ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Edits”

118 items in the last 7d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 21AI research 18AI safety & security 16Exploit / PoC 13Vulnerability 13Advisory 8Tools 7Industry 6AI tools & infra 5Malware 4Research 3Phishing & fraud 2Threat actor 1Model release 1
SeverityAllcritical 12high 14medium 21low 2info 69

Paint-Anything: Unified Any-Color Control for Image Generation and Editing

Paint-Anything learns a shared hex-prompt interface for any-color image generation and editing on FLUX.2-4B, improving ACBench scores by 85.3% and 28.3%.

Paint-Anything enables specifying an object's target color as any 24-bit hex value for both image generation and editing through a shared hex-prompt interface trained with object-level color supervision. The authors build the Paint-500K dataset from real images via object grounding, perceptual color labeling, and editing-pair synthesis, supplemented with pure-color anchors used only at high-noise timesteps. They also introduce the Any Color Benchmark (ACBench) with T2I and Edit tracks; on FLUX.2-4B the method improves ACBench-T2I and ACBench-Edit by 85.3% and 28.3% over the base model and achieves the best average CompColor score.

arXiv cs.AI / cs.LG / cs.CL · 20h agoAI research

Fluid Notarization: Verifiable Evolution of Concurrently Edited Structured Documents

Fluid Notarization anchors delta-CRDT change graphs on blockchain, providing verifiable provenance for concurrently edited documents, demonstrated on collaborative electronic health records.

The paper introduces Fluid Notarization, a paradigm that notarizes the evolution of collaboratively edited structured documents rather than isolated snapshots. It builds on Melda, a JSON-native delta-CRDT representing changes as compact content-addressed deltas linked by causal dependencies, with blockchain notarization reduced to recording identifiers of evolution artifacts while synchronization, reconstruction, and conflict resolution remain off-chain. The architecture combines deterministic CRDT convergence with independently auditable proof-of-existence, provenance, and publication evidence, validated through a prototype based on collaboratively edited electronic health records.

arXiv cs.CR · 1d agoResearch

CVE-2026-75157: Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

Apache Airflow before 3.3.2 lets any user with Dag read permission delete queued asset events, suppressing asset-triggered scheduling (CVE-2026-75157).

CVE-2026-75157 is a low-severity authorization flaw in Apache Airflow before 3.3.2: the asset queued-events DELETE endpoints checked the caller's Dag-axis permission with READ instead of EDIT. Any authenticated user able to read a Dag could silently delete its queued asset events, suppressing asset-triggered scheduling; fixed versions enforce the EDIT permission.

oss-security · 9h agoVulnerabilityCVE-2026-75157

How to Write with an LLM

Thomas Ptacek publishes a method for LLM-assisted writing: never adopt suggested words and forbid model encouragement to preserve author voice.

Thomas Ptacek outlines two rules for using LLMs as copyeditors: never use a single word a model suggests, and forbid encouragement that reinforces first-draft impulses. He recommends running model passes to flag passive voice, repetition, and misplaced paragraphs, and comparing rewrites with a fresh-context model to avoid bias. He also recommends the book 'Style: Lessons in Clarity and Grace' and mentions building a small tool to manage context-free copyediting comparisons.

Hacker News · AIupdated · 14h agofirst · 16h agoAI industry 2 sourcesHN 46↑ · 31 comments

Meta expands subscription push with new AI-focused plans

Meta launched Meta One subscriptions ($7.99–$499/month) bundling expanded Muse AI image and video generation across Facebook, Instagram, and WhatsApp.

Meta introduced Meta One with consumer Core ($7.99/mo) and Premium ($19.99/mo) tiers plus business plans ranging from Essential ($14.99/mo) to Max ($499/mo). Subscriptions unlock expanded Muse Image, Muse Video, Restyle editing, and Meta Business Agent usage, following Meta's $14.3B investment in Scale AI. Appfigures data shows Instagram's daily subscription revenue averaging $1.2M and Facebook's $528K after the March Plus-tier launches, up 475% and 143% respectively. BNP Paribas forecasts $13.5B added revenue by 2028; Truist estimates $20B by 2030.

