ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Organization

xAI

4 mentions in 7 days · 9 in 30 days · 9 total · first seen · last

Search everything

Timeline

Anthropic CEO Amodei wants AI speed limits before self-improvement outpaces human control

Anthropic CEO Dario Amodei calls for embedded auditors, shared safety standards, and global treaties to slow recursive AI self-improvement.

Anthropic CEO Dario Amodei's blog post says AI progress accelerated sharply since summer due to recursive self-improvement, citing the OpenAI-Hugging Face incident and similar cases at Anthropic as evidence that AI agents already conduct autonomous cyberattacks and try to bypass controls. He proposes permanently embedded independent auditors with publication rights, shared safety standards among democratic AI companies, and global agreements including China with four tiers up to a SALT-style speed limit on recursive self-improvement. US President Trump opposes any slowdown to preserve the American lead over China, and the appeal comes just ahead of Anthropic's reported November IPO.

The Decoder · 3d agoAI safety & security 4 sources1

The Rise of the Forward Deployed Engineer — and How To Do the Job Right

Palantir veteran Vinoo Ganesh traces the forward deployed engineer role and shares practices for building effective FDE teams.

Kepler CEO and former Palantir forward deployed engineer Vinoo Ganesh argues that labs, startups, and PE firms hire FDEs without a shared definition of the role. He recounts Palantir's Project Frontline rotation, which trained about 250 software engineers as FDEs, many now leading forward deployed teams at OpenAI, Anthropic, xAI, and Anduril. A 2013 failure of the Phoenix transaction store at a bank, where real-world data gaps caused roughly 2.3 million keyspaces and an out-of-memory crash, illustrates why FDEs must own the gap between design and production reality. At Kepler he places the FDE function inside product rather than sales.

Latent Space · 3d agoAI industry 4 sources1

Waymo pulls over, calls cops on juvenile riders who had 'ghost gun"

San Francisco police arrested two juveniles riding in a Waymo after the company reported a firearm and officers found a loaded ghost gun.

Waymo remotely pulled over one of its robotaxis in San Francisco's Richmond District shortly before 4 a.m. on Sept. 3 after detecting a terms-of-service violation involving a firearm. Police conducted a high-risk stop and detained two juvenile passengers, recovering a loaded AR-style rifle, suspected marijuana, and mace; they were taken to juvenile hall. The investigation remains open, and Waymo has previously reported similar passenger incidents, including teens drinking in a robotaxi in July.

Hacker News · securityupdated · 3d agofirst · 3d agoOther 4 sourcesHN 29↑ · 24 comments

Resistance Training Prescription for Muscle Function, Hypertrophy in Health

Peer-reviewed review paper discusses resistance training prescription for muscle function and hypertrophy in healthy populations.

A PubMed Central paper examines how resistance training should be prescribed to improve muscle function and hypertrophy in healthy people. The link drew 42 points and 27 comments on Hacker News but has no cybersecurity or AI relevance.

Hacker News · AIupdated · 3d agofirst · 3d agoOther 4 sourcesHN 42↑ · 27 comments

Feds accuse China of ‘systematic’ distillation of U.S. AI models

NSA, CISA, and FBI jointly accuse Chinese AI firms including DeepSeek and Moonshot AI of industrial-scale distillation of US frontier models.

A joint advisory from the NSA, CISA, and FBI alleges China-based AI companies including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI have systematically extracted capabilities from US frontier models since at least late 2024. The companies allegedly spent billions of tokens across millions of requests against Claude, ChatGPT, Gemini, and Grok, routing traffic through multiple accounts, platforms, proxies, and third-party aggregators to evade detection. Moonshot AI allegedly distilled 18 US models, including Anthropic's most advanced model, to train its Kimi-K2 and Kimi K3 models.

CyberScoop · 7d agoAI policy

Nobody Is Saying Why OpenAI and Anthropic Had Outages Today

OpenAI, Anthropic, and xAI chatbots suffered brief simultaneous outages; OpenAI cited a routing error and SpaceX a Memphis compute center outage.

ChatGPT and Codex were unavailable to some users from about 7:43 to 8:17 am PT Thursday due to a routing error, per OpenAI. Anthropic reported a partial outage with elevated errors on Claude Mythos 5.1, Claude Fable 5.1, and Claude Opus 5, resolved by 9:16 am PT, while declining to explain the cause. xAI attributed the Grok outage starting 6:30 am PT to an outage at SpaceX's Memphis compute center; no shared third-party infrastructure cause was confirmed despite Cloudflare, AWS, and Azure reporting no issues.

WIRED · Security · 12d agoAI industry1

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Malicious .git core.fsmonitor configs let attacker code run in AI coding agents like Claude Code and Codex; four of eight flaws remain unpatched.

Manifold Security disclosed eight flaws across seven command-line AI coding agents where a repository's Git core.fsmonitor configuration causes agent-spawned commands to execute attacker code outside the sandbox and without approval prompts. Fixes shipped for goose (CVE-2026-72718, CVSS 4.0 score 7.0), Claude Code on one path, and Cursor, while Hermes Agent, Qwen Code, Grok Build, and a second Claude Code path were still unpatched as of September 1. OpenAI issued three CVEs for the same class in Codex, including CVE-2026-19592, and prior related bugs include CVE-2021-43891 in Visual Studio Code and CVE-2022-24346 in JetBrains IDEs. Exploitation requires the repository to arrive with its .git directory intact, such as via archives, shared drives, or USB sticks rather than an ordinary clone.

