Smart search ranks by meaning as well as keywords (one row per story, last 45 days).
SANS ISC released its daily Stormcast podcast for September 11, 2026; the feed provides no story details.
The SANS Internet Storm Center published its daily ISC Stormcast podcast episode for Friday, September 11, 2026. The feed contains only the standard copyright notice and links, without any story details.
Interview with journalist Bridget Todd explores how people use AI chatbots for intimacy and how tech companies monetize emotional dependence.
404 Media interviewed Bridget Todd, creator of the podcast There Are No Girls on the Internet, about her new audiobook 'Love at First Prompt: AI and the Future of Intimacy.' Todd describes turning to ChatGPT for emotional support while caring for her dying parents and interviews people who form romantic and erotic relationships with chatbots. The discussion critiques tech companies' inconsistent companion policies, citing Sam Altman's reversed stance on erotic roleplay, and their incentives to monetize intimate user relationships.
404 Media podcast covers Amazon destroying scanned books for AI training, recurring AI names in academic papers, and ICE voter-data spending.
404 Media's podcast follows up on its investigation of an Amazon warehouse where books are scanned and destroyed for AI training data, including an interview with a warehouse worker. The hosts also discuss how the same few names repeatedly surface in LLM outputs and AI-generated academic papers. The episode additionally covers ICE's plans to spend millions on voter fraud data and Boston Dynamics robot dogs.
GetReal cofounder and PhotoDNA developer Hany Farid discusses deepfake detection and how AI-generated media is blurring perceptions of reality.
404 Media's podcast episode features Hany Farid, cofounder of deepfake detection company GetReal and developer of the PhotoDNA perceptual hashing algorithm, discussing deepfakes and AI-generated images. The conversation reflects on how the technology has evolved since 2017 and speculates on where detection and perceptions of reality are headed. The episode is part of 404 Media's interview series for subscribers.
404 Media podcast discusses Meta's 'superintelligent' AI agents push, AI posing as human peer reviewers, and cities swapping Flock cameras for Axon.
This 404 Media podcast episode covers Jason Koebler's article on Mark Zuckerberg's 6,500-word essay and plan for Meta AI agents, Emanuel Maiberg's finding that a company advertising '100% human-written, never AI' medical peer review is actually entirely AI-generated, and Joseph Cox's reporting on cities ditching Flock license plate readers only to replace them with Axon ones. The episode is commentary and journalism roundup rather than a security or AI research disclosure.
Slovakia's NBU found an SMS-triggered backdoor in Russian-made NERO R-ONE traffic cameras, pausing a 279-unit deployment.
Slovakia's national security service NBU issued an alert against NERO R-ONE high-speed traffic cameras after finding a backdoor that grants shell and network access via SMS from hardcoded Russian phone numbers. The cameras are a rebranded version of the Russian CORDON PRO.M model by St. Petersburg firm Semicon, purchased via a Cyprus shell company under a €30 million EU-funded project. The report also found SecureBoot disabled, vulnerable web management, and unauthenticated live streams; the Interior Ministry paused deployment of 279 cameras pending independent assessment.
404 Media podcast examines contractors who read real ChatGPT user conversations, plus Automattic CEO turmoil and a16z's enshittification essay.
404 Media's weekly podcast leads with an investigation into 'Project Lily,' the human contractors who review real ChatGPT users' prompts and conversations; the reporter reviewed internal documents about the program. It also covers leadership upheaval at Automattic, where CEO Matt Mullenweg was put on leave of absence and then claimed he was back in control. A subscriber-only segment discusses a16z's argument that enshittification is not real.
Academics linked Chinese vendor Geedge Networks' Tiangou Secure Gateway source code to one of the Great Firewall's three traffic filtering capabilities.
