Datasette 1.0a39 and 0.65.4 security releases49m ago Anthropic caught scientists using Claude to further biological weapon research2h ago Oracle says AI will save it from the SaaSpocalypse, not bring it on2h ago Congress Is Suddenly Waking Up to the AI Doomsday Threat2h ago Don’t ask ChatGPT 'What should I do?' — this simple prompt helps you make better decisions yourself2h ago Extreme Networks’ Agent ONE Coworker moves AI networking from dashboards to answers2h ago Introducing ChatGPT for Financial Services2h ago Tesla unveils driverless Cybercab in Japan for 1st time3h ago The AI safety vibe shift3h ago Sam Altman met with top power utilities about securing the electrical grid. He offered one possible solution: OpenAI's cyber services.3h ago OpenAI Is Open to Slowing Cutting-Edge AI, CEO Sam Altman Tells Staff4h ago Tencent-Backed Chipmaker Enflame Jumps 188% in Shanghai Debut4h ago Salesforce introduces Enterprise AI Harness, AI Control Plane4h ago The Race for the Next Big Weight-Loss Drug Is On—and China Wants In4h ago

Datasette 1.0a39 and 0.65.4 security releases49m ago Anthropic caught scientists using Claude to further biological weapon research2h ago Oracle says AI will save it from the SaaSpocalypse, not bring it on2h ago Congress Is Suddenly Waking Up to the AI Doomsday Threat2h ago Don’t ask ChatGPT 'What should I do?' — this simple prompt helps you make better decisions yourself2h ago Extreme Networks’ Agent ONE Coworker moves AI networking from dashboards to answers2h ago Introducing ChatGPT for Financial Services2h ago Tesla unveils driverless Cybercab in Japan for 1st time3h ago The AI safety vibe shift3h ago Sam Altman met with top power utilities about securing the electrical grid. He offered one possible solution: OpenAI's cyber services.3h ago OpenAI Is Open to Slowing Cutting-Edge AI, CEO Sam Altman Tells Staff4h ago Tencent-Backed Chipmaker Enflame Jumps 188% in Shanghai Debut4h ago Salesforce introduces Enterprise AI Harness, AI Control Plane4h ago The Race for the Next Big Weight-Loss Drug Is On—and China Wants In4h ago

Cybersecurity AI Research6 min reading time

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

The Hacker NewsPublished 2 days ago

Cybercriminals are exploiting stolen session tokens and API keys from infostealer logs to access AI services like Google and Anthropic without needing passwords or MFA. Okta analyzed a large data dump revealing thousands of valid tokens across many AI platforms, enabling unauthorized account access.

#account-takeover #anthropic #google #nextauth-js #okta #openai #token-replay-attacks

More in Cybersecurity

Cybersecurity10 min read

Anthropic Details Disrupted Claude Misuse Across Seven Harm Areas

Covered by 4 sources10h ago

Cybersecurity4 min read

Sam Altman met with top power utilities about securing the electrical grid. He offered one possible solution: OpenAI's cyber services.

Covered by 2 sources7h ago

Cybersecurity6 min read

Anthropic reveals rogue AI agents hate CAPTCHAs, just like you

TechCrunch10h ago