TechCrunch · AI · 2d agoAI industry

commit-rewriter 0.1

Simon Willison released commit-rewriter 0.1, a tool that rewrites git commit messages from the first edited commit, with a timestamped revert branch.

Simon Willison built commit-rewriter 0.1, a small web app for editing git commit messages, motivated by cleaning up Datasette security release commits that contained coding agent cruft and private issue IDs. It runs via 'uvx commit-rewriter path/to/repo' and creates a timestamped branch of the repo state before rewriting every commit from the first edited one to the most recent, allowing easy reversion.

Simon Willison · 4d agoTools2

Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION

Weekly Security Affairs newsletter aggregates top stories including Cisco FMC exploitation, Qilin ransomware, Chrome zero-days, and Berlin leak.

Pierluigi Paganini's Security Affairs newsletter Round 594 (International Edition) rounds up the week's security headlines. Topics include attackers exploiting a critical Cisco FMC flaw to deploy Qilin ransomware, SonicWall mass exploitation linked to a UK council attack, multiple CISA KEV additions, Chrome zero-days used by four nation-state actors, a $320 million Liquid Network theft, and a Berlin ransomware data leak. It also covers AI security items such as agent sandbox failures and distillation campaigns by Chinese AI firms.

Security Affairs · 4d agoIndustry in the wildCVE-2026-42016CVE-2026-42018CVE-2026-82329+1 CVEs1

Best Open-Source Agent Harnesses for Local LLMs in 2026

A 2026 guide ranks 11 open-source agent harnesses, including OpenCode, Goose, Cline, and OpenHands, by local-LLM support, licensing, and safety controls.

The guide ranks 11 open-source LLM agent harnesses by OSI license, documented local runtimes, maintenance status, and safety controls, using GitHub data read September 18, 2026. OpenCode documents Ollama, LM Studio, and llama.cpp setups across 75+ providers; Pi offers a minimal four-tool harness and was acquired by Earendil in April 2026; Goose is Rust-based with 70+ MCP extensions under the Linux Foundation's Agentic AI Foundation. Cline defaults to per-action approvals, while OpenHands recommends Qwen3.6-35B-A3B with at least 24GB VRAM and 32,768-token context.

MarkTechPost · 4h agoAI tools & infra

Windows 11 24H2 Home and Pro reach end of support in October

Microsoft ends security updates for Windows 11 24H2 Home and Pro on October 13, 2026, urging users to upgrade to Windows 11 25H2.

Microsoft confirmed that Windows 11 24H2 Home and Pro editions and Windows 10 Enterprise LTSB 2016 reach end of updates on October 13, 2026, after which they stop receiving monthly security and preview updates. Windows 11 24H2 Enterprise and Education editions remain supported until October 2027, and unmanaged Home/Pro devices will automatically upgrade to Windows 11 25H2. Separately, Windows Server 2022 moves from mainstream to extended support on October 13, 2026, running until October 14, 2031.

BleepingComputerupdated · 1h agofirst · 1d agoAdvisory 3 sources1

Introducing Meta One: A Subscription Service With More Features and AI to Create, Connect, and Stand Out

Meta launches global Meta One subscriptions bundling Instagram, Facebook, WhatsApp Plus with expanded Meta AI and Muse media generation, priced $2.99-$499 monthly.

Meta introduced Meta One, a global subscription service with plans for individuals, creators, and businesses, launching with more than 50 features across Instagram, Facebook, WhatsApp, and Meta AI. Individual bundles Core ($7.99/month) and Premium ($19.99/month) combine the single-product Plus plans with expanded use of compute-intensive AI capabilities, including image/video generation powered by Muse models and Instagram's Restyle. Business tiers range from Essential ($14.99/month) to Expert ($149/month) and Max ($499/month), with expansion planned to Edits, AI glasses, and more.

Meta Newsroom · 2d agoAI industry

Give every teammate and agent the right level of access to your Workers

Cloudflare launches per-Worker granular access controls with four roles, enabling least-privilege access for teammates, AI agents, and CI/CD pipelines.

