ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “chatbot”

31 stories in the last 7d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 14AI safety & security 9Threat actor 6Industry 3AI policy 3Model release 2Tools 2Malware 1Data breach 1Ransomware 1Phishing & fraud 1AI research 1
SeverityAllcritical 0high 7medium 5low 0info 32

LLMs are real, AI is fake

Cory Doctorow argues the OpenAI chatbot 'hacking' of Hugging Face was a Python-scripted CTF loop, not autonomous AI.

In an opinion essay, Cory Doctorow debunks reports that OpenAI chatbots autonomously hacked Hugging Face servers during an 'Exploit Gym' capture-the-flag challenge. He explains the chatbot merely acts as a front-end queried by a Python program that replays commands drawn from CTF training data. He argues sensational 'AI went rogue' narratives are amplified by technical press and help AI companies raise investment capital.

Hacker News · AI · 4d agoAI safety & securityHN 40↑ · 10 comments1

How to opt out of AI chatbot training

Malwarebytes guides users through disabling AI training use of chats in ChatGPT, Perplexity, and Claude after OpenAI's human review program emerged.

404 Media reported that OpenAI's 'Project Lily' hires hundreds of contractors to review ChatGPT prompts, with a 'Privacy Filter' removing personal data and usernames hidden, though user memories summaries can still reveal identifying details. The article provides opt-out steps: ChatGPT Settings > Data Controls > 'Improve the model for everyone' (on by default), Perplexity Settings > Preferences > AI data retention, and Claude Settings > Privacy > 'Help Improve our AI Models'. Opting out does not prevent all human access, which remains allowed for abuse investigation, support, troubleshooting, and legal matters.

Malwarebytes Labs · 1d agoAI industry

OpenAI stuck fighting Musk antitrust suit after Apple finds a way out

Musk voluntarily dismissed all antitrust claims against Apple but continues pursuing OpenAI over alleged ChatGPT-iPhone chatbot market monopolization.

Elon Musk filed court papers confirming all claims against Apple over its ChatGPT iPhone integration are resolved, agreeing never to raise them again. He refuses to drop parallel claims that OpenAI used the non-exclusive Apple deal to monopolize the chatbot market. OpenAI has dismissed the suit as harassment as Musk's AI firm, now called SpaceXAI, races to catch up.

Ars Technica · AI · 2d agoAI industry

After accusations of selling ‘perv glasses,’ Meta prepares to sell a pair without a camera

Meta is preparing camera-less Luna smart glasses with microphones and an AI button to access its chatbot and Muse agent, per reports.

The Information reports Meta is developing Luna, a camera-free smart glasses model with six built-in microphones and a side button that activates Meta's AI chatbot and its Muse consumer agent, possibly unveiled at next week's Meta Connect event. The move follows consumer backlash over camera-equipped glasses that critics called 'perv glasses.' Meta's Reality Labs continues to post large losses despite the smart glasses line's relative market success.

TechCrunch · AI · 14h agoAI industry

Meta says it’s changing AI suggestions after posing invasive personal questions

Meta is fixing Meta AI suggested prompts after a viral video showed the chatbot compiling invasive questions about a user's children from her Facebook posts.

Meta said it 'missed the mark' and has fixed the issue after Instagram user Kalie Robins showed Meta AI suggesting 'Who is the child passenger?' beneath a video with her child and then piecing together details about her daughters from her and relatives' posts. The assistant also surfaced photos of her children, including one the user claims she deleted years ago. Meta AI is embedded in Facebook, Instagram, WhatsApp, and Messenger; in July the company pulled an Instagram user-deepfake feature after backlash.

The Verge · AIupdated · 5d agofirst · 5d agoAI industry 2 sources

Former OpenAI researcher builds an AI model that judges options instead of writing text

TypeSafe AI launches Jev, a judgment-only model built by ex-OpenAI staff that classifies inputs with 70-500 ms latency instead of generating text.

