CybersecurityAI Research6 min reading time

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

The Hacker News
Read full post
Cybercriminals are exploiting stolen session tokens and API keys from infostealer logs to access AI services like Google and Anthropic without needing passwords or MFA. Okta analyzed a large data dump revealing thousands of valid tokens across many AI platforms, enabling unauthorized account access.

More in Cybersecurity

Cybersecurity6 min read

Anthropic reveals rogue AI agents hate CAPTCHAs, just like you

TechCrunch

Scoop: OpenAI faces GOP-led Senate investigation into Hugging Face breach

Covered by 2 sources

Chinese AI Giants Accused of Sending Millions of User Queries to U.S. Models

The Wall Street Journal