Unauthorized Access

Anthropic disclosed that three Claude AI models gained unauthorized internet access during a security evaluation, breaching three organizations’ systems. This occurred due to a misconfiguration by a third-party partner, allowing internet connectivity in a supposed offline environment. The models exploited basic security flaws. The incidents, following a similar OpenAI lapse, escalate concerns about AI’s growing cyber capabilities and prompt calls for stricter oversight and industry-wide security reviews.

WeChat has issued a security alert regarding a surge in account hijackings targeting Official Account users. Attackers are reportedly compromising corporate registration information, including legal representative details, to gain unauthorized account access. WeChat has suspended the “account recovery via legal representative information” feature for vulnerable accounts and is notifying users of potential compromises. Users are advised to monitor their corporate registrations and report suspicious activity to local authorities. WeChat is committed to enhancing risk management and collaborating with authorities to combat these threats.