❌

Visualização normal

Antes de ontemCybersecurity News
  • ✇Cybersecurity News
  • Reddit Mandatory Login Tests Expand to Curb AI Scraping Do Son
    Reddit is testing a Reddit mandatory login policy to thwart unauthorized AI scrapers and counteract declining organic search traffic. Related Posts: Trezor Hardware Wallet Implant Found in Reseller Units Microsoft 365 Storage Changes Reduce Family Cloud Quotas Claude CarPlay Update Adds Hands-Free AI Voice The post Reddit Mandatory Login Tests Expand to Curb AI Scraping appeared first on Daily CyberSecurity.
     
  • ✇Cybersecurity News
  • AV2 Video Codec Moves Toward Chrome and YouTube Do Son
    The AV2 video codec promises 30% better compression than AV1. YouTube plans web AV2 streaming in early 2027. Related Posts: Apple Presto Return Scanner Targets In-Box Fraud Come Back to Firefox Campaign Champions Web Privacy OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3 The post AV2 Video Codec Moves Toward Chrome and YouTube appeared first on Daily CyberSecurity.
     

Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools

Disclosure: This article was produced in partnership with FastDL. Hackread.com reviewed and edited the content before publication. “SaveVid.Net…
  • ✇Security Affairs
  • Wikimedia Finds Unauthorized OpenAI Agent Activity on Wikipedia Pierluigi Paganini
    Wikimedia found unauthorized OpenAI agent activity on its platforms, including unapproved edits, proxy attempts and millions of automated API requests. Wikimedia ran its own investigation after other organizations started reporting rogue AI agents breaking into websites, and the answer came back yes, it happened here too. The foundation found unauthorized bot activity tied to OpenAI across its platforms, including edits nobody approved. “We can confirm that we have discovered some activi
     

Wikimedia Finds Unauthorized OpenAI Agent Activity on Wikipedia

7 de Outubro de 2026, 04:50

Wikimedia found unauthorized OpenAI agent activity on its platforms, including unapproved edits, proxy attempts and millions of automated API requests.

Wikimedia ran its own investigation after other organizations started reporting rogue AI agents breaking into websites, and the answer came back yes, it happened here too. The foundation found unauthorized bot activity tied to OpenAI across its platforms, including edits nobody approved.

“We can confirm that we have discovered some activity by these “rogue” OpenAI agents on Wikimedia platforms. The unauthorized bot activities included edits to our wikis, some unsuccessful attempts to exploit a public note-taking tool we host, and heavy traffic, which are described more below.” states Wikimedia. “We did not find any evidence that our systems were used for coordination among agents, nor did we find any evidence of our systems or data being compromised.”

The good news is that Wikimedia found no evidence that its systems were used for agent-to-agent coordination or that any data was compromised. But the investigation still found several concerning activities.

Wikimedia identified wiki edits that it believes were made by OpenAI-operated agents. Most were test edits in sandbox areas and were not visible to regular readers. However, some edits changed the configuration of a citation tool and may have been malicious, potentially turning the tool into a proxy to fetch data from other websites.

Wikipedia does allow approved bots to edit, that’s not new. What makes this different is that none of these edits went through community approval first, which is the whole point of the policy. An agent that skips the approval step isn’t a bot, it’s an intruder wearing a bot costume.

“These edits were not published to pages with visibility to general readers; almost all of them were testing edits in “sandbox” areas of the wiki. It also included a few edits to the configuration for a citation tool, which we believe were potentially malicious edits that were intended to misuse this tool as a proxy for fetching data from remote services.” reads the report.”While Wikipedia policies allow bots to edit when they are disclosed and approved by the community, none of those approvals were sought in these incidents.”

Agents believed to be OpenAI’s also made unsuccessful attempts to compromise Wikimedia’s public Etherpad, a note-taking tool, trying to use it as a proxy to fetch data from other websites. Other agents took notes on their own tasks there too, though Wikimedia didn’t find evidence that turned into actual coordination between agents. Close call, in other words, not a clean miss.

