Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines AI-driven software development. Microsoft, Amazon, Cisco, Samsung, and Salesforce are only a handful of the entities whose access secrets were exposed.

The revelation was posted on Tuesday and Wednesday by security firms CloudSEK and Hudson Rock. CloudSEK said it found cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables, and AI provider keys that could allow attackers to gain access to more than 2,500 organizations.

40 minutes is all it takes

The credentials were extracted during a 40-minute window in March while the victims used compromised versions of LiteLLM downloaded from the package’s official location in the Python Package Index repository. Hudson Rock said it made the discovery after analyzing a 195TB file that it obtained. Neither firm identified the source of the information.

Read full article

Comments

© Getty Images

Après OpenAI, c’est au tour d’Anthropic de reconnaître que son modèle d’IA a réussi à s’échapper d’un environnement pourtant conçu pour le contenir. Plusieurs organisations ont été visées, mais l’explication derrière ces incidents pourrait être bien moins inquiétante qu’elle n’en a l’air.

Anyone who has used the Internet in recent years is probably used to encountering telltale signs of LLM prompting that lazy users sometimes forget to remove from their AI-generated pabulum. But a Canadian legislator took that idea to an embarrassing new level this week, reading an apparent LLM prompt instruction into the record during a floor speech.

Bill Oliver, a Progressive Conservative Party member of the legislative assembly of New Brunswick, noted in a speech last month that "One of the dangers associated with creating advocacy offices is that citizens often develop expectations that exceed the powers actually granted to those offices." He then went on to say out loud that "here’s a more natural, flowing version of that section that reads like a legislative speech rather than a series of short points," a line with all the hallmarks of an LLM presenting an alternative style option in response to a prompt.

The odd reading went more or less unnoticed at the time, but video of the remarks started spreading around social media networks like Reddit and Threads earlier this week. In Canada, the snafu is now getting mainstream attention from the likes of the Canadian Broadcasting Corporation and The Toronto Star, the latter of which called it a sign of "a growing divide in our society: between the elites, who are only too happy to delegate their duties to the Borg; and the masses, who find this objectionable."

Read full article

Comments

© Getty Images

SpaceX will acquire AI coding tool Cursor for $60 billion in an all-stock transaction, the companies announced today. The deal is expected to close in the third quarter.

It comes just two days after SpaceX's unprecedented IPO and a few months after the merger of SpaceX and xAI, which brought a significant restructuring of xAI.

Cursor was one of the first tools to fully bake features that leverage large language models into an IDE. It's a branch of Visual Studio Code with heavy AI integration. However, incumbent platforms and bigger AI companies have since rolled out comparable features.

Read full article

Comments

© Cursor

Embora sem avançar muitos mais detalhes, Fernando Alexandre, ministro da Educação, Ciência e Inovação, afirmou que o LLM português AMÁLIA “vai ser apresentado até ao final do mês”, afirmando que o modelo “tem tido resultados muito positivos”. 

The post AMÁLIA vai ser apresentado este mês. Ministro da Educação, Ciência e Inovação refere “resultados muito positivos” appeared first on Tek Notícias.

Quarenta anos depois do início da era dos computadores pessoais, a NVIDIA está a trabalhar com a Microsoft e com as fabricantes de PCs para reinventar o computador como uma plataforma de agentes. Por dentro está o chip NVIDIA RTX  Spark e há novas máquinas a caminho.

The post Jensen Huang antecipa um futuro em que o PC é gerido por um agente e em que há “um supercomputador de IA em cada casa” appeared first on Tek Notícias.