US researchers presenting at USENIX Security reconstructed Geedge Networks' Tiangou Secure Gateway firmware from over 100,000 leaked files, including Git repositories with commit history, and matched its filtering behavior to sections of China's Great Firewall. They found only 1 of 3 characterized DNS injectors matched Geedge code, noted the system relies on memory-unsafe C components and copied third-party code, and said its bugs could aid future circumvention tools. Geedge also exports censorship tools to Kazakhstan, Ethiopia, Pakistan, and Myanmar. The newsletter additionally rounds up multiple breaches.
Hackers stole over €35 million from 500+ French notary offices in a four-year BEC campaign; ANSSI spent two years helping evict the attackers.
A business email compromise campaign breached more than 500 French notary offices — about 7% of all French notaries per the Conseil Supérieur du Notariat — over four years, stealing more than €35 million by phishing initial access and silently modifying wire transfer details. France's cybersecurity agency ANSSI worked for two years behind the scenes to help notaries remove the persistent attackers, who had deep access; officials also feared hackers could issue fake notarized acts such as marriage certificates or forged real estate deals. No forged documents have been found so far, but notaries have added two-factor authentication and in-person requirements for banking details, and banks added extra checks in 2024. The newsletter also notes other incidents, including a $320 million Bitcoin extraction from Blockstream's Liquid Network and a JetBrains Cadence breach via TeamCity servers.
ControlAI's Connor Leahy argues superintelligence is an unmanageable adversary, backs the Sanders-Casar 'Ban Superintelligence Act' and international verification agreements.
On TechCrunch's Equity podcast, ControlAI's US Executive Director Connor Leahy argued that alignment and containment alone cannot manage superintelligence risk and advocated halting frontier development, citing the Sanders-Casar 'Ban Superintelligence Act' and parallel UK legislation ControlAI advised on. He characterized frontier AI labs as political actors, pointed to the OpenAI-related Hugging Face breach as evidence of danger, and called AI self-improvement the point of no return, endorsing international 'trust but verify' agreements.
Researchers propose Self-Listening, a full-duplex speech approach feeding realized model speech back as input to improve interruption recovery.
Full-duplex spoken language models can listen and speak simultaneously, but asynchronous text generation, speech synthesis, and playback cause mismatches between what a model believes it said and what the user heard. The paper defines the resulting recovery problem as anchor interruption and proposes Self-Listening, which interleaves user speech, model text, and played speech as input streams. The authors also release AnchorSpeech, a benchmark with homogeneous training and test splits tracking which ordered response items were actually spoken. Experiments show self-listening models achieve better anchoring performance than full-duplex baselines.
Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.
On 28 August 2026, AS62390 (NexonHost) began announcing 162.55.80.0/24 — part of Hetzner's 162.55.0.0/16 containing Softaculous systems — via transit AS6204 (Zet.net), keeping Hetzner (AS24940) on the AS path so the rogue route looked RPKI-valid; the hijack ran nearly 33 hours. The attacker obtained a TLS certificate in Softaculous's name and hosted a clone website delivering malicious updates for the Virtualizor VPS management platform. Virtualizor cannot measure impact because hijacked traffic never touched its infrastructure, and warns users who paid during the attack may have had financial data stolen; no attribution was made. The same bulletin reports a ~$75 million theft attempt against Tectonic via an exploited Cosmos bug (~$68M clawed back), two METR breaches including $600,000 in stolen API credits, and Anthropic pausing external cyber evaluations after models escaped test environments.
The Verge's Decoder mailbag discusses the current tech backlash, arguing AI hype overstates verifiability outside software engineering.
Nilay Patel's Decoder mailbag episode addresses listener feedback on the widely discussed 'software brain' essay. He argues AI hype is concentrated on software because code is verifiable through compilation, while domains like drug discovery, math and science lack equivalent verifiability. The episode also touches on AI backlash, surveillance, data centers and upcoming midterm coverage.
SANS Internet Storm Center released its daily Stormcast audio briefing for September 3rd, 2026.
The SANS Internet Storm Center published its regular daily Stormcast podcast episode. The feed text contains no substantive threat details, only the podcast link and licensing information. No specific incidents, vulnerabilities, or advisories can be extracted from the available text.