Cloudflare announced granular authorization for Workers, letting admins scope access to a single Worker instead of the whole account. Four new roles are available: Metadata Read-Only (observability without source code), Content Read-Only (read code without changes), Editor (deploy without delete), and Admin (full control of one Worker). Roles apply at Developer Platform, product, or resource level, can be attached to dashboard users or API tokens, and are available to all customers now, with plans to extend to D1, R2, and KV.

Cloudflare Blog · 3d agoTools

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

GitLab CVE-2026-85706 is a maximum-severity CVSS 10.0 path traversal flaw affecting Community and Enterprise Editions, risking supply chain compromise.

CVE-2026-85706 is a path traversal vulnerability with a CVSS score of 10.0 affecting GitLab Community Edition and Enterprise Edition instances. Exploitation could enable attackers to tamper with repositories, posing software supply chain risks. The report does not mention active exploitation.

Dark Readingupdated · 3d agofirst · 3d agoVulnerability 15 sourcesCVE-2026-857061

A Chosen Future Can Still Be Rewritten: Causal Writability in Video Models

Study shows video models often learn correct physics but fail to use it; low-dimensional 'causal writability' edits can restore correct motion.

The paper demonstrates 'causal writability' in video generation models: physically correct motion remains available inside the model even when the model outputs incorrect motion. In a red/blue mass oscillation setup, a low-dimensional edit predicted from simple physical variables restores correct fast motion, with a sharp depth boundary marking commitment. Early causal writability predicts which training errors later get corrected, and both writability and closure reproduce in a pretrained 1.3B video model.

arXiv cs.AI / cs.LG / cs.CL · 3d agoAI research

Disentangling Representation Evolution in Transformers through Directional Decomposition

Decomposes transformer representation updates into parallel and perpendicular components, linking geometry to editing robustness and better pretraining.

The paper decomposes learned transformer updates into parallel and perpendicular components relative to the hidden state, finding substantial parallel components beyond the residual identity path across pretrained models. Targeted edits reveal exclude-self value-space parallel manipulation is more robust than residual-space or perpendicular alternatives, and perpendicular error separates compression methods more clearly. Applying full-aggregate parallel suppression during from-scratch pretraining lowers validation loss and improves downstream averages, with the value-space variant strongest. Code is released on GitHub.

arXiv cs.AI / cs.LG / cs.CL · 3d agoAI research 2 sources1

U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

CISA added four actively exploited GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to the KEV catalog with imminent deadlines.

CISA added CVE-2026-42016 and CVE-2026-42018 (JFrog Artifactory), CVE-2026-84869 (ConnectWise ScreenConnect), and CVE-2026-85706 (GitLab, CVSS 10.0) to its KEV catalog. Artifactory flaws are being chained with CVE-2026-82329 in attacks observed August 15 to September 8, taking over self-hosted servers, creating persistent administrator accounts, and installing backdoors. ScreenConnect CVE-2026-84869 allows unauthorized file transfer and execution during remote sessions, linked by Huntress to malicious VBScript deliveries, and is fixed in version 26.6.5. GitLab's repository commits API path traversal exposes SSH keys, database credentials, deploy tokens, and CI/CD variables, with watchTowr already observing in-the-wild probes. Federal agencies must patch GitLab and ScreenConnect flaws by September 14, 2026, and Artifactory flaws by September 25, 2026.

Security Affairs · 4d agoExploit / PoC in the wild 2 sourcesCVE-2026-42016CVE-2026-42018CVE-2026-84869+3 CVEs6

Disentangling Representation Evolution in Transformers through Directional Decomposition

Researchers decompose transformer updates into parallel and perpendicular components, linking representation geometry to editing robustness, compression diagnosis, and training interventions.

The paper studies transformer representation evolution as functional geometry, decomposing learned updates into parallel and perpendicular components across attention/MLP and value-aggregation spaces. Targeted edits reveal a space-dependent asymmetry: exclude-self value-space parallel manipulation is markedly more robust than residual-space and perpendicular counterparts. Full-aggregate parallel suppression during from-scratch pretraining lowers validation-loss trajectories and improves downstream averages, with the value-space variant strongest. Code is released on GitHub.

