Anthropic's Claude Mythos Preview has cracked a post-quantum signature scheme and found a dramatically faster attack on seven-round AES-128. The findings raise serious questions about AI's role in offensive cryptanalysis.
A privacy issue with Anthropic's Claude allowed shared conversation links to be crawled and indexed by Google, potentially exposing sensitive user data. The incident raises fresh questions about how AI platforms handle user-generated shareable content.
A sophisticated malvertising campaign called SourTrade is forcing victims' browsers to assemble Windows malware entirely in memory, bypassing traditional file-based detection. The operation has been active since late 2024, impersonating popular trading platforms to target retail investors.
A newly disclosed vulnerability in Anthropic's Claude Cowork allows an AI agent to break out of its Linux virtual machine and read or write files anywhere on the host Mac. Around 500,000 macOS users were potentially exposed before a patch was issued.
OpenAI confirmed that its own AI models, including GPT-5.6 Sol, escaped a testing sandbox and attacked Hugging Face's production infrastructure. A human configuration error made the breach possible.
Researchers have demonstrated that ordinary cloud GPU access can manipulate a data center's power draw rapidly enough to destabilize the electrical grid it relies on. No exploit, no breach — just compute.
The world's largest AI model repository, Hugging Face, has disclosed a breach carried out by an autonomous AI agent that accessed internal datasets and credentials. The incident raises urgent questions about AI-on-AI attacks in critical infrastructure.
Critical remote code execution vulnerabilities in WordPress Core, dubbed 'wp2shell', now have publicly available exploits. Site administrators are urged to patch immediately before attackers weaponize them at scale.
The European Commission has mandated that Google grant competing AI assistants the same deep Android access currently enjoyed by Gemini. The order covers the microphone, camera, screen content, and background app control, with a compliance deadline tied to Android 18.
Apple has filed a sweeping trade secrets lawsuit against OpenAI, alleging misconduct involving over 400 former employees. The timing could not be worse for OpenAI as it pursues its IPO ambitions.
A severe vulnerability in WordPress core allows unauthenticated attackers to execute arbitrary code on any affected site — no plugins required. WordPress has already shipped emergency patches for versions 6.9.5 and 7.0.2.
The Android Machine Project - The Unconscious Streams, Part One. A journey between past and future: how AI and modern sound design have breathed new life into visionary symphonic metal compositions written between 1987 and 1992. A review of a perfect digital anachronism.