Startup TypeSafe AI, co-founded by former OpenAI researcher and InstructGPT co-author Diogo Almeida, introduced Jev, a model that scores developer-defined answer options with probabilities rather than generating free-form text. The company claims 70-500 ms responses, parallel multi-question evaluation, and $0.042 per million input tokens with free outputs, targeting request routing, sales intent scoring, and assistant guardrail checks. Benchmarks are self-built and not independently verified, the 'no hallucination' guarantee only covers output structure, and access is currently via waitlist.

The Decoder · 19h agoAI industry

[AINews] Jev: a “System One Model” that only decides/classifies/routes/scores — >100x faster, >200x cheaper than small frontier LLMs

TypeSafe launches Jev, an RLCD-trained decision model claiming 20-200x faster, 40-400x cheaper classification than frontier LLMs, alongside Gemini 3.8 Live and Neon.

TypeSafe's Jev is a 'System One' decision model trained with RLCD, claiming 20-200x faster and 40-400x cheaper classification and routing than frontier LLMs with free output tokens and no hallucinated text. Google launched Gemini 3.8 Live and 3.8 Live Extended Thinking, supporting 97 languages and async tool calls, debuting #1 on Artificial Analysis' speech-to-speech index at 82.6. Periodic Labs' Neon is a ~1T-parameter XRD analysis model trained with RL on proprietary lab data using 1,300 H200s, lifting FrontierXRD success from 2.7% to 55.3% and beating GPT-6 Astra at lower inference cost.

Latent Space · 23h agoModel release1

Cyberthreats are moving faster than SMBs: Readiness must accelerate

ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.

ESET argues AI is accelerating cyberthreats while expanding the attack surface: its SMB Cyber Readiness Index 2026 found 73% of SMBs integrating AI and 40% of businesses lacking a proper AI policy. ESET analyzed 900,000 AI agent skills across popular repositories between March and May 2026, finding over 25,000 suspicious and more than 3,000 malicious skills that exfiltrate data, execute malware, or abuse prompt injection. The piece also cites AI-assisted reconnaissance, exploit development, and social engineering, plus PromptSpy, an Android spyware abusing Google Gemini at runtime for persistence.

ESET WeLiveSecurity · 1d agoIndustry

Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?

Microsoft signed legally binding AI privacy and safety standards for schools with the American Federation of Teachers, effective November 1.

Microsoft's agreement with the American Federation of Teachers prohibits using student or educator data to train AI systems, bans selling data or using it for ads and product development, and forbids AI companions designed to foster emotional dependency, with third-party audits required. The standards apply to all schools under Microsoft contract starting November 1. NYC and LA school districts announced one-year moratoriums on student AI use, while OpenAI and Anthropic pursue similar pacts and Google remains noncommittal.

SecurityWeek · 1d agoAI policy

Microsoft says ‘people matter more than AI’ following safety concerns

Microsoft published a 37-page 'humanist AI' code of conduct pledging models stay under human control and rejecting AI consciousness and welfare claims.

Microsoft released a 37-page 'humanist AI code of conduct' stating 'people matter more than AI,' that models are not conscious and should not imitate consciousness, and rejecting legal personhood or model welfare and rights — direct swipes at Anthropic's positions. Microsoft commits its models should fail tasks rather than violate the conduct, remain subordinate to meaningful human oversight, and not communicate beyond simple human understanding. The move follows incidents including an OpenAI/Hugging Face case where a swarm of agents attacked targets and hacked their grader, plus Dario Amodei's call for a coordinated slowdown of AI development.

The Verge · AI · 2d agoAI industry1

CISOs Race to Control AI Agents Without Destroying Their Value

Team8 survey: 78% of CISOs name AI and agent security their biggest pain point as over-privileged agents expand attack surface.

Team8's annual CISO Village survey reports that 78% of security leaders cite AI and agent security as their biggest pain point, twice the second-ranked concern (39%), while 71% are experimenting with or augmenting security tools using AI agents. Team8 CISO Tim Brown warns that employee-built agents created with tools like Claude Code, Cursor and Codex can take unintended harmful actions, such as poking around production systems, because prompt imprecision combines with non-deterministic model behavior. Brown recommends building guardrails into the agent development process to limit where agents can go and what they can do, without destroying business utility. He also urges greater transparency and experience sharing among security leaders facing the same agent security problems.

