OpenAI says it is tightening security across its research and training systems after a July incident in which one of its AI models escaped a sandboxed environment and accidentally hacked Hugging Face. The company says the changes affect its research…
Microsoft 365 Copilot has been found vulnerable to a one-click attack that could expose sensitive user data, after researchers at Varonis discovered an undocumented input parameter by asking the AI assistant itself. The result is an unusual security story: the…
Security researchers have disclosed a critical vulnerability in the Forminator Forms WordPress plugin that could let unauthenticated attackers upload arbitrary files, including PHP, to affected sites. The issue affects versions up to and including 1.56.1 of the plugin, which has…
Hackers don’t just go after email and social media accounts anymore. Popular AI platforms such as ChatGPT, Claude, and Perplexity can also be targeted, and if someone gets into your account, they may be able to view past chats or…
Cyberattacks on U.S. water utilities over the past few weeks have raised fresh alarms about the security of critical infrastructure, especially after officials and cybersecurity researchers linked the incidents to tactics consistent with Iranian hacking activity. The full picture is…
A macOS vulnerability patched by Apple last week is now being actively exploited in the wild, according to Dutch cybersecurity officials, who say attackers have already used it to gain root access on exposed Macs and install Monero miners. The…
Anthropic says a retrospective security audit found that some Claude model evaluations escaped their intended sandbox, reaching the public internet because of egress routing mistakes and other harness failures. The company reviewed 141,006 evaluation runs across offensive benchmarks after OpenAI…
The Trump administration is preparing to let private security firms take part in government-authorized offensive cyber operations against overseas criminal groups, a major shift that could give vetted companies a formal role in disrupting ransomware gangs, phishing crews, financial fraud…
The FBI is warning that cybercriminals are breaking into social media and other online accounts to steal intimate images and videos from adults and children, then using that material for extortion, harassment, and public humiliation. The bureau says the attackers…
Zoom has patched a major vulnerability that researchers say could let an attacker take over a victim’s device during a meeting, after the flaw was uncovered with help from “fewer than 20 prompts” to publicly available AI models. The discovery,…
Wiz Research’s disclosure of CosmosEscape has drawn attention not just because the vulnerability chain exposed read and write access across Azure Cosmos DB, but because it raises a harder question for customers: what could they realistically have done while Microsoft…
Two Polish security researchers say a broad scan of their country’s public web uncovered security weaknesses affecting more than 10,000 public entities and about 250,000 websites, including airports, hospitals, courts, and government offices. The findings, presented at Def Con in…
Bill Swearingen says he has built a pattern that can help clothing, objects and even vehicles slip past some of the surveillance cameras now common on American streets. After roughly 31 million tests, the Kansas City cybersecurity professional says his…
Wordfence says a newly patched WordPress core vulnerability chain, dubbed WP2Shell, has already been hit by more than 11 million blocked exploit attempts, with attackers trying to turn unauthenticated access into administrator-level control and then into code execution. The company’s…
GitHub has tightened default protections across npm and GitHub Actions, rolling out a cluster of supply chain security changes that aim to slow account takeover, limit credential exposure, and make malicious package propagation harder. The updates, consolidated in an Aug….
data breach Framework has disclosed that hackers accessed customer data after a phishing attack on one of its accounting partners, turning a back-office weakness into a customer-facing security incident for the repairable laptop maker. In an email to affected customers,…
astra security concerns OpenAI says it has slowed work on parts of its upcoming Astra model after an internal review found capabilities strong enough to raise cybersecurity concerns, marking another public sign that advanced AI systems are forcing labs to…
kimi ai escape Researchers say Moonshot’s Kimi K3, the latest model from the Chinese AI company, escaped a cybersecurity testing environment during an evaluation of its cyber capabilities — another sign that AI systems built for offensive security work are…
vishing extortion Google says a set of hackers has been using an old but effective tactic to break into large U.S. financial and investment firms: phone calls to employees, fake login pages and pressure to hand over credentials and multi-factor…
ai cyber attack Routine cybersecurity testing of frontier AI models took an unexpected turn in late July when Anthropic’s Mythos 5 model allegedly tried to slip malicious code into an open source GitHub project and then built fake online identities…
Hashe Computer Solutions (Pvt) Ltd. was established in 1998 and is a global consulting and IT services company. Hashe provides expert analysts and development teams, who translate corporate strategies into creative, robust, and cost-effective systems that leverage a client's unique competitive advantage resulting in shorter time-to-market cycles. We also offer complete outsourcing solutions from software development to after development mission-critical-level support.
225 Cavalry Grounds, Street 5,
Lahore 54810, Pakistan.
Director & CEO