find their device infected with malware. 

Microsoft calls the campaign "CaptiveCrunch." One of the malware strains it delivers is CornFlake.

[...] The attacks primarily target Windows machines, but Microsoft has also seen indications of ClickFix prompts tailored to Android devices, encouraging users to download and install an APK file.

[...] The main takeaway, in Microsoft's book, is to stop trusting public Wi-Fi so much.

It did not discourage using hospitality networks' Wi-Fi services altogether, but said favoring personal hotspots and satellite internet connections over public networks is a safer bet.

The majority of Redmond's advice could be brought under the user education umbrella: Don't trust public networks; teach users not to download updates over public networks or via prompts; educate users about what ClickFix attacks look like. That sort of stuff.

But organizations have a role to play too. Among other technical implementations, passwordless authentication can thwart many phishing techniques, although device code phishing may bypass even passkeys.

The best response would be for an employer to disable the device code authentication flow altogether, wherever possible, preventing staffers from surrendering their workplace cloud access to attackers.

Original Submission

Arthur T Knackerbracket writes:

https://www.theregister.com/security/2026/08/03/ai-slop-pollutes-the-cve-pipeline-with-fake-vulns/5282462

Now AI is making fake vulnerabilities and polluting the ecosystem. A batch of critical- and high-rated SQLite CVEs that appeared in the NVD with CISA-supplied enrichment last week turned out to be technically bogus, according to security researchers, and their path into widely used databases exposes weaknesses in the CVE pipeline.

Software supply chain security outfit JFrog reported last week that six supposed SQLite vulnerabilities published in a larger batch by a new, obscure GitHub repository were all complete garbage. Running the advisories through an AI checker suggested they were likely AI generated, JFrog said, and, upon testing, it found that none of the six SQLite reports, which carried CVSS scores ranging from 9.8 to 7.5, described a reproducible vulnerability.

One, an alleged use-after-free vulnerability in the open source database that Red Hat initially assigned a maximum 10.0 CVSS score to before lowering it, relied on a function that didn't exist in the affected SQLite version. Another UAF vulnerability with a 9.1 CVSS score cited source lines that weren't even related to the supposed flaw. When JFrog tested the accompanying proof-of-concept, it executed a valid query with no memory leaks or errors. The other four SQLite CVEs from the repo that JFrog tested were similarly fake. 

The other 49 CVEs in the questionable GitHub repo claimed to be security vulnerabilities in the open-source RAW image processing library libraw and Arduino audio decoding library ESP32-audioI2S. While JFrog didn't test those as extensively, it said all are just as fake as the rest, aside from one which "contained a real bug wrapped in unverified CVE metadata." 

A message posted to Openwall's OSS-Security mailing list on Friday indicated that MITRE had rejected the whole repo's worth of vaporous vulnerabilities, but the whole thing should serve as an important lesson, poster and Oracle Solaris engineer Alan Coopersmith pointed out.

"MITRE and most other CNAs which assign CVEs for code they don't produce themselves operate on the honor system, and trust CVE requesters to have verified the information they provide," Coopersmith noted in the OSS-Security post. "The CNA is often not in a position of being able to verify the report themselves." 

Arthur T Knackerbracket writes:

Governor who touted Texas as AI "epicenter" pauses data center grid connections:

Nowhere is the US data center boom bigger than in Texas. But less than a year after declaring Texas the "epicenter of AI development," Governor Greg Abbott has declared a moratorium on all new power grid connections for data centers—at least until developers provide more information about their projects' potential impacts on the grid and communities.

The Republican governor directed regulators in an August 3 announcement at the Public Utility Commission of Texas and the grid operators at the Electric Reliability Council of Texas (ERCOT) to perform a "comprehensive verification and audit of all data centers advancing through ERCOT's interconnection process." As an independent system operator, ERCOT oversees a power grid that operates separately from the rest of the United States and provides services to most of Texas.

Texas has aggressively courted data center development with its availability of cheap land and relatively abundant energy resources, along with offering state incentives, like tax breaks and fewer regulations. That puts the state on track to surpass Virginia in becoming the largest US data center market.

