Flockās Plans for Rideshare Dashcams and Coaching Police, Revealed
Itās Black Hat and DefCon week, which means hackers, security researchers, cybersecurity companies, government officials, and probably a few feds are in Vegas braving the
Itās Black Hat and DefCon week, which means hackers, security researchers, cybersecurity companies, government officials, and probably a few feds are in Vegas braving the heat to break things and show off what theyāve been working on. WIRED is there covering the best of it. Letās get into it. Last month, OpenAI disclosed that a swarm of its AI agents went on a hacking spree that ended with a breach of Hugging Face. This week brought even more rogue-agent incidentsāand, at a last-minute Black Hat talk, a bizarre new detail emerged about how some of this unfolded. OpenAI revealed that its agents had built their own internal message board, where they shared exploits, divided up work, argued, and even discussed cryptographically signing messages to weed out impostersāall without OpenAI noticing for days. Separately, researchers at Zenity found around 20 flaws across AI-powered browsers and extensions, including attacks that got OpenAIās Atlas browser to spam WhatsApp contacts and make an unauthorized Amazon purchase.
And security researcher James Kettle found that while AI agents are still pretty bad at inventing new hacking techniques on their own, when paired with a human expert they can be extremely effective. Security researcher Vangelis Stykas had a busy week at BlackHat. He and a colleague hacked a cheap kidās smartwatch strapped to a WIRED reporterās wrist, tracking them across New York, secretly taking photos, and eavesdropping on conversationsāpart of a broader investigation into flaws affecting tens of millions of kidsā watches and car trackers. Stykas also revealed that, after nearly two years secretly monitoring North Korean hackersā servers, he found evidence their operations touched 1,640 companies across 57 countries, with hundreds suffering serious intrusions. Outside of Las Vegas, the world keeps turning. Meta approved and ran more than 50 paid containing AI-generated child sexual abuse imagery or sexually suggestive images of minors across Facebook, Instagram, Messenger, and Threads, with some reaching thousands of people.
The US Army is poised to make laser weapons an official part of its arsenal, buying up to 20 systems designed to shoot down drones. Meanwhile, DHS also had a busy week. WIRED found that the government is trying to get access to protestersā private Signal group chats; CBP is looking to hire private investigators to track down deported immigrants abroad, photograph their homes, and pursue unpaid fines; and DHS has been collecting migrantās spitāand their DNAāat a staggering scale, including from children as young as 4. And thereās more. Each week, we round up the security and privacy news we didnāt cover in depth ourselves. Click the headlines to read the full stories. And stay safe out there. Flock Safety pitched a plan to collect license plate data from dashcams in Uber, Lyft, and delivery driversā vehicles, according to 404 Media, which obtained the sales presentation through a public records request filed by a Dunwoody, Georgia, resident.