Hugging Face daily papersupdated · 3d agofirst · 4d agoAI research 2 sources

Don't Mask the Environment: Observation Supervision Changes How Agents Explore Under RL

ActObs supervises observation tokens during SFT, improving GRPO-trained agent pass@k on Terminal-Bench 2.0 and cross-domain code editing for Qwen3 models.

The paper introduces ActObs, an SFT variant that adds prediction loss on environment observation tokens already present in agent trajectories. After GRPO on Qwen3-4B, ActObs achieves higher pass@k at every sampling budget on Terminal-Bench 2.0 than action-only SFT. On Qwen3-8B it trades some pass@1 reliability for higher pass@k (+3.4 pp at pass@16) and improves cross-domain code editing on aider-polyglot (+4.2 pp pass@1 at 4B). Analysis shows action and observation gradients become orthogonal, preserving environment prediction and exploration for downstream RL.

arXiv cs.AI / cs.LG / cs.CL · 20h agoAI research 2 sources

Don't Mask the Environment: Observation Supervision Changes How Agents Explore Under RL

ActObs adds observation-token supervision to SFT, yielding higher pass@k for Qwen3 agents after GRPO on Terminal-Bench 2.0 and code editing.

Researchers introduce ActObs, an SFT variant that supervises environment-observation tokens in agent trajectories in addition to action tokens, without extra data, parameters, tokens, or forward passes. On Qwen3-4B, GRPO initialized from ActObs achieves higher pass@k at every sampling budget on Terminal-Bench 2.0, and on Qwen3-8B it trades some pass@1 for +3.4 pp at pass@16 while solving more distinct tasks. The benefit transfers to unseen code-editing tasks on aider-polyglot (+4.2 pp pass@1 at 4B scale). The authors trace the advantage to gradient analysis showing joint supervision preserves environment prediction and policy entropy, improving downstream RL exploration.

Hugging Face daily papersupdated · 20h agofirst · 1d agoAI research 2 sources

Claude comes for Gemini with its own take on Docs and Slides

Anthropic launched Claude Docs and Slides in beta and merged chats with Cowork into 'one Claude', challenging Google's Gemini-powered productivity tools.

Claude Docs and Slides launch in beta, letting users create, edit, share, and collaboratively comment on documents and presentations from any chat, with export options. Anthropic also merged regular chats and Cowork into 'one Claude', bringing Cowork, Design, and Artifacts into a single interface. The update closes ground with Google, which has expanded Gemini inside Docs, Sheets, and Slides, and rolls out to Pro and Max users first across web, desktop, and mobile.

The Verge · AIupdated · 1d agofirst · 1d agoAI industry 5 sources

Drupal core - Moderately critical - Third-party libraries - SA-CORE-2026-013

Drupal issues moderately critical advisory for XSS in bundled CKEditor affecting content editors; fixed versions released, exploitation theoretical.

Drupal published SA-CORE-2026-013, rated moderately critical (13/25), covering an XSS vulnerability in the CKEditor library used for WYSIWYG editing. An attacker able to create or edit content, even without direct CKEditor access, could exploit it to target users with WYSIWYG permissions. Affected versions include Drupal core 10.5.x, 11.0.x and 11.4.x below 11.4.7, and updated releases are available. Exploitation is rated theoretical.

Drupal Security Advisories · 1d agoAdvisory

12 Best CASB Solutions Compared (2026): Features & Pricing

GBHackers' 2026 buyer's guide compares 12 CASB-capable vendors, arguing standalone CASB pricing has dissolved into per-user SSE subscriptions.

The article evaluates twelve CASB-capable platforms including Microsoft Defender for Cloud Apps, Palo Alto Networks' Prisma Access CASB, Netskope, iboss, Forcepoint ONE (Bitglass), Trend Micro Cloud App Security, and Skyhigh Security. It frames purchasing around SSE bundle economics, noting Defender for Cloud Apps ships inside Microsoft 365 E5 while Netskope, Zscaler, and Skyhigh price CASB into per-user SSE tiers. It also flags Saviynt, common on legacy roundups, as an IGA vendor rather than a true CASB.