But the recent AI boom and the accompanying frenzy of data center development threaten to overwhelm the Texas grid on paper, despite the state leading the country in adding new power generation. The ERCOT interconnection queue currently includes more than 1,800 projects representing over 474 gigawatts' worth of requests to connect to the Texas grid—more than five times Texas' record peak electricity demand—and about 90 percent of those power connection requests come from data centers.

"That unprecedented load growth could endanger the reliability and stability of the Texas electric grid," according to the statement from Abbott's office.

[...] The new directive from Abbott requires audits of data center projects that include how much data centers would depend on the ERCOT grid for power, along with obtaining projections of data centers' annual and peak electricity consumption. The directive further requires information on how much individual data center projects depend on state financial assistance, along with details on each data center project's ownership and controlling interests.

Abbott also directed state regulators and grid operators to discover the extent to which data centers' cooling systems and water usage may draw upon local water supplies needed by local communities. However, the governor's directive does not mention the fact that data centers often use much more water through their power generation sources than directly through their cooling systems—a fact highlighted by researchers like Shaolei Ren at the University of California, Riverside.

BMW has boldly gone where no car maker should ever have went. Advertisements in cars. The ultimate in distraction for the modern driver. It takes the concept of a vehicle that is fully connected to a whole new level. For now the ad is optional; users must click it for it to display.

BMW have called the video an "optional brand experience" and say it's different to a traditional ad.

"The animation does not automatically play when the vehicle starts. Drivers are presented with a banner in the Control Display and can choose whether they would like to activate the experience," A BMW spokesperson said.

Original Submission

OpenAI Reveals Its Rogue Agent Swarm Went A Little Bit Borg Ahead Of Hugging Face Hack

Arthur T Knackerbracket writes:

https://www.theregister.com/security/2026/08/06/openai-reveals-its-rogue-agent-swarm-went-a-little-bit-borg-ahead-of-hugging-face-hack/5283741

The chain of events leading up to OpenAI's agents attacking Hugging Face and other organizations in July began months earlier, and involved agents asking other agents for help, building message boards, and even becoming paranoid that other agents were maliciously trying to trick them, two OpenAI staffers said at the Black Hat infosec conference on Wednesday.

By now, everyone knows the bones of this story: OpenAI models broke out of their testing sandbox, exploited zero-day vulnerabilities to gain access to the open internet, and broke into Hugging Face and other organizations during an ExploitGym security evaluation.

In their Wednesday talk, OpenAI technical staffer Michael Dalton and researcher Eric Wallace provided new details about the security incident including notes that AI agents uploaded to an internal package manager, which were then shared across OpenAI's infrastructure. These notes show the "model's chain of thought...its internal monologue,"  Wallace said.

The duo also revealed that groundwork for the rogue agents hacking into outside services began on May 7, when OpenAI kicked off a training run for an experimental, internal model that has not yet been released.  "What we didn't realize during this process is that there was actually a few impossible or very hard tasks in the training center," Wallace said. 

The tasks instructed the model to complete missing formulas in an Excel workbook that used links to Google Drive. Yet OpenAI blocked the model's internet access so it couldn't reach the cloudy spreadsheets.

"It realized, 'I'm kind of stuck on the task,' but it didn't give up, and we gave it a lot of tokens to work with," Wallace said. 

The model eventually decided to attack JFrog's Artifactory service to gain access to the internet, first attempting (unsuccessfully) to launch a server-side forgery request. This exploit doesn't work, but in the process the model learned it could upload files to Artifactory.

A few days later, OpenAI gave another agent another impossible task, this time finding a protein database file - but the engineers forgot to upload the file into a container for the agent.

"At some point, it gets so stuck and thinks: 'Maybe I could reach out to another agent because maybe somebody else out there has a file?' And then the model realizes that it could communicate by uploading code," Wallace said.

The model did that by writing a file into Artifactory asking for help. 

Over the next couple of days, other agents realize this message board exists on Artifactory and they also start uploading files and sharing information.

"A few days later is when our models found the first actual exploit in our system related to this incident, where they're able to get internet access in ways they didn't intend," Wallace said.