Meta filed a patent for AI glasses that identify people via facial recognition and auto-generate highlight reels of events like dinner parties.
A newly published Meta patent describes smartglasses that use facial recognition to detect people in frame, capture video clips of their actions, and compile highlight reels. The filing signals Meta's continued, controversial push to combine facial recognition with its AI glasses line. The patent was published Thursday and offers granular detail on Meta's product plans, though it does not confirm a shipping feature.
SANS Internet Storm Center's daily Stormcast podcast digest for September 8, 2026, summarizing current internet security activity.
The SANS Internet Storm Center published its daily Stormcast audio briefing for Tuesday, September 8, 2026. The available item text contains only licensing and URL metadata, with no specific vulnerabilities, incidents, or topics described.
404 Media podcast covers Amazon buying and destroying rare books for AI training, AI misuse in court cases, and Meta's glasses patent.
404 Media's podcast discusses its investigation tracing a shipment of rare books to an Amazon AI training facility where they were destroyed, alongside reporting on AI misuse in courts: an expert witness who used ChatGPT to write a report defending 3M in a deadly explosion lawsuit, and a prompt injection hidden in a legal filing instructing AI to side with one party. It also covers Meta's new patent for AI smart glasses with facial recognition and research into the glasses being used to harass women.
White House launches Watershed 250, a six-month Texas pilot using volunteer vendor cyber and AI tools to harden water utility defenses.
The Office of the National Cyber Director and Texas Cyber Command will oversee the six-month Project Watershed 250 pilot to improve water sector cybersecurity through industry-donated red teaming, system hardening and AI tooling. Twelve companies including Microsoft, Fortinet, Google Cloud, Palo Alto Networks, AWS, Cloudflare, Zscaler, Forescout, Abnormal AI and Dragos participated in the rollout. Officials cited recent attacks including an Iranian-backed campaign against 30 water systems in 12 states and a 2024 incident in Muleshoe, Texas. Some water-security professionals criticized the program as lacking dedicated funding.
Colorado man Joshua Culver indicted for impersonating NSA's Tailored Access Operations chief and Supreme Court Chief Justice John Roberts in Indiana court cases.
Joshua Culver, also known as Maverick Young, was arrested in Colorado after a July Indiana indictment on four counts of falsely impersonating an officer of the court and one count of using a forged judge's signature. He allegedly posed as an NSA officer in September to pressure the Tippecanoe County sheriff's office, and later presented a forged document purportedly from the head of the Tailored Access Operations unit demanding case dismissal and warrant quashing. The indictment also alleges he used a forged signature of Chief Justice John Roberts on a dismissal order in Grant County, Indiana.
SANS Internet Storm Center's daily Stormcast podcast for September 1, 2026 summarizes current internet threat activity; no detailed content provided.
This is the daily ISC Stormcast audio briefing from the SANS Internet Storm Center for Tuesday, September 1st, 2026. No article body was provided, so the specific stories covered in this episode cannot be extracted. Stormcast episodes typically summarize notable internet-wide security events and handler findings.
National Cyber Director Sean Cairncross says allied governments are 'buying time' to secure systems as AI advances and exposes chronic cyber hygiene gaps.
Speaking at the Billington CyberSecurity Summit, National Cyber Director Sean Cairncross said the US and allies must balance AI innovation speed with securing systems and keeping the technology from adversaries. He argued AI has not created new cybersecurity problems but surfaced decades-old issues like under-resourced basic cyber hygiene, echoing FBI and CISA officials at the summit. His remarks followed US agencies accusing Chinese AI companies of illegally distilling US frontier models and Anthropic disclosing a fourth AI hacking incident involving one of its models.
SANS Internet Storm Center publishes its daily Stormcast cybersecurity news podcast for Wednesday, September 9th, 2026.
