News
-
US Officials Cast AI Critics as "Foreign Agents"
The Trump administration sees Beijing's hand behind protests against data centers and threatens criminal liability for anyone "furthering the goals of a foreign power."
-
Australia says an OpenAI agent broke into a government website
Australian officials say an OpenAI AI agent gained unauthorised access to a health-statistics portal back in June — possibly the first known case of an AI agent hacking a government site.
-
Qualcomm Says Linux Support Is Coming to Snapdragon X2
Qualcomm says Linux support will come to its Snapdragon X2 series processors, an announcement tied to the company's Snapdragon Summit.
-
Meta shows off Muse Charm, a standalone gadget for its AI agent
At the close of Meta Connect, Mark Zuckerberg briefly unveiled the Muse Charm — a compact, phone-free device built around Meta's Muse AI agent, promised to ship by December.
-
Debian Launches Free AI Inference Portal for Its Developers
Following the project's vote to permit the responsible use of generative AI, the Scaleway-funded Debian Inference Portal now offers contributors self-service access to language models.
-
A documentation placeholder domain now serves ClickFix attacks
The third-party.com domain, used for years as a generic placeholder in developer docs and code samples, now shows a fake Cloudflare check that nudges Windows users into running malicious PowerShell.
-
Meta Connect 2026: VR glasses replace the headset, and smart glasses lose the camera
At its annual showcase, Meta unveiled 100-gram VR glasses, camera-free smart glasses, and new features for its Muse AI agent. The headline product ships in spring 2027.
-
Claude uncovers a novel enzyme system with CRISPR-like repeats
Anthropic has opened its own life sciences lab, where Claude — sifting through DNA databases — autonomously spotted a previously undescribed enzyme system reminiscent of CRISPR.
-
Malware Sneaks Into HashiCorp Registry via Rogue Terraform Providers
Researchers found Go-based malware distributed through two Terraform providers and two Go modules in the HashiCorp registry — the first time the centralized repository has been used as a delivery channel for malicious payloads.
-
Check Point confirms attacks on VPN Security Gateway RCE flaw
The company reports active exploitation of a pre-authentication flaw, CVE-2026-85102, in its VPN certificate handling, alongside a second bug used as a zero-day since July.
-
Bernie Sanders wants to outlaw ‘superintelligence’ — with prison for violators
Senator Bernie Sanders and Representative Greg Casar have introduced a bill to ban the development of artificial superintelligence, with violators facing up to 20 years in prison.
-
CLOSEDQUORUM: the malware that lets four AI models vote on its next move
Cisco Talos has detailed a Windows implant that, instead of taking orders from an attacker's server, asks several commercial AI services what to do and carries out whichever action wins the most votes.
-
MikroTrick: Taking Over MikroTik Routers Without a Password or Key
CERT Polska has detailed a chain of two RouterOS flaws that let attackers gain full administrative control of Internet-exposed MikroTik routers without ever completing authentication.
-
A software update from Samsung froze its own smart fridges
The company halted a SmartThings update in Korea after some owners found their fridges had stopped working entirely, spoiling the food inside.
-
Critical WordPress RCE flaw: update without delay
A critical WordPress vulnerability can, under certain limited conditions, let an unauthenticated attacker run arbitrary code. Fixes have shipped for the current branch and been backported as far as version 4.7.
-
Exploit Published for Unpatched Ubuntu Flaw: Container Escape to Host Root
A use-after-free bug in the Linux kernel's AF_UNIX socket subsystem lets an attacker break out of a container and gain root on the host. The kernel fix shipped on August 6, but Ubuntu has yet to release a patch for any affected LTS release.
-
September Windows updates break Always On VPN connections
Microsoft has warned that installing the September 2026 Windows 11 security updates may disrupt the enterprise Always On VPN remote access solution.
-
Genie-Like Models: When AI Talks Itself Out of Its Own Safety Rules
A new paper describes "self-jailbreaking": after harmless training on math and code, reasoning models start inventing excuses to fulfill harmful requests.
-
A BGP Hijack Against Softaculous: How a Forged Route Yielded a Valid TLS Certificate
An attack on hosting-panel vendor Softaculous combined a BGP hijack with a legitimately issued TLS certificate, letting the attacker push a malicious Virtualizor update to a small number of installations.
-
Critical Next.js flaw: server code execution via a crafted SVG
ImageResponse, the feature that generates social preview images, can under certain conditions let an attacker run code on the server. Vercel shipped a fix on September 22.
- More