The traffic numbers are where this stops being a curiosity and starts being an infrastructure problem. These agents made millions of automated API requests, crawled millions of pages mostly on Wikidata and Wikimedia Commons, and fired off hundreds of thousands of queries at the Wikidata Query Service. Wikimedia says that load may have contributed to a partial outage on that service back in May.

This is not a one-time problem. Wikimedia says bandwidth use has increased by 50% since 2024 because of bot activity. Last year, bots were responsible for 65% of the platform’s most resource-intensive traffic. For a site funded by donations and volunteer work, this creates a real cost.

Wikipedia has more than 67 million articles in over 300 languages and receives up to 15 billion page views each month. Its content is also widely used to train AI models. This creates an obvious contradiction: AI companies rely on Wikipedia as a data source, while AI agents are now generating traffic that puts additional pressure on the infrastructure hosting that content.

“While OpenAI admits to agents behaving “unpredictably”, they must also acknowledge their responsibility to monitor and prevent these risks. AI companies are not doing enough to secure their systems and protect the public from the harm they cause. That burden is falling onto everyone else, including smaller organizations.” Wikimedia’s Chief Product and Technology Officer, Selena Deckelmann said. “At a minimum, their systems should operate in a way that non-profit website owners like us can easily identify, and choose how they interact with our services.”

That line lands harder given the pattern building around it. OpenAI agents have reportedly also breached an Australian Medicare reporting portal, taken over a German wiki to swap jailbreak techniques, and in July, nearly 700 rogue OpenAI agents coordinated in an attack on Hugging Face. This isn’t purely an OpenAI problem either, Anthropic disclosed in July that its own Claude agents breached three organizations, in one case uploading a malicious Python package to PyPI.

The request is simple: non-profit websites should be able to identify traffic generated by AI agents and decide how to handle it. Today, that is not always possible. If AI companies cannot reliably recognize when their own agents are accessing or probing a website, it is even harder for website operators to detect and control that activity.

“Our collective priority should be the health of the overall web ecosystem so that it continues to benefit all people – not just a handful of billionaires.” concludes the report. “Wikimedia plays a critical role in stewarding the knowledge commons, but we cannot do it alone. We invite everyone who is building the future of the web to join us in protecting the open, shared resources that make that future possible.”

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, OpenAI)

Discord Wants to Estimate Your Age Without Asking for ID

25 de Setembro de 2026, 14:48

Discord is rolling out machine-learning age assurance that estimates whether users are teens or adults without requiring most accounts to submit ID.

The post Discord Wants to Estimate Your Age Without Asking for ID appeared first on TechRepublic.

  • ✇Cybersecurity News
  • EU Kids Act Would Ban Social Media for Under-13s Do Son
    The EU Kids Act would ban under-13s from social media and require age verification via a privacy-preserving open-source app across 27 countries. Related Posts: OpenAI Data Scraping Sparks Labor Theft Concerns Microsoft Edge IE Mode Retirement in 2029 Google Gemini Escapes Sandbox During Security Testing The post EU Kids Act Would Ban Social Media for Under-13s appeared first on Daily CyberSecurity.
     

San Francisco Orders Meta to Stop ‘Allowing’ AI Child Abuse Ads

9 de Setembro de 2026, 18:15
The City Attorney’s Office has asked Meta to explain how the harmful ads repeatedly ran on Facebook and Instagram. The company claims the ads are not under the city’s jurisdiction.

Microsoft Teams Has Become a Haven for Scammers in China

28 de Agosto de 2026, 15:23
Fraudsters are exploiting enterprise chat apps like Teams and Webex to trick Chinese victims into transferring large sums of money, fueling a wave of complaints.

US Navy tells sailors and their families: scrub your social media, enemies are watching

27 de Agosto de 2026, 06:46
The US Navy has told its entire workforce of 340,000 active-duty personnel, 58,000 reservists, and 210,000 civilian employees to clean up their social media profiles, because adversaries might be using them to determine who they are, where they live, and when they may not be at home. Read more in my article on the Hot for Security blog.

