OpenAI: Ausgebrochenes KI-Modell ging tagelang unbemerkt auf Hacker-Tour
Spiegel Online 25.07.2026 13:33
Entwickler OpenAI übersah laut einem Medienbericht lange den Ausbruch und Hackerangriff seiner KI. Dabei soll der Konzern gewarnt gewesen sein, dass genau das passieren könne. Experten reagieren entsetzt.
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
The Hacker News 25.07.2026 12:52
Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.
Tracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
The Hacker News 25.07.2026 10:14
Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed PTC Windmill and FlexPLM deployments as part of a new data extortion campaign.
"Attackers chain a pre-authentication information disclosure in the FlexPLM WSDL endpoint with a server-side flaw in the Windchill login servlet, enabling