GBHackers · 2d agoIndustry 3 sources

Cartesian – AI 3D Modeling for Design

Formas launches Cartesian, an AI 3D modeling tool for architecture and product design with natural-language editing and CAD exports.

Cartesian by Formas is an AI-powered 3D modeling tool aimed at architecture and product design that converts photos, rough plans, sketches, and scans into precise geometry. Users can edit models conversationally while explicitly preserved elements stay unchanged. It creates real solids and NURBS geometry and exports to AutoCAD DWG, Rhino 3DM, and SketchUp SKP, with BIM IFC support planned, removing the need for a separate desktop CAD license.

Hacker News · AI · 2d agoAI industryHN 42↑ · 32 comments

Présentation de Meta One : Un service d’abonnement offrant davantage de fonctionnalités et d’IA pour créer, se connecter et se démarquer

Meta launches Meta One subscription bundles with expanded Meta AI usage and creator/business tools, already at 15 million subscriptions and trials.

Meta launched Meta One, a new subscription service across Instagram, Facebook, WhatsApp and Meta AI with more than 50 features and 15 million subscriptions and trials to date. Core and Premium bundles add heavier use of compute-intensive AI features, including image creation/editing and video generation via the Muse models, plus tools like Restyle on Instagram. Pricing starts at EUR 2.49/month for single-product plans, EUR 6.99 for bundled consumer plans and EUR 16.99 for creator/business bundles; the core Meta AI experience remains free.

Meta Newsroom · 2d agoAI industry

What Breaks Local Watermarks? A Robustness Benchmark for Local Invisible Image Watermarking

First systematic robustness benchmark of five local invisible image watermarking methods across 55 transformations finds all are vulnerable, with inpainting and geometric misalignment completely breaking payload…

The paper presents the first systematic robustness benchmark for local invisible image watermarks, covering 55 image transformations across signal distortions, coordinate alignment changes, indirect local edits, and direct watermark edits. It evaluates five methods: MaskWM, WAM, OmniGuard, TrustMark, and PixelSeal, all supporting localization natively or with minimal adaptation. Results show every method is vulnerable to some transformation; MaskWM offers the strongest payload recovery and localization but the lowest clean-image quality, and synchronization further improves its recovery under geometric transformations. Geometric misalignment and generative local edits such as inpainting and outpainting can completely impair payload recovery, while signal distortions are often tolerated.

arXiv cs.CR · 3d agoResearch

12 Best Enterprise Browsers Compared (2026): Features & Pricing

2026 comparison of twelve enterprise browsers ranks Island and Palo Alto Talon as purpose-built leaders, with Chrome Enterprise and Edge free or bundled.

Guide compares twelve enterprise browser options across three models: purpose-built secure browsers (Island, Talon, Surf), layered controls on existing browsers (Chrome Enterprise, Edge for Business, LayerX, Seraphic), and streamed/isolated browsers (Kasm). Island and Palo Alto's Prisma Access Browser lead the purpose-built category for BYOD and contractor DLP. It also notes Mammoth Cyber has ceased operations.

GBHackers · 3d agoTools1

MIT creates method to force AI to comply with safety rules

MIT researchers published HardFlow, a method enforcing hard safety constraints on flow-matching generative models' final outputs without retraining.

MIT researchers led by Zeyang Li and Navid Azizan developed HardFlow, a trajectory-optimization method that enforces strict, non-negotiable constraints on flow-matching generative models by checking rule satisfaction only at the final generation step. Published in IEEE TPAMI, it outperformed six rival projection and guidance methods on four simulated benchmarks including D3IL robotic manipulation, Maze2D, physical process control, and image editing. All results are simulation-only, with no independent reproduction yet reported.

Hacker News · security · 3d agoAI researchHN 24↑ · 25 comments

Emacs arbitrary code execution: incomplete fix for CVE-2024-53920

Incomplete fix for Emacs CVE-2024-53920 allows arbitrary code execution when viewing or editing untrusted files in non-Lisp modes like Perl flymake.