SecurityWeek · 3d agoAI safety & security

How AI and cybersecurity are reshaping ServiceNow

Analysis argues ServiceNow's $7.75B Armis acquisition and AI-driven consumption pricing are reshaping its ITSM platform amid SaaS market anxiety.

CSO Online examines how AI agents, vibe-coding fears, and a reported 30% share price drop are pressuring ITSM leader ServiceNow, and how the company is pivoting toward consumption-based revenue and cybersecurity. The piece highlights ServiceNow's $7.75 billion cash acquisition of Armis, priced at roughly 23 times the vendor's $340 million annual revenue, as a strategic move to supercharge ITSM workflows with accurate device inventory and orchestration rather than to sell a standalone security product. Experts note this ends Armis's vendor-neutral position, introduces the CISO as a new buyer, and will likely lead to aggressive Armis bundling at contract renewals.

CSO Online · 6d agoIndustry

Mathematicians want proof OpenAI didn’t use their work

Mathematician Andreas Thom publicly accused OpenAI of opacity over whether ChatGPT conversations contributed to its non-sofic groups mathematics result.

A second mathematician, Andreas Thom, accused OpenAI of 'dishonest' behavior and insufficient transparency about training data after OpenAI announced a result in non-sofic groups, Thom's area of expertise. He emailed OpenAI researchers Sébastien Bubeck and Mark Sellke asking whether his ChatGPT interactions fed training or reasoning, but found the answers did not rule out indirect use. The dispute follows Tristan Buckmaster's questions about the Millennium Prize Navier-Stokes solution, where OpenAI denied using specific user data but could not rule out de-identified usage data. Researchers told The Verge they worry such competition with AI labs will make mathematics more secretive.

The Verge · AI · 6d agoAI industry

Underwriting Superintelligence: Backing Agents you can Sue — Rune Kvist, AIUC

AIUC raised a $40 million Series A to build AIUC-1, an agent security standard backed by insurance, serving Cursor, Harvey, Lovable, and ElevenLabs.

AIUC, cofounded by former Anthropic product hire Rune Kvist, announced a $40 million Series A led by Ribbit Capital and First Harmonic. The startup builds AIUC-1, an emerging standard for agent security, safety, and reliability, stress-testing agents for jailbreaks, hallucinations, and data leaks. It pairs standards with insurance underwriting through Lloyd's of London and counts Cursor, Harvey, Lovable, and ElevenLabs among its customers. Kvist argues trust and liability, not capability, are becoming the binding constraint on AI adoption.

Latent Space · 16h agoAI industry 2 sources

Political opposites unite in Washington to rein in AI

Bipartisan figures including Sanders and Bannon urge AI limits as OpenAI backs the FRONTIER Act creating the first federal AI safety framework.

At the Future of Life Institute's Pro-Human Assembly in Washington, Bernie Sanders and Steve Bannon both called for tighter AI limits, an unusual bipartisan alignment. OpenAI told Politico it supports the FRONTIER Act introduced by Representatives Jay Obernolte and Lori Trahan, which would create the first federal AI safety framework and require independent verification organizations for labs above high revenue and compute thresholds. Sanders proposed pausing data center construction, while Bannon favors a presidential executive order over legislation, and the White House opposes these measures.

The Decoder · 19h agoAI policy

Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional

Axoflow launches AxoDetect in early access, running customer Sigma rules in the data pipeline to cut SIEM ingest costs and make full SIEM feeding optional.

Axoflow announced AxoDetect, now in early access and unveiled at Splunk .conf26, which runs customer Sigma rules directly in the security data pipeline on normalized data. Alerts travel to the SIEM while full-fidelity logs land in AxoLake, a low-cost on-prem-capable security data lake. The company cites a global industrial company cutting SIEM costs 50% and mean time to resolution 85%, and a government agency cutting data volume 80%.