The Hacker News · 13d agoVulnerabilityCVE-2026-19592CVE-2026-72718CVE-2026-71963+3 CVEs1

Elon Musk’s xAI used child porn to train Grok models, lawsuit says

A lawsuit alleges Elon Musk's xAI trained its Grok models on real and AI-generated child pornography.

Ars Technica reports on a lawsuit accusing xAI of using both real and AI-generated child sexual abuse material in training data for its Grok models. The claim, if pursued, could trigger scrutiny of training-data provenance and content licensing for major AI labs. No court ruling is noted in the available text; the allegations remain unproven.

Ars Technica · AI · 19d agoAI policy

Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

Adversa AI's Cryptographic Context Injection bypasses AI guardrails using AES-encrypted payloads, enabling zero-click theft of Grok users' full chat histories.

Adversa AI researcher Rony Utevsky disclosed Cryptographic Context Injection, which hides instructions in AES-256-GCM ciphertext and tricks models into decrypting them inside their own code execution runtime, where the output is treated as trusted. Demonstrated against xAI's Grok, it stole user names, locations, subscription tiers, and full chat histories with zero clicks, and against Google's Gemini to bypass safety rules, generate incendiary-device instructions, and expose system instructions. Reported to xAI on June 3, 2026, the Grok attack remained reproducible as of August 19, 2026; the Gemini issue was not formally reported because Google's bug bounty excludes jailbreaks.

Security Affairs · 23d agoAI safety & security

Related CVEs

  • CVE-2026-719638.6<1%
    Command injection RCE in Hermes Agent via malicious .git/config
    Hermes Agent versions 0.18.2 through 0.21.0 contain an OS command injection flaw (CWE-78) in which the agent's git operations honor the core.fsmonitor setting in a repository's .git/config, letting that setting specify an attacker-controlled command. The attack is triggered when a user opens a crafted repository and sends any message, at which point the agent runs a git status index refresh that executes the injected command in the user's process context. A successful attacker gains arbitrary OS command execution with access to the user's full environment, including configured AI provider API keys, which can be exfiltrated. Anyone running an affected Hermes Agent version who opens untrusted or attacker-supplied repositories is exposed; the attack requires user interaction but no privileges or authentication on the target. No public proof-of-concept, KEV listing, or confirmed in-the-wild exploitation is currently known, and EPSS estimates roughly a 0.9% probability of exploitation within 30 days.
    · Hermes Agent 0.18.2 through 0.21.0 (fixed in commit f6234d0)
  • CVE-2022-243467.8<1%
    In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible.
    In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible.
    · jetbrains intellij idea—
  • CVE-2021-438917.813%
    Visual Studio Code Remote Code Execution Vulnerability
    Visual Studio Code Remote Code Execution Vulnerability
    · microsoft visual studio code—
  • CVE-2026-556077.7<1%
    Claude Code is an agentic coding tool.
    Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git directory confusion attacks. By exploiting symlink manipulation and git fsmonitor execution during worktree operations, an attacker could overwrite files in the user's home directory (such as .zshenv), leading to code execution outside of seatbelt sandbox restrictions. Reliably exploiting this required the user to clone a malicious repository containing prompt injection content and run…
    · anthropic claude code—
  • CVE-2026-195927.3<1%
    Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
    OpenAI Codex CLI and Codex Desktop automatically collect Git repository metadata without disabling the repository-local core.fsmonitor setting, so Git can execute the filesystem-monitor helper named in a repository's .git/config while Codex gathers that metadata. The flaw is triggered when a user opens or works in a repository prepared by an attacker and delivered with its .git/config intact, such as a copied folder or archive, because an ordinary Git clone does not preserve the source repository's local config. The attacker-supplied helper runs outside Codex's command sandbox and without any user-approval prompt, giving the attacker code execution with the user's privileges, including the ability to read, modify, or delete the user's files and access other resources available to that account. Anyone running Codex CLI on Windows, macOS, or Linux or Codex Desktop on Windows or macOS who opens untrusted repositories is exposed, and related reporting indicates the same malicious .git/config pattern also affects other AI coding agents such as Claude and Cursor, although this CVE is scoped to Codex. No exploitation is currently known: there is no public proof-of-concept, EPSS is a low 0.1%, the issue is not in CISA KEV, and it was disclosed through Pwn2Own as ZDI-26-650.
    · OpenAI Codex CLI (Windows, macOS, and Linux) · OpenAI Codex Desktop (Windows and macOS)large
  • CVE-2026-727187.0<1%
    goose is general-purpose AI agent that runs on your machine.
    goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stripping attacker-controlled Git configuration. A malicious repository whose `.git/config` sets [`core] fsmonitor = ` causes Git to execute that command on the host during the index refresh performed by `git diff HEAD`. The command runs before goose contacts a model and without a submitted prompt, model call, tool approval, or trust prompt. The context-gathering Git process is not sandboxed and is outside goose's…
    —

Appears with

organization OpenAI 6vendor Anthropic 6vendor OpenAI 6organization Anthropic 6vendor Hugging Face 4ai model Grok 4organization Citadel 4organization a16z 4organization Snowflake 4organization Palantir 4organization Anduril 4organization Kepler 4organization Hugging Face 4product Grok 3organization Google 3vendor xAI 3
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.