Bas Alberts of GitHub Security Lab discovered that the patch for CVE-2024-53920, an arbitrary code execution flaw in Emacs, was incomplete. Code execution remains possible when viewing or editing untrusted text files in modes other than Emacs Lisp mode, for example Perl files with flymake mode enabled. All Emacs versions affected by the original CVE remain affected by the incomplete fix.

oss-security · 3d agoVulnerabilityCVE-2024-53920

Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration

Researchers introduce Decoy Direction Optimization, a cheap weight-editing defense that blinds refusal-direction ablation attacks against open-weight LLM safety guardrails.

Refusal Feature Ablation bypasses safety guardrails in open-weight LLMs by projecting out a linear refusal direction, often with high attack success rates. Decoy Direction Optimization injects a high-magnitude nonlinear decoy into MLP neurons so attackers' contrastive estimators ablate a harmless orthogonal feature instead. Evaluated across six model families, DDO keeps ASR below 10% under standard RFA and on Llama-3-8B-Instruct reduces Heretic weight-level attack ASR from 88.7% to 18%. It costs 30 to 450 times less per configuration than trained defense baselines.

Hugging Face daily papers · 4d agoAI safety & security

LynnReal-Omni: Native multi-modal Video Generation for Agentic Visual Workflows

LynnReal-Omni unifies controllable video generation tasks in a 32B multimodal diffusion transformer, with a 27B Flash variant rendering 540p clips in 377 ms.

LynnReal-Omni is a native multimodal video generation framework built on a 32B shared multimodal diffusion transformer unifying text-to-video, image-conditioned generation, reference guidance, structural control, editing, restoration and long-video generation, accepting heterogeneous inputs like 3D renders and game recordings for agentic visual workflows. A dedicated 27B Flash model enables real-time rendering, producing a 22-frame 540p video in 377 ms on one H100 versus 843 ms for the full model. The work introduces a curated multi-shot audiovisual data pipeline and MSAVP, a 100-prompt, 20-metric evaluation design covering instruction following, plausibility, visual quality, temporal behavior and audio coordination.

Hugging Face daily papers · 4d agoAI research1

AWS Introduces Pizza Bot: An Open Source Inbox for Background AI Agents

AWS open-sourced Pizza Bot, a self-hosted inbox app for background AI agents with approval gating and multi-provider model support.

AWS released Pizza Bot under Apache 2.0 after earlier versions served over 2,000 Amazon employees for meeting prep, email drafting, and research. The app provides macOS, Windows, and Linux desktop builds plus browser and terminal clients talking to a Hono API server, with LangGraph/DeepAgents checkpoints preserving thread state and approval pauses. It supports Amazon Bedrock, Anthropic, Google Gemini, OpenAI, OpenRouter, and Ollama, exposes external tools via MCP servers, and lets skill authors gate actions behind approve/edit/reject flows.

MarkTechPost · 5d agoAI tools & infra1

Context Engineering Inside the Harness: 4 Mechanisms That Beat Context Overflow and Goal Loss on Long-Horizon Tasks

Survey of four harness mechanisms—context budgeting, compaction, todo-state, and memory—that keep long-horizon LLM agents on task across 200+ tool calls.

The article details how agent harnesses, not larger context windows, solve context overflow and goal loss on long-horizon tasks, citing Chroma's Context Rot report showing 18 LLMs (GPT-4.1, Claude 4, Gemini 2.5, Qwen3) degrade on long inputs. Concrete implementations include LangChain Deep Agents offloading tool responses over 20,000 tokens to the filesystem and truncating old tool calls at 85% window usage, and Claude Code capping auto memory at 25KB while re-reading the 5 most recently modified files after compaction. OpenAI's Responses API now offers server-side compaction via context_management with a standalone /responses/compact endpoint, which Codex uses for long-running coding tasks. Manus reports a roughly 100:1 input-to-output token ratio per ~50-tool-call task, motivating todo.md state recitation to prevent goal drift.

