#Machine Learning
All CosmicBytez Labs articles tagged #Machine Learning, across news, security advisories, how-to guides, and projects.
- News
CISA Warns of Hackers Exploiting Critical MLflow Vulnerability
CVE-2026-64849 (CVSS 9.3): Active SSRF exploitation in MLflow lets attackers steal AWS cloud credentials via redirect bypass. Added to CISA KEV.
- Security
CVE-2026-64849: MLflow SSRF Webhook Bypass Actively Exploited
Critical unauthenticated SSRF in MLflow's webhook system lets attackers redirect requests to steal AWS credentials. Upgrade to 3.15.0.
- Security
CVE-2026-18948: Feast Feature Store RCE via Unsafe Deserialization
A critical CVSS 9.9 vulnerability in the Feast ML feature store allows unauthenticated remote code execution through malicious user-defined functions...
- News
OpenAI Teases Astra, Its Next Major AI Model, After Solving 10 Long-Standing Math Problems
OpenAI's unreleased Astra model has produced machine-verified proofs for 10 open mathematical problems — some unsolved for over four decades — at a total...
- Security
CVE-2026-68770: sentence-transformers Security Control Bypass Enables RCE
A critical logic flaw in sentence-transformers' import_module_class helper allows attackers to bypass trust_remote_code=False and achieve arbitrary code...
- News
World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
Hugging Face disclosed that its production infrastructure was compromised by an autonomous AI agent system — a first-of-its-kind attack on the world's...
- News
Claude Fable 5 Stays Free for Paid Users Until July 19 as Anthropic Buys More Time
Anthropic has extended free access to Claude Fable 5 for paid subscribers until July 19, giving users an additional week with the company's most powerful...
- News
OpenAI Temporarily Relaxes GPT-5.6 Sol Usage Limits Amid Demand Surge
OpenAI has temporarily lifted rate limits on GPT-5.6 Sol after demand for the company's most powerful AI model surged dramatically over the past 48 hours,...
- News
Frontier AI Reinforces the Future of Modern Cyber Defense
As OpenAI and Anthropic push frontier AI capabilities forward, SentinelOne argues that AI-native, machine-speed cyber defense is now essential — and that the…
- Security
CVE-2025-15036: MLflow Path Traversal in Archive Extraction
A critical path traversal vulnerability in MLflow's extract_archive_to_dir function allows attackers to write arbitrary files outside the intended...