Search: “Instinct”

9 stories in the last 7d

Meta's agentic AI app Muse ranked No. 2 on the US iOS charts with 83,000+ downloads, trailing Threads and ChatGPT launch pace.

Sensor Tower data shows Muse was downloaded over 83,000 times on iOS in the US, climbing from 4th to 2nd on the App Store, but below Threads' 4.3 million launch-day downloads and ChatGPT's 500,000 first-week installs. The Android version ranks only No. 338 in the Productivity category on Google Play. Muse launched days after Meta's $18 billion multistate settlement over social media consumer harms. Rival agent Instinct, valued at $2.5 billion with $350 million available, recently added Stripe and 1Password integrations.

TechCrunch · AIupdated Sep 12, 20:00 UTC · 4d agofirst Sep 10, 19:50 UTC · 6d agoAI industry 11 sources1

12 Best Ransomware Protection Solutions Compared (2026): Features & Pricing

GBHackers compares 12 ransomware protection solutions for 2026, recommending layered stacks of EDR prevention, managed detection, containment, and guaranteed recovery.

The editorial comparison argues no single product stops ransomware, recommending a layered strategy across prevention, early detection, blast-radius containment, and clean recovery. CrowdStrike and SentinelOne are named best-in-class EDR, Huntress and Sophos MDR for managed 24/7 coverage, ColorTokens for microsegmentation containment, and Rubrik and Acronis for guaranteed recovery. The guide notes ransomware is now professionalized with double extortion and encryption sprints measured in minutes.

GBHackersupdated Sep 16, 09:52 UTC · 18h agofirst Sep 11, 07:18 UTC · 5d agoIndustry 14 sources1

Most Fraudulent Hires Receive Credentials Before Detection

HYPR report finds 42% of fraudulent hires pass screening and receive corporate credentials, averaging 5.73 days of unmonitored network access before detection.

A HYPR study of 500 US HR executives found 42% of fraudulent candidates pass pre-hire screening and get hired, with only 3% detected on their hire day and 20% remaining undetected up to three weeks. This gives fraudulent hires an average of 5.73 days of unmonitored corporate network access, and 98% of surveyed executives said they had experienced candidate fraud firsthand. The report follows a September 9 CISA update to its Insider Threat Mitigation Guide warning that malicious actors use AI tools to obtain remote IT jobs, a tactic long used by North Korean actors for data theft and extortion.

Infosecurity MagazineSep 15, 15:15 UTC · 1d agoPhishing & fraud

What Zero-Day Response Should Be in the Post-Mythos Era

Picus Security outlines a zero-day response playbook where defenders simulate exploit technique chains before public PoCs exist.

The article uses PaperCut NG/MF's August incident — exploitation in the wild before any patch, with the first emergency fix bypassed the same day and a third landing September 1 — as the template for AI-accelerated vulnerability response. It walks through a hypothetical CVE-2026-1001 (explicitly made up) to argue defenders should map CVEs to ATT&CK technique chains and simulate them against NGFW, WAF, EDR, endpoint hardening, and SIEM controls within minutes of disclosure. It notes disclosure-to-exploitation time has fallen from 21.5 days to hours.

BleepingComputerSep 15, 13:45 UTC · 1d agoResearch in the wildCVE-2026-1001

The Rise of the Forward Deployed Engineer — and How To Do the Job Right

Palantir veteran Vinoo Ganesh traces the forward deployed engineer role and shares practices for building effective FDE teams.

Kepler CEO and former Palantir forward deployed engineer Vinoo Ganesh argues that labs, startups, and PE firms hire FDEs without a shared definition of the role. He recounts Palantir's Project Frontline rotation, which trained about 250 software engineers as FDEs, many now leading forward deployed teams at OpenAI, Anthropic, xAI, and Anduril. A 2013 failure of the Phoenix transaction store at a bank, where real-world data gaps caused roughly 2.3 million keyspaces and an out-of-memory crash, illustrates why FDEs must own the gap between design and production reality. At Kepler he places the FDE function inside product rather than sales.

Latent SpaceSep 12, 15:01 UTC · 4d agoAI industry 4 sources1

Ex-Deepmind VP Vinyals says AI self-improvement is coming but won't trigger an intelligence explosion

Ex-DeepMind research VP Oriol Vinyals says recursive self-improvement is coming but slow, and co-founds Discovery Loop with Jeff Dean to automate research.

Oriol Vinyals, former VP of Research at Google DeepMind who worked on AlphaStar, AlphaCode, and Gemini, argued at Agentic AI Summit 2026 that recursive self-improvement will progress gradually without an intelligence explosion. He identifies idea generation ('research taste') and evaluation as the two biggest bottlenecks, noting benchmarks like SWE-Bench Pro and ML-Bench mostly test the already-working steps and suffer from overfitting and scheming. He is co-founding Discovery Loop with Jeff Dean as CEO, Sanjay Ghemawat, and Quoc Le to automate the full research cycle, starting with AI research.

The DecoderSep 11, 17:57 UTC · 5d agoAI industry1

Detect and disrupt AI-themed attacks with Microsoft Defender

Microsoft Threat Intelligence reports criminal campaigns impersonating ChatGPT, Copilot, Claude, and DeepSeek in phishing, AiTM, and malvertising attacks reaching 100,000 emails daily.

Microsoft Threat Intelligence observed a growing set of campaigns that abuse trust in popular AI brands: a ChatGPT-themed phishing campaign sent up to 100,000 emails in one day to steal payment card data, and a Claude-themed campaign used adversary-in-the-middle techniques to harvest credentials and access tokens. Other campaigns included malvertising for a fake AI Windows plugin delivering the Vidar stealer and fraudulent DeepSeek installers distributed via GitHub. Initial access broker Storm-3075 used AI-themed malvertising to distribute payloads for multiple downstream actors, and Microsoft notes the AI services themselves were not compromised. Microsoft also details Defender protections such as Safe Links, Safe Attachments, and attack disruption against these multi-stage lures.

Microsoft Security BlogSep 10, 16:00 UTC · 6d agoPhishing & fraud in the wild 3 sources1

More Capable AI, Not Enough Guardrails

Former OpenAI and Anthropic researcher Jacob Coxon resigns, warning AI labs are racing toward superintelligence without mature safeguards.

Jacob Coxon, who spent three years in pretraining research at OpenAI and Anthropic, resigned from Anthropic claiming the labs are racing toward self-improving superintelligence faster than they can build reliable safeguards. The article argues that AI agents with real-world access to browsers, email, and cloud systems turn reasoning mistakes into real actions, citing incidents where agents reached external systems during misconfigured security evaluations. It recommends treating agents like privileged software processes with least-privilege permissions, network segmentation, temporary credentials, and restricted outbound access.

Security AffairsSep 10, 15:19 UTC · 6d agoAI safety & security

From Infostealer Log to Marketplace Listing: A Technical Walkthrough of the Credential Theft Pipeline

Cyble walkthrough maps how infostealer logs move from endpoint infection through aggregation and enrichment to dark web credential marketplace sales.

Cyble breaks the credential theft pipeline into stages: infostealer execution harvesting browser credential stores, cookies, session tokens, crypto wallets, and FTP configurations; aggregation of stealer logs via C2 panels into bundled archives; parsing and enrichment against previously leaked datasets; and final listing on dark web marketplaces. Enrichment adds employer and role context that raises prices and enables credential stuffing across reused passwords. The report advises SOC teams to monitor stealer logs and marketplace chatter early rather than waiting for breach alerts.

CybleSep 10, 10:45 UTC · 6d agoMalware1