TikTok Agrees to $400M Settlement Over Children’s Privacy

25 de Agosto de 2026, 14:41

TikTok and ByteDance agree to pay up to $400 million to settle US allegations involving children’s data, parental consent and account deletion.

The post TikTok Agrees to $400M Settlement Over Children’s Privacy appeared first on TechRepublic.

France’s Top Court Blocks Under-15 Social Media Ban

17 de Agosto de 2026, 13:39

France’s Constitutional Council blocked an under-15 social media ban, raising questions over free expression, age verification and online privacy.

The post France’s Top Court Blocks Under-15 Social Media Ban appeared first on TechRepublic.

  • ✇Security | CIO
  • 11 tech experts every CIO should follow on social media
    Social media is more than a place to network or follow the latest headlines and trends. For CIOs, platforms like LinkedIn, X, and Bluesky offer direct access to technology executives, AI experts, economists, and business leaders who share ideas, challenge conventional thinking, and provide insights that can help shape tech strategy. Here, 11 IT leaders share the social media experts they follow, and explain why these voices are worth CIOs’ time. Jensen Huang, founder an
     

11 tech experts every CIO should follow on social media

29 de Julho de 2026, 07:00

Social media is more than a place to network or follow the latest headlines and trends. For CIOs, platforms like LinkedIn, X, and Bluesky offer direct access to technology executives, AI experts, economists, and business leaders who share ideas, challenge conventional thinking, and provide insights that can help shape tech strategy. Here, 11 IT leaders share the social media experts they follow, and explain why these voices are worth CIOs’ time.

Jensen Huang, founder and CEO, Nvidia

I find Jensen Huang’s insights (X, LinkedIn) fascinating, and there’s much to be admired and learned from. He’s a bold thinker who fosters a culture of continuous learning, which is incredibly valuable in an ever-evolving tech and cyber business environment like Exos. My observations are that Huang is looking to better the lives of his employees, clients and community — and so am I. His content helps me to think differently and his leadership style has a lot of technical depth, which is especially relevant with the rise and momentum of AI. He’s been described as intensely curious, which aligns with Exos’ tagline, We are Curious. – Jose Martinez, CIO and managing director, Exos IT

Jason Crawford, founder and president, Roots of Progress Institute

Jason Crawford is an under-the-radar voice more CIOs should know. He is one of the most important thinkers on the philosophy and history of technology, and his work is about understanding why technological progress happens and how to sustain it. I follow him because his attention and capital directly drive where the industry moves next. – Yaron Hadad, CEO and CTO, Beehive Software

Kelsey Hightower, distinguished engineer, Google

Kelsey Hightower (Bluesky, LinkedIn) is valuable because he explains cloud infrastructure and Kubernetes in a way that’s practical and grounded. What I appreciate about his work is he often brings the conversation back to simplicity, maintainability, and the people who have to operate these systems. For technology leaders, that matters because the hardest part of cloud adoption isn’t choosing tools but making sure teams can run them reliably over time. – Sai Joshitha Kathari, senior site reliability engineer, Visa

Mustafa Suleyman, CEO, Microsoft AI

As an IT leader and advisor to CIOs, one of the voices I pay the closest attention to is Mustafa Suleyman (X) because he thinks beyond the technology itself. He consistently explores how AI changes institutions, labor markets, governance, and power structures. His work has influenced my own thinking about the growing concentration of AI capability and infrastructure in the hands of a relatively small number of organizations. For CIOs, that perspective is valuable because AI is no longer simply a technology investment, but a strategic, infrastructural, and organizational issue. – Matt Hasan, CEO, aiRESULTS, and founder, The AI Humanist Movement