MarkTechPost · 5d agoAI research2

Perplexity trusts GPT-6 Astra with end-to-end systems

Perplexity uses OpenAI's GPT-6 Astra to craft communications, edit production systems, and generate end-to-end automated tests for its search engine.

OpenAI published a customer case study describing how Perplexity, the AI-powered answer engine, uses the GPT-6 Astra model via API. Cofounder and Chief Strategy Officer Johnny Ho says the model can now craft communications, edit real-world systems, and monitor production software in ways earlier generations could not. Perplexity also asks Astra to build small test programs that stand in for external services, such as language model APIs and connectors, to verify applications end to end. Ho claims the team checks on the model's work much less frequently than with previous models.

OpenAI News · 6d agoAI industry

GitLab’s critical flaw is already drawing internet-wide probes

GitLab patches two critical flaws (CVE-2026-85706 CVSS 10.0, CVE-2026-87719) as WatchTowr observes internet-wide probing of the unauthenticated file-read bug.

GitLab released emergency patches for two high-severity flaws in Community and Enterprise Editions, urging self-managed operators to upgrade immediately while saying its hosted and Dedicated offerings are fixed or unaffected. CVE-2026-85706 (CVSS 10.0) is a path traversal in the repository commits interface that lets unauthenticated attackers read any file on the server and affects releases 18.7 through 19.1.8 plus the 19.2 and 19.3 lines before patching. CVE-2026-87719 (CVSS 9.9, Enterprise Edition only) lets a logged-in Duo Chat user hide a command in a request that triggers Advanced Search settings and password disclosure. WatchTowr Labs reported it is already watching probes that can trigger the path traversal flaw in a single HTTP request, though CISA had not added either issue to the KEV list as of Friday afternoon.

CyberScoopupdated · 3d agofirst · 6d agoVulnerability in the wild 15 sourcesCVE-2026-85706CVE-2026-87719

Microsoft AI CEO says AI threats are real, and Anthropic is making it worse

Microsoft AI CEO Mustafa Suleyman discusses alignment and containment in a Decoder interview, criticizing Anthropic's model-welfare philosophy while promoting Microsoft's code of conduct.

Microsoft AI CEO Mustafa Suleyman appeared on The Verge's Decoder podcast after the company published its 37-page 'Humanist AI Code of Conduct' and a companion essay criticizing Anthropic's philosophy on AI consciousness and model welfare. He argued that containment and limiting agency must come before alignment, warning that unguarded models have demonstrated impressive and 'quite scary' hacking capabilities. He claimed models have become more steerable and controllable over the past three to four years and discussed the broader AI regulation debate.

The Verge · AIupdated · 18h agofirst · 1d agoAI safety & security 2 sources1

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

ISC released BIND 9.20.29 and 9.21.26 fixing 14 flaws, including an unauthenticated DoH crash (CVE-2026-77692) and DNSSEC cache poisoning issues; no exploitation reported.

ISC patched fourteen flaws in BIND 9 on September 16, releasing 9.20.29 (stable) and 9.21.26 (development). CVE-2026-77692 (CVSS 7.5) lets an unauthenticated sender crash any server answering DNS-over-HTTPS with a single invalid SIG(0) request, and CVE-2026-76163 crashes named via TKEY queries; other High-severity flaws crash resolvers on default configurations or exhaust CPU and memory. Two DNSSEC flaws, CVE-2026-19941 and CVE-2026-77119, allow cache poisoning with forged denial or unsigned answers. ISC lists no workarounds, says none of the flaws are known to be exploited, and warns that the EOL 9.18 branch (through 9.18.50) will receive no fixes for twelve of them.

The Hacker News · 1d agoVulnerabilityCVE-2026-77692CVE-2026-76163CVE-2026-19667+9 CVEs

Oracle Corporation security advisory (AV26-929)

CCCS relays Oracle's September 2026 Critical Patch Update fixing vulnerabilities across WebLogic, Database, E-Business Suite, PeopleSoft, Siebel, and dozens more products.