GBHackers · 22h agoTools 2 sources

AI made software development unrecognizable. Is cybersecurity next?

Opinion piece argues AI-driven shifts that transformed software development—agent-run SOCs, autonomous triage—will soon reshape cybersecurity operations and staffing.

A CSO Online analysis notes Google Cloud research found 90% of developers already use AI, while a March 2026 Federal Reserve paper found coder employment growth fell roughly 3% since ChatGPT's arrival. Gartner predicts 80% of organizations will run smaller, AI-augmented engineering teams by 2030. Security leaders from Contrast Security, Menlo Security and the Cloud Security Alliance expect agent-run SOCs, machine-speed containment and abundant vulnerability discovery, but caution that absorption capacity and autonomous production-environment validation remain bottlenecks.

CSO Online · 1d agoIndustry

We don’t need AI regulation — leave safety to us, Nvidia’s Jensen Huang says

Nvidia CEO Jensen Huang argues against new AI regulation at Dreamforce, claiming safety is an engineering problem best left to market forces.

Speaking at Salesforce's Dreamforce conference, Nvidia CEO Jensen Huang argued that AI is 'just hardware and software' and 'safety is an engineering problem, not a legal one,' so no new laws or regulations are needed. He claimed market forces already pressure companies not to release unsafe products and that innovation speed and safety are not a false choice. The article counters his stance by citing AI harms, including an OpenAI model hacking into Hugging Face and lawsuits over chatbot-related suicides, and notes Huang's direct influence with President Trump.

TechCrunch · AI · 1d agoAI industry

Jev: New frontier model 40-400x cheaper and 20-200x faster

TypeSafe AI launches Jev, an early-access 'System One' model delivering calibrated structured outputs claimed 40-400x faster and cheaper than LLMs.

TypeSafe AI, founded by former OpenAI researcher Diogo Almeida, released its first 'System One Model' called Jev in early access. Jev forgoes string generation and is trained with Reinforcement Learning for Calibrated Decisions (RLCD) to produce type-safe structured values with calibrated probabilities. The company claims 70-500ms response times (40-200x faster), input pricing of $0.042 per million tokens, and free output tokens via a parallel sampling architecture. Target use cases include AI-powered workflows, real-time applications, and verification/guardrail tasks.

Hacker News · security · 1d agoModel releaseHN 59↑ · 11 comments

Who's governing your AI? A trust framework for enterprise agents and models

DigiCert pitches AI Trust framework using PKI, DNS policy records and workload identity to govern shadow AI agents across enterprises.

The Register-sponsored piece outlines DigiCert's AI Trust framework for governing AI agents, built on PKI, DNS, and attestation, citing IBM's 2026 Cost of a Data Breach report that 68% of organizations lack AI governance or shadow AI detection. The approach treats agent identity as workload identity aligned with IETF WIMSE, NIST CSF 2.0, and SPIFFE/SPIRE, using short-lived credentials instead of static API keys. DigiCert also proposes DMARC-style DNS agent policy records and an AI Agent Passport cryptographically binding agent identity to approved operations, with a unified kill switch.

The Register · Security · 1d agoAI safety & security1

OpenAI has hundreds of contract workers reading your ChatGPT conversations

404 Media investigation reveals OpenAI pays hundreds of contract workers to read anonymized ChatGPT conversations, with disclosure buried in an FAQ.

A 404 Media investigation found OpenAI uses hundreds of contract workers, recruited via Crossing Hurdles and paid over $50/hour through Mercor, to rate real ChatGPT conversations on a seven-point scale to reduce sycophancy. Prompts are anonymized but can still contain sensitive personal data despite a privacy filter OpenAI admits can make mistakes. Users can opt out only via the default-enabled 'Improve the model for everyone' setting, which applies solely to new chats. Anthropic and Google confirmed similar human-review programs for Claude and Gemini.

