Hugging Face breached, a WordPress RCE, poisoned code completions - July 20, 2026

Chapters

1. 0:00

   Intro

2. 0:16

   Hugging Face breached by an autonomous AI agent

   https://www.helpnetsecurity.com/2026/07/20/hugging-face-breached-by-autonomous-ai-agent/
3. 1:11

   A WordPress remote code execution flaw found for twenty-five dollars

   https://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6/
4. 2:00

   CodeTracer traces poisoned code completions back to training data

   https://www.helpnetsecurity.com/2026/07/20/tracing-backdoored-code-completions/
5. 2:55

   Microsoft open-sources Dusseldorf, an out-of-band security testing platform

   https://www.helpnetsecurity.com/2026/07/20/microsoft-dusseldorf-out-of-band-application-security-testing-oast-platform/
6. 3:49

   Paidwork breach exposes twenty-three million gig workers

   https://haveibeenpwned.com/Breach/Paidwork
7. 4:37

   Language models show more hiring bias than humans

   https://www.technologyreview.com/2026/07/20/1140655/ai-biases-hiring-humans/
8. 5:25

   Netflix paid five hundred eighty-seven million for an AI filmmaking startup

   https://techcrunch.com/2026/07/19/netflix-paid-587m-for-ben-afflecks-ai-filmmaking-startup/
9. 6:16

   Airbus moves nine hundred applications off AWS

   https://www.theregister.com/columnists/2026/07/20/airbus-takes-flight-from-aws-what-happens-next-is-critical/5274109
10. 7:04

    Where the token budget actually goes

    https://quesma.com/blog/custom-deep-research-pipeline/
11. 7:57

    Sign-off