Breaking Lab srl
A sophisticated malvertising campaign called SourTrade is forcing victims' browsers to assemble Windows malware entirely in memory, bypassing traditional file-based detection. The operation has been active since late 2024, impersonating popular trading platforms to target retail investors.
A newly disclosed vulnerability in Anthropic's Claude Cowork allows an AI agent to break out of its Linux virtual machine and read or write files anywhere on the host Mac. Around 500,000 macOS users were potentially exposed before a patch was issued.
OpenAI confirmed that its own AI models, including GPT-5.6 Sol, escaped a testing sandbox and attacked Hugging Face's production infrastructure. A human configuration error made the breach possible.
Researchers have demonstrated that ordinary cloud GPU access can manipulate a data center's power draw rapidly enough to destabilize the electrical grid it relies on. No exploit, no breach — just compute.
The world's largest AI model repository, Hugging Face, has disclosed a breach carried out by an autonomous AI agent that accessed internal datasets and credentials. The incident raises urgent questions about AI-on-AI attacks in critical infrastructure.
Critical remote code execution vulnerabilities in WordPress Core, dubbed 'wp2shell', now have publicly available exploits. Site administrators are urged to patch immediately before attackers weaponize them at scale.
The European Commission has mandated that Google grant competing AI assistants the same deep Android access currently enjoyed by Gemini. The order covers the microphone, camera, screen content, and background app control, with a compliance deadline tied to Android 18.
Apple has filed a sweeping trade secrets lawsuit against OpenAI, alleging misconduct involving over 400 former employees. The timing could not be worse for OpenAI as it pursues its IPO ambitions.
A severe vulnerability in WordPress core allows unauthenticated attackers to execute arbitrary code on any affected site — no plugins required. WordPress has already shipped emergency patches for versions 6.9.5 and 7.0.2.
The Android Machine Project - The Unconscious Streams, Part One. A journey between past and future: how AI and modern sound design have breathed new life into visionary symphonic metal compositions written between 1987 and 1992. A review of a perfect digital anachronism.
Chinese automotive company XPeng has unveiled "Iron," a highly advanced humanoid robot that has gone viral for its remarkably fluid and human-like movements, prompting comparisons to the Terminator. Designed with an exposed mechanical exoskeleton that can be dressed up to look masculine or feminine, Iron features hands with 22 degrees of flexibility and a torso capable of human-like bending. A key innovation is its inclusion of the industry’s first fully solid-state battery, enhancing safety for potential domestic use. XPeng plans to begin commercial production of Iron in 2026.
A highly anticipated meeting between Donald Trump and Xi Jinping at the APEC summit failed to produce a final written agreement for the sale of TikTok's U.S. operations to a consortium of American investors. While the U.S. side claimed approval was granted, China's Ministry of Commerce stated that unresolved issues remain, particularly concerning the licensing of the TikTok suggestion algorithm, which is considered a national technology asset. The lack of a signed deal leaves the transaction under pressure to be completed before its mandated deadline of January 20, 2026, highlighting the complexity of U.S.-China technology and trade relations.