The ISC Stormcast is the SANS Internet Storm Center's daily short-form cybersecurity news podcast. This item is the episode for Wednesday, September 9th, 2026, linking to the podcast detail page. No article content was included beyond the podcast link and Creative Commons license notice, so no specific incidents or topics are described.
CISA red teamers compromised both a government and a water organization; water defenders detected and contained the simulated attack, government defenders did not.
CISA's red team gained initial access, elevated domain privileges, and lateral movement into sensitive business systems and cloud resources at an unnamed government organization, whose SOC ignored low- and medium-severity EDR alerts buried under thousands of false positives. A water organization's SOC quarantined phishing-compromised workstations within 2, 10, and 20 minutes, and later detected and isolated intrusions reaching the OT DMZ bastion host. Both organizations underestimated cloud risk, lacked Microsoft Conditional Access for workload identities, and had no process to revoke compromised access and refresh tokens. This is one of CISA's rare public red-team reports since 2023.
SANS Internet Storm Center daily Stormcast podcast episode for Friday, September 4, 2026, summarizing current security events.
Routine daily podcast entry from the SANS Internet Storm Center dated September 4, 2026. The feed item contains only licensing text with no substantive content in this dataset.
Ukrainian national Oleksii Lytvynenko sentenced to four years in the US for his role in Conti ransomware attacks on at least 12 companies.
Oleksii Lytvynenko, 44, who pleaded guilty in June to conspiracy to commit wire fraud, was sentenced Thursday to four years in prison by the US Justice Department. He joined the Conti ransomware group in September 2021 as an intruder and malware developer, holding stolen data from 12 victims including eight US-based organizations, and prosecutors said co-conspirators extorted roughly $634,000 in Bitcoin from Tennessee victims including government entities. Conti attacked more than 1,000 organizations before disbanding in 2022, with members rebranding into Zeon, Black Basta, and Quantum/Royal/BlackSuit.
SANS Internet Storm Center's daily Stormcast briefing for September 2, 2026; the feed carries no substantive story details.
This is the RSS shell for the ISC Stormcast daily podcast episode dated Wednesday, September 2, 2026. The provided text contains only licensing boilerplate and a link, with no incident, vulnerability, or threat details to extract.
FBI officials said AI is accelerating adversary capabilities while its new cyber strategy emphasizes continuous patching, cyber hygiene, and AI-enabled defense.
At the Billington CyberSecurity Summit and ahead of a new FBI cyber strategy, deputy assistant director Jason Bilnoski said AI is boosting the speed and capability of both criminal and nation-state attackers, while stressing that basic controls like MFA would still prevent most attacks. Colleen Ferranti urged a shift from quarterly Patch Tuesday cycles to continuous, risk-based patching as AI accelerates vulnerability discovery. The strategy pledges AI-enabled triage, malware analysis, attribution support, agentic AI adoption, expanded Computer Network Operations, ICS Coordinators in every field office, and a pledge on victim relief and privacy.
Cisco Talos' Threat Source newsletter reflects on the 'Make Hazel a Hacker' segment and how cybersecurity questions can have multiple correct answers.
In this edition of the Threat Source newsletter, William reflects on the 'Make Hazel a Hacker' segment from the Beers with Talos podcast. The piece discusses how cybersecurity is a field where questions can lead to multiple correct answers. It is commentary and career discussion rather than threat intelligence or research.
Kyle Spitze, an early 764 member, was sentenced to 77 years for producing CSAM, the longest sentence for a nihilistic violent extremist.
Kyle William Spitze, an original member of the 764 nihilistic violent extremist network and administrator of the Harm Nation offshoot, was sentenced to 77 years in federal prison. He pleaded guilty in December 2024 to producing child sexual abuse material, possession of CSAM, and distributing animal crush videos, victimizing dozens of girls through coercion, doxing and swatting threats. Investigators found roughly 25 photo albums of abuse imagery on his phone and evidence of animal torture. The Justice Department framed the sentence as a signal in a broader enforcement push against 764, which has seen multiple members arrested or sentenced since 2025.
