Pull down to go back
Vercel Data Breach Traced to Hacked Employee AI Tool
industryrss

Vercel Data Breach Traced to Hacked Employee AI Tool

Vercel 雲端平臺資料外洩，禍首竟是員工用的第三方 AI 工具被駭

Cloud development platform Vercel suffered a security incident after hackers compromised a third-party AI tool used by an employee, gaining unauthorized access to internal systems. On April 19th, Vercel disclosed that some user environment variables—non-sensitive data stored without encryption—were exposed. The breach is particularly concerning because Vercel serves as the infrastructure backbone for countless developers worldwide. The company has notified affected users and urged them to immediately rotate their credentials. While the exposed data wasn't classified as sensitive, the incident highlights a growing vulnerability: even trusted cloud platforms can be infiltrated through employee tools that weren't properly secured.

Read original →

Related Articles

OpenAI's ad partner is now selling ChatGPT ad placements based on what you actually ask
IndustryRead

OpenAI's ad partner is now selling ChatGPT ad placements based on what you actually ask

OpenAI just partnered with an ad company that's figured out how to show you ads inside ChatGPT based on what you're typing. So if you're asking ChatGPT how to fix your kitchen sink, you might see ads for plumbing services. Sounds convenient on the surface, but here's the thing—it means someone's literally reading your prompts to decide what ads to throw at you. This is basically the same playbook Google and Facebook use, except now it's happening in the AI chatbot you thought was just helping you with homework. The ad company claims they're not storing your actual prompts, just analyzing them to figure out what category you're in. Whether you buy that or not is up to you, but it's definitely a sign that ChatGPT is becoming less of a helpful tool and more of an ad delivery system. If you're paying for ChatGPT Plus, you might want to check if this affects you too.

Hacker News
9
Meta is now tracking everything employees do on their computers to train AI agents
IndustryRead

Meta is now tracking everything employees do on their computers to train AI agents

Meta has started installing a surveillance tool called Model Capability Initiative (MCI) on US employees' computers that records mouse movements, clicks, keystrokes, and screenshots across work apps and websites. The company says this data won't be used for performance reviews, but rather to train its AI models to interact with computers like humans do—essentially learning how to automate the work tasks Meta employees perform daily. It's a bold move that raises obvious privacy concerns, even if Meta insists the data collection is purely for AI training purposes.

RSS
OpenAI Launches ChatGPT Images 2.0: Now It Can Think, Generate Text in Multiple Languages, and Handle Layouts
IndustryRead

OpenAI Launches ChatGPT Images 2.0: Now It Can Think, Generate Text in Multiple Languages, and Handle Layouts

OpenAI just rolled out its first image generation model with built-in reasoning capabilities, and it's available to all ChatGPT users right now. ChatGPT Images 2.0 doesn't just create stunning visuals—it can now integrate multi-language text and handle complex layout designs, making it perfect for creating comics, posters, and signage. The best part? It's available across all ChatGPT plans, including the free version.

RSS
Mozilla: Anthropic's Mythos found 271 zero-day vulnerabilities in Firefox 150
IndustryRead

Mozilla: Anthropic's Mythos found 271 zero-day vulnerabilities in Firefox 150

Mozilla's CTO says Anthropic's new AI model Mythos discovered 271 previously unknown security flaws in Firefox 150—matching the capability of the world's top security researchers. The breakthrough demonstrates how advanced AI is becoming at finding critical vulnerabilities before hackers do, raising questions about both cybersecurity and what this means for the future of bug-hunting.

RSS