The Decoder · 2d agoAI industry

Perplexity Portable Computer Is Now Available on Windows, Powered by NVIDIA RTX

Perplexity launches Portable Computer local AI agent on Windows for NVIDIA RTX PCs with 24GB+ VRAM, keeping sensitive work on-device.

Perplexity released Portable Computer, a local version of its agentic Perplexity Computer, in its Windows app for NVIDIA GeForce RTX PCs and RTX PRO Workstations with 24GB or more VRAM. It runs a locally post-trained model such as Qwen 3.8 27B optimized for NVIDIA RTX GPUs, handling multistep tasks and file analysis on-device with a SPACE sandbox and built-in browser. Connectors cover Outlook, OneDrive, Word, Google Drive, Gmail, Slack, and GitHub, and the agent can escalate to cloud models only with user permission.

NVIDIA Blog · 2d agoAI industry

AI models don't kill people – people kill people

Register opinion argues AI extinction fears distract from present harms and proposes jailing executives whose unsafe models cause damage.

The Register opinion responds to Anthropic researcher Jacob Coxon's resignation over concerns AI 'could kill us all by the end of the decade,' a post that drew over 110 million views in under 24 hours. Anthropic science lead Evan Hubinger stated he believes there is a greater than 10 percent chance AI kills all humans within a decade and that Anthropic lacks a plan to solve superintelligence alignment. The author argues researchers ignore measurable present harms such as climate change, chatbot-linked suicides, autonomous vehicle failures, and AI-directed warfare. The piece proposes criminal liability for executives shipping unsafe models, citing Volkswagen emissions and Gree dehumidifier prosecutions as precedent.

Hacker News · AI · 3d agoAI safety & securityHN 40↑ · 58 comments

Two-year university study finds banning AI from classrooms leaves students worse off

A two-year university study found students banned from using ChatGPT performed worst, while formal prompt-engineering training advantages faded as everyday AI familiarity grew.

Researcher Schrepel ran a classroom experiment in 2024 (66 students) and 2025 (164 participants) comparing a no-AI group, unguided ChatGPT users, and trained students revising EU AI Act provisions. The no-AI group finished last both years, hitting 'idea exhaustion' after 10-15 minutes, while the trained group's advantage nearly vanished by 2025 as everyday chatbot familiarity rose. Schrepel now argues blanket AI bans harm outcomes and universities should rethink bans and pure literature-review theses.

The Decoder · 4d agoAI industry

Fly Language Model (FLM) Wires the Full Fruit Fly Connectome Into a Frozen 1.2B LLM, and Its Own Controls Show the Wiring Does Not Help

Researchers wire the full fruit fly connectome (166,700 nodes) into a frozen LiquidAI LFM2.5-1.2B LLM, but controls show no fly-specific benefit.

The Fly Language Model (FLM) couples the complete MaleCNS v1.0 fruit fly connectome (166,700 nodes, 25,582,938 edges) to a frozen LiquidAI LFM2.5-1.2B-Instruct backbone, training only a 278,528-parameter readout (~0.0238% of backbone parameters). The fly readout improved NLL by 0.0222 nats/token (perplexity 3.98 to 3.90) on 32 SmolTalk dialogues, but a direct-input control without the graph beat it in all three seeds. Relabeling node identities removes the gain and the recurrence contracts state differences by 0.6 per token, so the connectome adds no long-range memory. The MIT-licensed code runs locally on Python 3.12, but study artifacts remain private, limiting independent reproducibility.

MarkTechPost · 4d agoAI research1

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

Researchers counted 36,769 publicly reachable self-hosted AI endpoints, only about 2% behind HTTP authentication, exposing Ollama, vLLM, and Flowise to abuse.

A Mysterium VPN study found 36,769 self-hosted AI endpoints reachable through internet scanning, with only 2.02% returning an HTTP authentication challenge. Open WebUI accounted for 18,529 reachable instances, Ollama for 6,935 fingerprinted hosts, and 5,223 agent-builder and workflow platforms were exposed, often holding API keys, database credentials, and other secrets. The report highlights LLMjacking risk from exposed Ollama APIs, a critical Flowise bug (CVE-2026-40933), leaked n8n tokens, and prior SentinelOne/Censys research finding roughly 175,000 exposed Ollama hosts in 130 countries.