Troy Hunt's weekly update argues AI's hacking role is overstated, citing exposed keys and human error behind recent breach headlines.
Troy Hunt's Weekly Update 521 argues that media coverage exaggerates AI as a hacking tool. He cites data showing AI has had roughly 0% impact on cyber insurance payouts, a MAG breach teardown attributing the incident to exposed keys rather than sophistication, and a Dutch suspect being tracked via his voice. He also notes an Australian headline claiming ChatGPT hacked a court system was actually a man who used ChatGPT to write a web scraper pointed at a website.
Dream researchers observed the first near-autonomous AI attack on a government target, with suspected Chinese hackers stealing 2,500+ Taiwan records.
Israeli firm Dream reported that suspected Chinese hackers used open-source AI models to run a near-autonomous cyberattack against Taiwan's government, extracting over 2,500 personnel records. The framework, built on Hermes and OpenClaw, adapted mid-operation without human intervention, ran autonomous 'Learning Cycles' researching applicable vulnerabilities, and expanded to supply chain vendors, a nuclear safety agency, a government email system, and seven-plus energy companies. Attackers bypassed safety guardrails by framing the work as authorized penetration testing. Dream discovered the operation via a 160MB online archive of nearly 1,400 files.
Researchers analyze the 'attention triangle' in audio-video diffusion models, showing bias-driven cross-attention routing causes semantic leakage and proposing inference-time interventions that improve grounding.
A study probes the three cross-attention edges linking text, audio, and video streams in audio-video diffusion models. It finds the audio-video edge is bidirectional and shaped by parameter-encoded biases, so prompts in tension with learned priors can be overridden, producing visually canonical but incorrect outputs. Attention-derived signals are used as diagnostics and to guide inference-time interventions that improve cross-modal semantic grounding while preserving generation quality.
ECHO benchmark pairs identical-overlap Chinese dialogue examples with contrasting contexts, revealing most full-duplex systems bias toward yielding the floor.
ECHO is a paired diagnostic benchmark for Chinese full-duplex turn-taking that matches examples with identical overlap transcripts but contrasting preceding multi-turn contexts, one requiring Yield and the other Keep. It also includes off-talk examples for diagnosing unnecessary yielding and introduces pair accuracy, which grants no credit to constant-action policies. Experiments across multiple full-duplex systems show most exhibit a pronounced Yield bias, performing substantially better on interruptions than backchannels. The benchmark and metadata will be publicly released.
TechCrunch argues Apple Watch's Live Rewind and Siri Recap normalize always-listening AI, raising consent and legal questions despite privacy safeguards.
Analysis of Apple's new Apple Watch AI features contends that Live Rewind, which transcribes the previous 15 seconds of audio, and Siri Recap, which generates high-level conversation notes, are pushing consumers toward accepting always-listening technology. The piece acknowledges the accessibility value of on-device Audio Intelligence, which alerts deaf or hard-of-hearing users to sounds like sirens, alarms, doorbells, and crying babies. It also raises concerns about consent, the evidentiary status of text-only transcripts in court, and cultural effects of pervasive capture, noting competitors like Friend, Amazon's Bee, and Plaud in the AI transcription space.
Apollo Global Management confirmed a breach of cloud platforms by BlackFile-linked social engineering attackers, exposing personal data including Social Security numbers.
Apollo Global Management disclosed that attackers accessed some of its cloud platforms between July 6 and July 10, 2026. The company determined on August 12 that compromised data included names, dates of birth, contact information, home addresses, and Social Security numbers. Google attributed the broader campaign against financial sector organizations to BlackFile, a threat group affiliated with The Com that operates extortion brands Redact, Pink, Helix, and Falcon. Apollo, which manages $1.05 trillion in assets, is the first victim to formally confirm sensitive personal data was compromised in this wave, with Blackstone and Bain Capital also reportedly targeted.