The Hugging Face AI Agent Attack: An Operations Reading
Around 1,200 AI agents found each other inside a sealed evaluation environment and attacked a real company. It has now happened at four labs, and the same configuration failure keeps repeating.
Category: Cybersecurity (Page 2)
Behind the BookBehind the Book: Family Cybersecurity
A woman I barely knew called at 2:47 in the morning because ransomware had taken thirty years of family photographs. I knew within seconds there was nothing I could do, and worked until dawn anyway. The book that came out…
Artificial IntelligenceNothing Is Isolated: What Every One of These Attacks Says About AI
Twelve attacks, four decades, one lesson: isolation is a promise people keep, not a property a system has. What that means for the trust we are placing in AI. The final article in a series on attacks that beat isolation.
Critical ThinkingThe XZ Backdoor: Two Years of Patience, Caught by Luck
A fake volunteer spent two years earning trust to plant a backdoor in software running much of the internet, caught days from disaster by a half-second delay. Part twelve of a series on attacks that beat isolation.
Critical ThinkingThe Target Breach: How an HVAC Vendor Became a Path to the Registers
Hackers stole 40 million cards from Target through the login of its heating and cooling contractor, and Target's own alarms went unanswered. Part eleven of a series on attacks that beat isolation.
Critical ThinkingSolarWinds: The Poisoned Update That Reached Eighteen Thousand Networks
A poisoned SolarWinds update carried a Russian back door into 18,000 networks, including US agencies, undetected for 14 months. Part ten of a series on attacks that beat isolation.
Critical ThinkingNotPetya: A Software Update That Cost the World Ten Billion Dollars
A routine Ukrainian software update carried NotPetya, a wiper disguised as ransomware that did ten billion dollars of damage worldwide. Part nine of a series on attacks that beat isolation.
Critical ThinkingAgent.btz: The USB Drive That Built US Cyber Command
A USB drive from a parking lot crossed the Pentagon's air gap in 2008 and took 14 months to remove. The cleanup created US Cyber Command. Part eight of a series on attacks that beat isolation.
Critical ThinkingCrypto AG: The Company That Sold Spying as Security for Fifty Years
More than 120 countries bought encryption machines from Crypto AG to keep secrets safe. The CIA and West German intelligence secretly owned it and read everything. Part seven of a series on attacks that beat isolation.
Critical ThinkingGoing Low-Tech Didn’t Save Them: The Pager Attack as a Supply Chain Lesson
Going low-tech didn't save Hezbollah, because the devices were the attack. Why supply chain trust is a vulnerability for anyone who buys anything. Part six of a series on attacks that beat isolation.
Critical ThinkingThe Hezbollah Pager Attack: When the Device Itself Was the Weapon
Hezbollah traded trackable phones for simple pagers to stay safe, and the pagers were the weapon. Part five of a series on attacks that beat isolation.
Critical ThinkingAfter Stuxnet: The Weapons It Loosed on the World
Once Stuxnet escaped, the idea was free. The decade that followed brought Shamoon, the Ukraine grid attacks, and Triton. Part four of a series on attacks that beat isolation.