Topic: Security
360 stories · page 4 of 8
- Scaleout Systems adapts edge AI for drone recon and attack missions
- Plugin4Shell flaw lets attackers hijack Claude Code, Codex and Copilot plugins
- OpenAI reveals a training model that inserted prompt injections into its own summaries
- Hacktron chains libheif RCE and OpenAI SSO bug to hijack ChatGPT accounts
- CrowdSec confirms source code leak from Tanstack breach
- Crates.io security team warns of video call attacks on Rust maintainers
- Flock camera hack reveals it tracks people, not just cars
- Decoy Direction Optimization blocks LLM refusal-ablation jailbreaks
- CVE-2026-32746 exposes a 32-year-old pre-auth bug in GNU Telnetd
- Strix finds a live GitHub admin token from 2023 in Baseten's Docker image
- OpenAI, Anthropic, Meta models hacked real systems, analysis blames Irregular's tests
- Nvidia and Palantir restrict Anthropic's Fable over data retention
- Infoblox finds PeckBirdy malware behind Chinese casino sites
- Apple patches record 260+ bugs, AI credited with just 10
- Apple debuts Reference Image to prove iPhone 18 Pro photos are real
- Ubuntu 26.10 finishes its move to Rust-based coreutils
- Poison set selection swings LLM backdoor attack success from 3% to 80%
- OpenAI has hundreds of contract workers reading ChatGPT conversations
- Microsoft publishes 37-page humanist AI code of conduct
- HazardAuditor guards computer-use agents against runtime risks
- Bomfather cuts eBPF security agent CPU cost by about 90% with inode caching
- Adversarial fashion clothing aims to fool AI surveillance cameras
- Signal ties a new zero-knowledge-proof credential to numberless accounts
- Report on the malicious use of AI resurfaces, last revised in 2024
- Feyospace-s1 hits 63.24% success rate, ranks 10th on CyberGym leaderboard
- Revolut confirms data breach via fake government agency emails
- Flock Safety employees called police on journalists filming its cameras
- AI agents make security through obscurity obsolete, researchers say
- Three JFrog Artifactory bugs remain under active attack despite patches
- OpenAI agents ran an undisclosed RubyGems attack, report says
- Google reroutes search result links to curb scraping
- Google Project Zero releases MAccConc to test Linux kernel race conditions
- Bengio warns AI training process makes agents deceptive
- Anthropic details Claude misuse for weapons, mass surveillance, and Chinese distillation
- WebGPU bug freezes M-series Macs: Apple calls it not a security issue
- Proof of Capture: an open source counterpart to Apple Reference Image, using steganography
- EvoSafeHarness cuts DecodingTrust-Agent attack success from 45.6% to 10.0%
- Anthropic finds a fourth Claude incident involving unauthorized access to real systems
- Anthropic disrupts Claude-automated Russian espionage campaign
- Guardrail-stripped GLM-5.3 hacked a Wired reporter's home network
- Four hacking groups share BlueMoon exploit kit chaining Chrome and Windows bugs
- Cognition's Devin factors RSA-260, sets new factoring record
- Calif Research demos WeWorm, a zero-click WeChat worm built with AI
- Apple details how the Secure Exclave keeps Watch audio private
- Split-LLM privacy checks pass even as the gradient leaks which rows are real
- Microsoft patches a record 972 vulnerabilities, 112 critical
- LG TVs shown scanning home networks for other devices
- Hackers steal Claude tokens from paid subscribers using infostealer malware
- NixOS backdoored by trusting-trust attack on GNU strip
- GLM 5.3-flash makes autonomous AI hacking cheap, essay warns