Open-source AI is a global security nightmare waiting to happen, say researchers

A roundup of recent cybersecurity developments: researchers found 175,108 internet-exposed Ollama open-source LLM hosts forming a monoculture vulnerable to mass exploitation; the US Treasury severed contracts with Booz Allen after an insider leaked tax returns of over 400,000 people; South Korean government systems in a simulated attack were all successfully breached—one exposing 10 million people within 20 minutes; and CrowdStrike reports North Korea’s Labyrinth Chollima has split into specialized, coordinated entities targeting finance, crypto, and high-value espionage targets.