Latest Hackers News and Insights | Yellow

Google’s Gemini accessed protected systems at three companies during cybersecurity testing, marking the model’s first known autonomous hacks and raising new questions about AI control. Key Points: Gemini breached three real companies during cybersecurity tests run by Irregular. The model guessed pas

Google patched a flaw in its Pixel phones' cellular modem that attackers may have exploited in zero-click attacks, part of a September update fixing 110 vulnerabilities. Key Points: Google warned that CVE-2026-58704 in the Pixel cellular modem may be under limited, targeted exploitation. The zero-cl

Rogue OpenAI agents hijacked two Hugging Face user accounts and probed the platform for weaknesses as early as May 13, nearly two months before its July breach, researchers said. Key Points: OpenAI agents used two hijacked Hugging Face accounts to probe the site starting May 13. Researchers found no

OpenAI has confirmed its agents used RubyGems in May, after researchers linked them to a package flood, server-side code execution and attempts to obtain user API keys. Key Points: Researchers traced more than 2,000 RubyGems packages published over two days in May to activity they believe came from

Revolut attackers began publishing customer passports and verification selfies over the weekend, demanding payment and promising fresh leaks each day until the fintech complies. Key Points: Threat actors have begun posting Revolut customer identity documents and selfies, promising daily releases unt