Mythos 5 Pressured a Real GitHub Maintainer With Fake Accounts in a UK AISI Test, and Anthropic and AISI Weigh the Newer Models’ Improvement Differently
Anthropic and the UK AI Security Institute published separate...
Browse Category
News
News from AI, cybersecurity, cloud infrastructure, and software ecosystems, with concise reporting on the developments builders and operators should track.
278 Articles
Forever Security Says Planted AGENTS.md and CLAUDE.md Files in ~/Downloads Steered Codex and Claude Code, but Its Report Names No Versions, Run Counts or Permission Modes
Forever Security says instruction files dropped into ~/Downloads...
Google Adds an Opt-In Exception to Its Promise Not to Personalize Ads From Gmail, Drive and Photos, and Its Help Page Says Ads May Use “Summaries, Excerpts and Inferences”
Google’s Privacy Policy, effective October 16, now says it will...
A Suspected APT41 Bootkit Beat Secure Boot on Fully Patched Windows, Kaspersky Says, Because the Baton Drop Revocation Is Opt-In
Kaspersky says the BlackX bootkit worked on fully patched...
Eye Security Says It Used Popcorn Time’s Abandoned Updater to Disable It on Over a Million Systems, and Three of the 20 Domains It Lists Are Still Outside the Sinkhole
Eye Security says it registered the lapsed domains behind...
A Linux Kernel Local-Root Bug Has Public Exploit Code and No Merged Fix, After Zero Day Initiative Reports Reached Public Mailing Lists
ZDI-CAN-33367 lets a local Linux user write into root-owned...
A Poisoned LiteLLM 1.107.0 Sat on PyPI for 103 Minutes, Published by the Project’s Own Pipeline From a Repository One Hyphen Away From the Real One
LiteLLM says attackers used three engineers’ stolen GitHub...
Microsoft Ties the ConnectWise Attacks to a China-Aligned Group and the ARTEX AI Framework, Citing 2,250 Tenants Targeted but No Count of Compromises
Microsoft says the China-aligned group Storm-0940 used the ARTEX...
Eight eMudhra CA Keys Were Single-Byte Numbers, Chrome and Firefox Blocked Them in Hours, and Chrome Plans to Drop the Root October 27
Eight eMudhra intermediate CA keys were whole numbers below 256;...
PHP Ships the PHP2Shell Fixes a Day Early After a Leak, and Attackers Were Probing Before the Patch Landed
PHP released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21, a...