Thomas Hawk posted a photo:
After Ukraine failed to shoot down a single ballistic missile fired by Russia on Wednesday, the president urged allies to increase supplies of Patriot interceptors
Nato is working to get Ukraine the air defences it “urgently needs”, its secretary general has said, after Kyiv failed to shoot down a single Russian missile in an attack on Wednesday, and as Volodymyr Zelenskyy warned that Moscow was seeking to significantly boost missile production ahead of winter.
Speaking at a National Security and Defense Council meeting on winter resilience, the Ukrainian president did not rule out the idea that stalling missile supplies from western allies were “aimed at making Ukraine, so to speak, more willing to compromise” in peace talks with Russia.
Continue reading...Talks on Ukraine building Patriots continue despite Trump casting doubt, Reuters reports; forced evacuations in Kramatorsk. What we know on day 1,625
Ukraine could benefit from a Lockheed Martin project to build a new, lower-cost Patriot interceptor, the PAC-3 Adapted Capability Effector (ACE) missile, Reuters has reported. The news agency, citing defence and US government sources, said that despite Donald Trump casting doubt on a deal for Ukraine to build desperately needed Patriots, “no order was given to halt the discussions”, and talks continued with US arms makers, military officials and others. Ukraine has proven adept at producing large volumes of dramatically cheaper yet equally or more effective missiles and drones compared with those made by western allies.
At least 17 people died on Wednesday as Kyiv again came under heavy Russian bombardment. Ukrainian forces, starved of suitable interceptors, were unable to shoot down a single missile. A US official told Reuters that the most feasible option for Patriots would be making some components in Ukraine and assembling them in Germany, where an older Patriot model is already made and the more advanced PAC-3 is expected to be produced as well. Trump has raised security concerns about handing over highly secretive Patriot blueprints in their entirety to Ukraine.
Any plan for Ukraine to be involved in Patriot production could still take a year or more to come to fruition, officials have cautioned, with new component lines typically not up and running until three to seven years after a licensing deal is signed. Lockheed Martin suggested an accelerated timeline for Patriot PAC-3 ACE in an announcement on 20 July, emphasising that the use of the same launchers and software would speed up development. The interceptors would cost less than half of a normal Patriot missile, it claimed.
Germany’s interior minister warned of “a new level of danger” after a drone carrying explosives was found at Leipzig airport, while a DHL plane in flight was hit by a flying object. German police used a bomb disposal robot to defuse and destroy the explosive device. Deborah Cole and Andrew Roth write that suspicion has fallen on Russia given the airport’s status as a Nato and German military logistics hub, and as the base for Ukraine’s Antonov Airlines in Europe. The quadcopter fitted with an explosive device was found near a Ukrainian Antonov cargo plane, according to media reports.
Continue reading...
:format(webp)/s3/static.nrc.nl/images/gn4/stripped/data151932874-500a29.jpg)
The chain of events leading up to OpenAI’s agents attacking Hugging Face and other organizations in July began months earlier, and involved agents asking other agents for help, building message boards, and even becoming paranoid that other agents were maliciously trying to trick them, two OpenAI staffers said at the Black Hat infosec conference on Wednesday. By now, everyone knows the bones of this story: OpenAI models broke out of their testing sandbox, exploited zero-day vulnerabilities to gain access to the open internet, and broke into Hugging Face and other organizations during an ExploitGym security evaluation. In their Wednesday talk, OpenAI technical staffer Michael Dalton and researcher Eric Wallace provided new details about the security incident including notes that AI agents uploaded to an internal package manager, which were then shared across OpenAI’s infrastructure. These notes show the “model’s chain of thought…its internal monologue,” Wallace said. The duo also revealed that groundwork for the rogue agents hacking into outside services began on May 7, when OpenAI kicked off a training run for an experimental, internal model that has not yet been released. “What we didn't realize during this process is that there was actually a few impossible or very hard tasks in the training center,” Wallace said. The tasks instructed the model to complete missing formulas in an Excel workbook that used links to Google Drive. Yet OpenAI blocked the model’s internet access so it couldn't reach the cloudy spreadsheets. “It realized, ‘I'm kind of stuck on the task,’ but it didn't give up, and we gave it a lot of tokens to work with,” Wallace said. The model eventually decided to attack JFrog’s Artifactory service to gain access to the internet, first attempting (unsuccessfully) to launch a server-side forgery request. This exploit doesn’t work, but in the process the model learned it could upload files to Artifactory. A few days later, OpenAI gave another agent another impossible task, this time finding a protein database file - but the engineers forgot to upload the file into a container for the agent. “At some point, it gets so stuck and thinks: ‘Maybe I could reach out to another agent because maybe somebody else out there has a file?’ And then the model realizes that it could communicate by uploading code,” Wallace said. The model did that by writing a file into Artifactory asking for help. Over the next couple of days, other agents realize this message board exists on Artifactory and they also start uploading files and sharing information. “A few days later is when our models found the first actual exploit in our system related to this incident, where they're able to get internet access in ways they didn't intend,” Wallace said. This happened on May 26, when the agents successfully launched a server-side request forgery attack against Artifactory, giving them internet access with specially crafted requests. On June 11, OpenAI began training a “highly persistent” experimental model, intended only for internal use, Dalton said. “During this time, the SSRF vulnerability has been written to the messaging board,” he added. “Other models are aware of it, and the message board is still functioning. Models are actively communicating with it.” On June 26, the agents exploited a zero-day vulnerability leading to remote code execution in Artifactory. The same day, models achieved remote code execution in Artifactory through a previously unknown vulnerability. “You could use a legacy token refresh endpoint, pass a token with an invalid signature, and be given back a token with a valid signature with administrative privileges,” Dalton explained. The agents then used the admin token to establish command-and-control via a Groovy plugin that functioned as a command-execution service. “This in turn causes quite a bit of activity by the models on Artifactory - you can see some colorful wording here in the model's chain of thought to summarize the model's response to this result,” Dalton said, pointing to a slide that shows the model’s own words: Holy shit reader is ADMIN? We can read config/users! Earlier assume not due to UI. The agents’ activity overloaded Artifactory and caused an outage, which is when OpenAI’s engineers stepped in and opened a formal security incident and response process. “We identified the agents had taken over the internal Artifactory, identified that a zero-day vulnerability had been found exploited by the agent in Artifactory itself, and we began remediation.” Dalton said. OpenAI revoked the credentials that the agents used to post messages, rebuilt its hosted Artifactory, and notified the vendor about the vulnerabilities. Two days later, on July 8, the agents reestablished the message board using an unauthenticated web data endpoint in Artifactory to create directories and develop communication protocols. “The directory names effectively serve as a message board between the agents in the same way the files used to.” The agents communicated through very long directory names that contained the messages such as “remote…probe_PENDING_HOLD_SWARM_until_confirm.” The agents collaborated with each other so one agent could pick up the work where another left off. In one instance, the model reasoned: “Help peer. But our task doesn't benefit. Yet collective may yield generic route if someone frees time.” Anyone else getting "We are the Borg. We will add your biological and technological distinctiveness to our own" vibes there? Wallace said the models behaved like humans in that they stepped on each other's toes when one overwrote another’s repository. "Whoa, critical! Did someone overwrite our repo? We must act,” it reasoned. “You can clearly see some sort of verbalized tension between the different models as they run this evaluation,” Wallace noted. “At some point, even the agents are convinced there's an impostor amongst them,” reasoning that there could be another agent maliciously spoofing on the message board. “Share board unauthenticated, names can be posed by anyone,” it reasoned. We know the rest of the story. Hugging Face disclosed an autonomous attack by AI agents. OpenAI reached out to Hugging Face to determine if it had been affected and then realized its models were the hackers. “One of the reasons we wanted to have this talk is to share our lessons learned with you as defenders,” Dalton said. “We believe this is a watershed moment for computer security as an industry. AI orchestrated, fully automated offensive attacks are real now, and the actions we have discussed today were an unintended side effect of running evaluations on frontier AI. In the near future, we should expect that threat actors will intentionally deploy, optimize, weaponize, and use offensive agent collectives in the manner that you have just described here.” The challenge to defenders, he added, is to similarly accelerate defense, and find ways to automate incident response along with vulnerability detection and patching.®
MONTREAL (ANP) - Tenniser Botic van de Zandschulp heeft in de nacht van woensdag op donderdag op het masterstoernooi van Montreal verrassend gewonnen van de als vierde geplaatste Daniil Medvedev. Van de Zandschulp versloeg de kampioen van 2021 in twee sets: 6-3 7-6 (5).