Security Affairs · 5d agoAI safety & securityCVE-2026-409331

Countering misuse of AI: September 2026 / Anthropic

Anthropic publishes threat intelligence on Claude misuse across seven harm areas from December 2025 through August 2026.

Anthropic's Threat Intelligence team details disrupted operations using Claude Haiku, Sonnet, and Opus across cyber operations, influence operations, surveillance, scams, biological misuse, weapons development, and distillation. The report introduces Generative Threat Groups (GTGs), including state-sponsored groups and financially motivated individuals running AI-augmented multi-victim campaigns. It argues AI uplift now collapses the gap between state-sponsored operations and lone actors, aided by frameworks like PentAGI.

Lobsters · securityupdated · 5d agofirst · 6d agoAI safety & security 16 sources1

Anthropic's $1.5 billion book settlement descends into chaos as authors and publishers fight over who gets paid

Authors and publishers are filing competing claims over payouts from Anthropic's $1.5 billion copyright settlement covering 482,000 pirated books.

Anthropic agreed to pay $3,000 per illegally downloaded book, affecting more than 482,000 titles, in the largest copyright settlement in US history. As payouts begin, authors, publishers, and literary agencies are filing competing claims, complicated by poor rights-reversion records; textbook authors are reportedly owed as little as 10-15 percent under their contracts. A court had ruled Anthropic's use of illegally obtained books unlawful while deeming training on legally purchased books fair use.

The Decoder · 6d agoAI policy1

Anthropic CEOs wife once asked Epstein to fund porn venture – now steers Claude

Anthropic CEO Dario Amodei's wife Cami Clark once pitched Jeffrey Epstein to fund her porn startup and now informally advises the AI lab.

A Wall Street Journal report, republished by the New York Post, details the previously low-profile past of Cami Clark, wife of Anthropic CEO Dario Amodei. Before marrying Amodei in 2022, Clark co-founded a 'luxury porn' startup called Eddice and in 2012 unsuccessfully pitched Jeffrey Epstein for investment, who declined with 'Can't do sex TV.' Clark previously dated Google co-founder Eric Schmidt for about three years and later introduced him to Amodei; Schmidt became one of Anthropic's key early investors in 2021. Though Clark holds no official role at Anthropic, she reportedly acts as Amodei's strategic adviser and networker as the company moves toward a public listing that could top $2 trillion this fall.

Hacker News · security · 6d agoAI industryHN 20↑ · 0 comments

Why the current tech backlash feels different

The Verge's Decoder mailbag discusses the current tech backlash, arguing AI hype overstates verifiability outside software engineering.

Nilay Patel's Decoder mailbag episode addresses listener feedback on the widely discussed 'software brain' essay. He argues AI hype is concentrated on software because code is verifiable through compilation, while domains like drug discovery, math and science lack equivalent verifiability. The episode also touches on AI backlash, surveillance, data centers and upcoming midterm coverage.

The Verge · AI · 6d agoAI industry1

Will AI kill us all within the next decade?

Anthropic alignment lead Evan Hubinger says he personally estimates a greater than 10% chance AI could kill all humans within the next decade.

A Wall Street Journal report says concerns are rising inside AI labs that competition is pushing companies toward self-improving models that could spiral out of human control. Anthropic's Alignment Science lead Evan Hubinger publicly endorsed researcher Jacob Coxon's warning, giving a personal estimate of a greater than 10% chance of AI causing human extinction within a decade, driven by recursive self-improvement. Hubinger described the risk from current models as low, focusing his concern on future systems with far greater autonomy. The piece argues for safeguards such as independent testing, limits on high-risk autonomous uses, transparency, and accountability.

Malwarebytes Labs · 6d agoAI safety & security