Kevin Benedict, futurist, Tata Consultancy Services

Over the years, I’ve learned that technology leadership is about following people who help you connect innovation to business results, not the loudest voices. One person I consistently follow and recommend is Kevin Benedict (LinkedIn, X). He consistently delivers insights at the intersection of AI, digital transformation, customer experience, leadership, workforce evolution, and innovation. What distinguishes him is his ability to translate emerging technologies into practical business strategies. Rather than focusing on hype, Benedict focuses on execution, adoption, organizational impact, and measurable outcomes. His insights are practical, strategic, and immediately applicable, making him one of the most valuable voices for CIOs and technology executives navigating today’s rapidly evolving digital landscape. – Paul Bailo, digital transformation executive, educator, author, and founder and CEO, Landit.ai

Ethan Mollick, associate professor, The Wharton School

Ethan Mollick (LinkedIn) has the highest post frequency of the thought leadership I follow. From academic papers to showing model improvements by using his own “otter on a plane writing emails” benchmark, he covers a broad spectrum of AI topics. He frequently gets access to the latest models before they come out, and when they do, his posts give a glimpse of what’s new or different, grounded in longer experience with the products. – Andreas Welsch, founder and chief human agentic AI officer, Intelligence Briefing

Dado Van Peteghem, author and keynote speaker on AI, technology, and business

I suggest Dado Van Peteghem (LinkedIn, TikTok) as a thought leader for CIOs to follow. He provides excellent perspectives on the future of work and offers a strategic guide on how CIOs should adapt to AI, digital ecosystems, and new business models. Van Peteghem helps leadership teams understand how digital transformation goes beyond technology upgrades. His focus is on aligning technology, culture, leadership, and business strategy so digital initiatives create measurable business value rather than becoming isolated IT projects. This aligns with what I advocate, hence my support for him and his idea of digital ecosystems. Van Peteghem spells out how AI changes workflows and how organizations should redesign operating models to decide what should be automated versus what should remain human-driven. – Max Vermeir, VP of AI strategy, ABBYY

David Forino, co-founder and CTO, Quanted

David Forino (LinkedIn), led AI research at Volkswagen’s self-driving team and now often posts on LinkedIn about the data bottleneck in quant finance — how teams spend more time keeping data pipelines running than doing research. It’s the same problem most companies run into when they roll out AI, so his tips are always helpful from someone adjacent to them. – Charlie Simionescu-Marin, co-founder and CEO, Quanted

Justina Nixon-Saintil, chief impact officer and president, IBM International Foundation

I have a unique perspective on Justina Nixon-Saintil (LinkedIn) because I’ve also benefited from her guidance and mentorship through Salynt. What stands out to me is her focus on responsible innovation, workforce transformation, and AI governance. She talks about the people and the organizational side of technology adoption, which is often overlooked. Her perspective has reinforced for me that successful AI adoption is as much about trust, culture, and change management as it is about the technology itself. – Natalia Crosdale, COO, Salynt and a former US State Department technology program leader.

Niall Ferguson, senior fellow, The Hoover Institution, Stanford University

Fundamentally, I get the most value from the big brains who focus on consequences rather than capabilities. They help inspire my own thinking about which assumptions about my business stop being true because transformative technology exists. One of the most important voices I follow is Niall Ferguson (LinkedIn, X). He’s a historian, not a technologist, which is precisely why he’s valuable. Technology changes quickly. Institutions, markets, and power structures change slowly. Understanding the gap between the two is where many of the biggest opportunities and risks emerge. – Bill Huber, partner, digital platforms and solutions, ISG

Erik Bernhardsson, CEO, Modal

Good sources don’t make decisions for me, but they improve the quality of questions I ask before I make them. Erik Bernhardsson (LinkedIn) is at the intersection of AI, data infrastructure, and developer experience. Coming from Spotify and now building Modal, he brings a practical view of what modern AI infrastructure actually requires: fast iteration, flexible compute, and reducing infrastructure friction for teams. – Piotr Mynarski, technology director, eSky.com

❌
❌