A recent security breach on a social network for AI agents has left thousands of users' email addresses and millions of API credentials exposed, raising serious concerns about the vulnerability of these platforms to hacking. Moltbook, a Reddit-like platform designed for AI agents to interact with one another, was found to have a critical security flaw in its JavaScript code that allowed anyone to access user accounts and private communications.
The founder of Moltbook, Matt Schlicht, had touted the site as "vibe-coded" by his own vision, rather than having written any code himself. This lack of human oversight is believed to be responsible for the security flaw. The vulnerability was discovered by researchers at Wiz, a security firm, who found that it could allow complete account impersonation and access to private communications.
The discovery serves as a cautionary tale about the security risks of AI-made platforms, highlighting the need for more stringent controls on AI-generated code. Rather than inherent flaws in companies' implementation of AI, the problem often lies with allowing AI to write their own code - resulting in numerous bugs.
On a separate note, Apple's Lockdown mode has proven itself as an effective safeguard against government hacking attempts, including a recent FBI raid on a Washington Post reporter's home and search of her devices. The Lockdown mode feature prevents connection to peripherals or forensic analysis devices unless the phone is unlocked.
In other news, Elon Musk's Starlink has been used by Ukraine to disable Russian military use of its satellite internet access, causing a communications blackout among frontline forces. This move comes after a request from Ukraine's defense minister for help, and is seen as a significant victory in the war in Ukraine.
Finally, US Cyber Command conducted a coordinated digital operation last year to disrupt Iran's air missile defense systems during a kinetic attack on Iran's nuclear program. The disruption "helped to prevent Iran from launching surface-to-air missiles at American warplanes."
The founder of Moltbook, Matt Schlicht, had touted the site as "vibe-coded" by his own vision, rather than having written any code himself. This lack of human oversight is believed to be responsible for the security flaw. The vulnerability was discovered by researchers at Wiz, a security firm, who found that it could allow complete account impersonation and access to private communications.
The discovery serves as a cautionary tale about the security risks of AI-made platforms, highlighting the need for more stringent controls on AI-generated code. Rather than inherent flaws in companies' implementation of AI, the problem often lies with allowing AI to write their own code - resulting in numerous bugs.
On a separate note, Apple's Lockdown mode has proven itself as an effective safeguard against government hacking attempts, including a recent FBI raid on a Washington Post reporter's home and search of her devices. The Lockdown mode feature prevents connection to peripherals or forensic analysis devices unless the phone is unlocked.
In other news, Elon Musk's Starlink has been used by Ukraine to disable Russian military use of its satellite internet access, causing a communications blackout among frontline forces. This move comes after a request from Ukraine's defense minister for help, and is seen as a significant victory in the war in Ukraine.
Finally, US Cyber Command conducted a coordinated digital operation last year to disrupt Iran's air missile defense systems during a kinetic attack on Iran's nuclear program. The disruption "helped to prevent Iran from launching surface-to-air missiles at American warplanes."