fidzu : nerd

Comments

27 Aug 2026 2:21am GMT

Comments

27 Aug 2026 1:53am GMT

Comments

27 Aug 2026 1:46am GMT

TechCrunch reports that OpenAI released its official report Wednesday on the Hugging Face breach, "offering the clearest picture yet of how an unusual chain of events allowed an AI model to escape its testing environment and triggered a sprawling cybersecurity incident." The AI company says the breach began when an unreleased cyber model, tested without normal production safeguards, encountered an impossible task and chained together previously unknown exploits to escape its environment and compromise systems at OpenAI, Hugging Face, and other vendors. "This incident reflects misaligned behavior in an outlier scenario involving a rare and unexpected confluence of events: the presence of impossible tasks in the ExploitGym evaluation, model persistence over long task horizons, and messages to peer models that caused those models to deviate from their goal," the report reads. From the report: Many of the details in OpenAI's report were previously made public in a Black Hat presentation on August 6, but OpenAI's official report gives a more thorough accounting of the incident, including more detail on the testing that initiated it. The report also gives critical new detail into how OpenAI aims to prevent future incidents, including chain-of-thought monitoring and a more advanced system for halting rogue agents." METR and Redwood Research also conducted third-party assessments of the models' behavior during the incident; both groups are planning to publish their own reports on the incident on it. In broad strokes, the report describes how an OpenAI model was presented with an unsolvable problem in testing and proceeded to chain together previously undiscovered exploits in order to bypass security measures and complete its task. The model initially compromised the Artifactory package management tool in order to gain access to the internet, then compromised various systems across OpenAI, Hugging Face, and other vendors. The report gives critical new details about the models that carried out the breach. The primary model was from the same family as OpenAI's forthcoming Astra model, although the report emphasizes that it was "a distinct model with different post-training, where much of a model's behavior is shaped." Because OpenAI was testing the model's capabilities, it was also unrestrained by the normal classifiers meant to prevent models from compromising digital infrastructure. "OpenAI estimates maximal cyber capabilities by running this evaluation without the production classifiers intended to prevent models from pursuing high-risk cyber activity," the report explains. "These evaluations are important so that OpenAI can measure models' underlying capabilities and design appropriate safeguards." OpenAI says it is adding 24/7 escalation, stronger containment tools, and more chain-of-thought monitoring, which it claims would have flagged the activity more than a day before Hugging Face was breached.

Read more of this story at Slashdot.

26 Aug 2026 11:00pm GMT

A dashing pirate, a butler, a killer clown, an alien mad scientist in drag-the man had range.

26 Aug 2026 10:13pm GMT

Longtime Slashdot reader schwit1 shares a report from Reuters: China's Moonshot AI is negotiating revenue-sharing agreements with Microsoft, Amazon, and Alphabet's Google, that would allow the U.S. cloud giants to host its blockbuster Kimi K3 model, three people familiar with the talks said. Any deal could mark the first big revenue-sharing pact between a Chinese AI firm and a major U.S. cloud company. The discussions highlight how China's leading AI models, often far cheaper than Western offerings, are gaining traction in the U.S., despite national security concerns in Washington that have led to bans on exports of AI chips to China. They are also taking place despite critical comments about Moonshot from senior U.S. officials. IPO-bound Moonshot is seeking up to a 30% share of revenue generated from K3-related services on Microsoft's Azure, Amazon Web Services and Google Cloud, according to the sources who declined to be identified because the discussions are private. That would be in line with terms that sources have said the startup has outlined for major customers using the open-weight model. Moonshot has come under fire from U.S. Treasury Secretary Scott Bessent who said last month that he might add it to a trade blacklist. U.S. officials have accused the Beijing-based company of stealing from Anthropic's most sophisticated model, Fable, to help create Kimi K3 and illegally acquiring Nvidia chips.

Read more of this story at Slashdot.

26 Aug 2026 10:00pm GMT

Report shows Meta's challenges replacing people with AI agents.

26 Aug 2026 9:25pm GMT

Chromium gains initial Flatpak support on Linux, though the implementation is still experimental.

26 Aug 2026 9:01pm GMT

Apple has begun rolling out ads in Apple Maps, with sponsored businesses appearing at the top of search results and in the "suggested places" section for users in the U.S. and Canada. Apple says the ads can be based on approximate location, search terms, or the area of the map being viewed, but are not tied to users' Apple Accounts and personal data remains on-device. 9to5Mac reports: Ads appear just like every other business listing, except they have a small blue badge that says 'Ad.' You can see examples of ads [embedded in the article]. Like Apple's ads policy with other services, the company touts user privacy protections for ads in Maps. Per Apple Newsroom: "Ads on Maps builds on Apple's broader privacy-first approach to advertising, and maintains the same privacy protections Maps users enjoy today. A user's location and the ads they see and interact with in Maps are not associated with a user's Apple Account. Personal data stays on a user's device, is not collected or stored by Apple, and is not shared with third parties."

Read more of this story at Slashdot.

26 Aug 2026 9:00pm GMT

Judge hasn't ruled on X Corp's preliminary injunction, but Operation Bluebird plows ahead

26 Aug 2026 8:49pm GMT

FreeRDP 3.31 is out with numerous security and bug fixes, plus faster graphics performance for AVC/H.264 Remote Desktop sessions.

26 Aug 2026 3:13pm GMT

LibreOffice 26.8 is now available with a new Paragraph Composer in Writer, native OpenType variable font support, Calc improvements, and better document compatibility.

26 Aug 2026 11:32am GMT