8:10 11 chapters
Daily Digest - July 20, 2026
An autonomous AI agent breaches Hugging Face, a WordPress RCE found for twenty-five dollars, and language models out-discriminate humans in hiring.
Chapters
-
Intro
-
Hugging Face breached by an autonomous AI agent
https://www.helpnetsecurity.com/2026/07/20/hugging-face-breached-by-autonomous-ai-agent/ -
A WordPress remote code execution flaw found for twenty-five dollars
https://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6/ -
CodeTracer traces poisoned code completions back to training data
https://www.helpnetsecurity.com/2026/07/20/tracing-backdoored-code-completions/ -
Microsoft open-sources Dusseldorf, an out-of-band security testing platform
https://www.helpnetsecurity.com/2026/07/20/microsoft-dusseldorf-out-of-band-application-security-testing-oast-platform/ -
Paidwork breach exposes twenty-three million gig workers
https://haveibeenpwned.com/Breach/Paidwork -
Language models show more hiring bias than humans
https://www.technologyreview.com/2026/07/20/1140655/ai-biases-hiring-humans/ -
Netflix paid five hundred eighty-seven million for an AI filmmaking startup
https://techcrunch.com/2026/07/19/netflix-paid-587m-for-ben-afflecks-ai-filmmaking-startup/ -
Airbus moves nine hundred applications off AWS
https://www.theregister.com/columnists/2026/07/20/airbus-takes-flight-from-aws-what-happens-next-is-critical/5274109 -
Where the token budget actually goes
https://quesma.com/blog/custom-deep-research-pipeline/ -
Sign-off
Also on Spotify: spotify:episode:5rhBZTJNm6hHGmyVY77iyw