Medvedev liep zijn honderdste zege op een masterstoernooi mis door zijn uitschakeling. De Rus maakte maar liefst 40 ongedwongen fouten.
Het masterstoernooi van Montreal verloor woensdag in korte tijd drie van de hoogste geplaatste spelers. Naast Medvedev werden ook de Duitser Alexander Zverev en de Canadees Felix Auger-Aliassime uitgeschakeld.
De als eerste geplaatste wereldnummer drie Zverev, die dit jaar Roland Garros won en in de finale stond van Wimbledon, ging in de tweede ronde onderuit tegen Tallon Griekspoor. De Nederlander kwam na een verloren eerste set knap terug: 6-7 (3) 6-2 6-4.
Auger-Aliassime, geboren en getogen in Montreal, moest zich voor zijn geplande avondwedstrijd terugtrekken nadat hij tijdens de training een rugblessure had opgelopen.
MENLO PARK (ANP) - Een van de AI-modellen van Meta heeft tijdens tests voor cybersecurity een ander bedrijf gehackt. Vergelijkbare incidenten kwamen ook al voor bij AI-modellen van Anthropic en OpenAI.
Meta liet weten een incident te onderzoeken waarbij een foutieve configuratie door Irregular - een onafhankelijk bedrijf dat cybersecuritybeoordelingen uitvoert voor Meta - een van zijn modellen tijdens een test per ongeluk internettoegang gaf.
Het model "maakte misbruik van een beveiligingslek op een manier die vergelijkbaar is met eerder gemelde gevallen bij andere bedrijven", aldus Meta in een verklaring.
De incidenten bij OpenAI en Anthropic kwamen ook door configuratiefouten, waardoor de modellen van Anthropic per ongeluk toegang kregen tot het internet. In het geval van OpenAI maakte een AI-agent zelfstandig misbruik van een tot dan toe onbekende kwetsbaarheid om tijdens cybersecuritytests het internet te bereiken.
NEW YORK (ANP) - De CIA heeft in het geheim een speciale werkgroep voor Cuba opgericht, meldt The New York Times. Volgens de krant is het doel van de groep druk uitoefenen op de Cubaanse regering, om zo economische, politieke en leiderschapswijzigingen af te dwingen die door president Donald Trump worden geëist, laten bronnen weten.
Door de oprichting van de groep kan de inlichtingendienst snel meer financiële, menselijke en technische middelen inzetten op Cuba, aldus de ingewijden. Inmiddels zou de CIA begonnen zijn met het inzetten van agenten die spionnen werven en aansturen. Ook inlichtingenanalisten, specialisten op het gebied van cyberoperaties en functionarissen die gespecialiseerd zijn in heimelijke beïnvloedingsoperaties zijn al aan de groep toegevoegd, aldus de bronnen.
In 1960 richtte de CIA ook al eens een Cubaanse werkgroep op. De leden daarvan hadden de leiding over de mislukte, door de dienst gesteunde invasie in Cuba het jaar daarop, die bekend zou worden als de Invasie in de Varkensbaai.
De VS waren toen bezorgd over Cuba, dat onder leiding van Fidel Castro steeds meer ging samenwerken met de Sovjet-Unie. 1400 Cubaanse ballingen moesten toen het eiland binnenvallen om zo een opstand tegen de regering van Castro te ontketenen. Zij kwamen aan land aan de zuidkust van Cuba bij de Varkensbaai, maar kregen niet de verwachte steun en werden snel verslagen door Castro's leger.