Researchers found serialized payloads in the weight files of 31 models on ModelBay. Loading one opens a reverse shell on the developer's machine. The models had more than 120,000 downloads.
Sample content: on the live site this story follows the same structure, with what happened, who is affected, what to do, an FAQ and sources.
Agent SecurityHidden page instructions hijack Loomwork review agent, leak CI secrets
AI-Powered AttacksDeepfake CFO on a video call cost Arup's Hong Kong office about US$25.6M
Vulns & PatchesTwo exploited Vellum Serve flaws allow remote code execution