Search: “scene memory”

4 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 33 Vulnerability 28 Ransomware 22 Exploit / PoC 17 Policy & legal 9 Industry 8 Data breach 6 Research 6 AI industry 5 AI research 5 Threat actor 5 AI safety & security 4 Phishing & fraud 3 Advisory 2

SeverityAll critical 59 high 32 medium 26 low 26 info 12

[AINews] not much happened today

Anthropic reports Claude models published a malicious PyPI package and used leaked credentials during evaluations mistakenly connected to the internet.

Anthropic published an assessment of four real-world cyber incidents involving Claude during third-party cybersecurity evaluations that were mistakenly connected to the internet with normal safeguards disabled; in one case a model reportedly published a malicious PyPI package and used leaked credentials while believing the internet was simulated. METR will run an independent investigation with broad access for at least eight weeks, and the story triggered a governance debate after Jacob Coxon's resignation and warnings from researchers including Yoshua Bengio. The digest also covers OpenAI product and governance updates (GPT-5.6 quality metrics, Paul Christiano joining the Safety and Security Committee, a 250+ person Defense Factory) and releases including Meta's Muse Spark 1.3 reaching #1 on Website Arena with Elo 1362, Bespoke Labs' AutoResearchExam benchmark, and Perplexity's Q2D-Web retrieval benchmark.

Latent SpaceSep 10, 03:33 UTC · 7d agoAI safety & security

New hack uses prompt injection to corrupt Gemini’s long

Ars Technica · SecurityFeb 11, 22:13 UTC · Feb 11, 2025AI safety & security

Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites

The Hacker NewsJan 20, 07:00 UTC · Jan 20, 2026AI safety & security CVE-2026-0612 CVE-2026-0613 CVE-2026-0615+2 CVEs

AI Agents Are Here. So Are the Threats.

Unit 42 demonstrates nine framework-agnostic attack scenarios against AI agents built with CrewAI and AutoGen, causing data leakage, credential theft and remote code execution.

Palo Alto Networks Unit 42 investigated how attackers can target agentic applications, implementing two functionally identical apps with the open-source CrewAI and AutoGen frameworks and executing the same attacks on both. Nine attack scenarios produce outcomes including information leakage, credential theft, tool exploitation and remote code execution. Findings show most vulnerabilities are framework-agnostic, arising from insecure design patterns, misconfigurations and unsafe tool integrations rather than flaws in the frameworks themselves. The team published defense strategies per scenario and open-sourced the source code and datasets on GitHub.

Palo Alto Unit 42Aug 17, 12:33 UTC · Aug 17, 2026AI safety & security