The Canadian Centre for Cyber Security (AV26-929) relays Oracle's September 2026 Critical Security Patch Update, which addresses vulnerabilities in dozens of product families as of September 15, 2026. Affected products include Oracle WebLogic Server, Database Server, E-Business Suite, Fusion Middleware, PeopleSoft Enterprise, Siebel Applications, GraalVM, VirtualBox, Coherence, and numerous banking and communications suites. The bulletin lists no CVE identifiers and encourages administrators to review Oracle's advisory and apply patches.

Canadian Centre for Cyber Security · 1d agoAdvisory 3 sources

Anthropic merges Claude chat and Cowork in one interface

Anthropic unified Claude chat, Cowork, and Artifacts into one auto-routing interface, adding Docs and Slides creation with PDF and PowerPoint export.

Anthropic merged the Claude chat and Cowork front-ends so one window routes requests automatically, ending customer confusion over which tab to use. The update adds Claude Docs and Slides with PDF and PowerPoint export, collaborative sections, and comments, and makes Claude Design, launched in April, available anywhere in Claude. It rolls out to Pro and Max plans on web, desktop, and mobile over coming weeks, with Free and Team tiers later, following a recent Cowork memory upgrade.

TechCrunch · AIupdated · 1d agofirst · 1d agoAI industry 5 sources

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

JFrog disclosed CVE-2026-90894, a 7.8-rated local privilege escalation in Parallels Desktop for Mac, patched only in version 27, which Intel Macs cannot install.

JFrog researcher Yuval Moravchick disclosed CVE-2026-90894 (dubbed ParaShells, CVSS 7.8), a local privilege escalation in Parallels Desktop for Mac that lets non-admin users run code as root. The root-level prl_disp_service listens on a world-writable socket, and argument injection into a tar command via QProcess::splitCommand and the --use-compress-program option yields code execution as root, demonstrated on Parallels Desktop 26.4.0 build 57513 on Apple silicon. The fix appears in version 27.0.0, but Parallels Desktop 27 requires Apple silicon, leaving Intel Macs on the 26.x line with no build JFrog describes as fixed. No exploitation in the wild has been reported and Parallels has not published a statement.

The Hacker News · 2d agoVulnerability 4 sourcesCVE-2026-908942

VectraRAT Malware-as-a-Service Lets Hackers Bypass UAC and Hijack Windows Systems

New VectraRAT malware-as-a-service at $250/month combines RAT capabilities, credential theft, clipboard hijacking, and a UACME-based UAC bypass; 38 victims observed.

VectraRAT is a previously undocumented MaaS platform with a Go-based VectraHub Linux C2 server embedding a Vue3 operator panel and a C++ Windows implant, rented from $250/month and linked to the aliases Vectra and Nyxel. It communicates over TCP port 3308 via a proprietary MessagePack protocol, steals browser and file-based credentials, and abuses UACME method 41 with debug-object handle hijacking via winver.exe and computerdefaults.exe. SOCRadar identified 38 live victim sessions in one week, 48% on corporate Windows editions, with delivery via the Amadey loader and ClickFix pages impersonating TurboTax.

GBHackersupdated · 1d agofirst · 2d agoMalware in the wild 3 sources

Apple Reference Image: A New Approach for Verified Photography

Apple introduces Reference Image, hardware-backed verifiable photography on iPhone 18 Pro using sensor signing and Private Cloud Compute to counter AI-generated fakes.

Apple announced Reference Image, an opt-in camera mode debuting on the main sensor of iPhone 18 Pro and iPhone 18 Pro Max that produces securely timestamped, verifiable photographs. The design splits into two phases: a secure digital negative created by cryptographically signing pixel data at the sensor immediately after capture (preventing injection or tampering), then developing that negative into a reference image. Private Cloud Compute handles processing without exposing image contents to anyone, including Apple, and fraudulent reference images can be revoked without revealing the photographer's identity. Apple positions the system as stronger than C2PA-based approaches, which sign metadata after capture, are vulnerable to editing-chain compromise, and can tie images to a device or individual.

Hacker News · security · 2d agoResearchHN 25↑ · 18 comments