News
-
Genie-Like Models: When AI Talks Itself Out of Its Own Safety Rules
A new paper describes "self-jailbreaking": after harmless training on math and code, reasoning models start inventing excuses to fulfill harmful requests.
-
A BGP Hijack Against Softaculous: How a Forged Route Yielded a Valid TLS Certificate
An attack on hosting-panel vendor Softaculous combined a BGP hijack with a legitimately issued TLS certificate, letting the attacker push a malicious Virtualizor update to a small number of installations.
-
Critical Next.js flaw: server code execution via a crafted SVG
ImageResponse, the feature that generates social preview images, can under certain conditions let an attacker run code on the server. Vercel shipped a fix on September 22.
-
China's UTA0565 Chains Chrome and Windows Zero-Days to Drop CLEANGULP
The group leaned on a three-flaw exploit chain and fake media and NGO websites to escape the browser sandbox and infect victims with a new backdoor.
-
F5 Patches Critical BIG-IP APM Zero-Day Allowing Unauthenticated RCE
CVE-2026-94127 threatens only systems where the APM module acts as an OAuth authorization server. F5 has shipped engineering hotfixes while attacks are already under way.
-
‘We’re already fighting yesterday’s battle’: Greece’s PM gets candid about AI
At a gathering of founders in San Francisco, Kyriakos Mitsotakis pitched Greece as a home for tech companies — while admitting that no government is ready for what artificial intelligence is about to do.
-
Discord Rolls Out Age Verification for All Users
Starting September 23, the platform begins determining users' ages. The company says more than 90% of users won't have to verify anything.
-
OpenAI turns to elite mathematicians to avoid fumbling again
After a string of headline mathematical results curdled into a reputational crisis, OpenAI has convened an independent panel of nine prominent mathematicians to advise it on how to publish discoveries and talk to the research community.
-
FoxPro is back: FoxDev Studio runs your old apps on 64 bits
Nearly two decades after Microsoft killed Visual FoxPro, a new project called FoxDev Studio opens legacy projects untouched and lifts the ceilings of the 32-bit era.
-
A New Price War: Anthropic and OpenAI Slash Their Flagship Rates
In a single day came Claude Opus 5.5, GPT-6 Sol and GPT-6 Luna — all against a backdrop of tumbling prices. GPT-6 is half the cost of its predecessors, and Opus 5.5 dropped 20%.
-
Microsoft disrupts AI-assisted platform behind 12,000 compromised accounts
Microsoft says it has taken down EvilTokens, a service that offered attackers a ready-made platform for mass account compromises.
-
OpenAI Unveils GPT-6 in Two Flavors: Sol and Luna
OpenAI has posted an announcement of its new GPT-6 model, offered in two variants named Sol and Luna. We were unable to retrieve the body of the post itself.
-
Check Point warns of a management server zero-day used in targeted attacks
The vendor says a flaw in its Security Management Server was exploited as early as July 23 and shipped a fix on September 22. In parallel, attackers are probing Spark firewalls through a VPN flaw.
-
NetBSD 10.2 released with fixes and minor refinements
The NetBSD project has shipped version 10.2 of its highly portable operating system. The release focuses on bug fixes and small improvements to the userland.
-
Critical Bifrost AI Gateway Flaw Allows Command Execution Without Credentials
A critical flaw in Bifrost, the open-source AI gateway that routes requests to over 20 LLM providers, lets an unauthenticated attacker run arbitrary commands on the gateway server with a single HTTP request.
-
Hackers Claim to Have Breached the FBI and Stolen Data on Every Employee
The group ShinyHunters says it stole personal data on all FBI employees and applicants. A sample of 5,000 people includes names, addresses, phone numbers, and details on spouses.
-
systemd 262 lands with embedded unit files, LUO integration and an AI “canary” for unreviewed code
The systemd project has shipped another major update to its init system and service manager. Highlights include embedded fallback unit files, Live Update Orchestrator support, and a mechanism to flag unreviewed code written by AI models.
-
D-Link warns of maximum-severity zero-day in DIR-822A routers
A maximum-severity flaw in legacy DIR-822A routers already has a public PoC exploit — and no patch is available yet.
-
Maxed-Out VeloCloud Orchestrator Flaw Already Under Active Attack
Arista warns that a new flaw in on-premises VeloCloud Orchestrator is being actively exploited. Only orchestrators that authenticate their Edge devices with certificates are at risk.
-
GPT-6 Astra Cracks an Old Enigma Message on Its Own
With no step-by-step guidance, a language model broke one of the unsolved Enigma intercepts — writing its own Enigma simulator and Bombe along the way.
- More