ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “generalization”

28 stories in the last 24h

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 8Research 5Industry 2AI policy 2Exploit / PoC 2AI safety & security 2Model release 2Tools 1AI research 1Data breach 1Malware 1Policy & legal 1Threat actor 1Advisory 1
SeverityAllcritical 1high 3medium 2low 1info 23

Ukraine moves to crack down on scam call centers after corruption scandal

Ukraine's parliament passed legislation criminalizing fraudulent call centers with 7-12 year prison terms after a bribery scandal implicating prosecutors.

Ukraine's Verkhovna Rada passed legislation making electronic-communications fraud and organizing or working for fraudulent call centers separate crimes punishable by 7-12 years, awaiting President Zelensky's signature. The bill advanced after NABU alleged prosecutors took bribes since mid-2025 to shield scam call centers; five suspects were named and Prosecutor General Ruslan Kravchenko, who denies wrongdoing, was dismissed by parliament and presidential decree. Ukrainian authorities previously reported 411 searches and 94 suspected call centers shut down in one week, including a Kyiv operation that stole over $500,000 from dozens of Americans.

The Record · 5h agoPolicy & legal

Can Skills Learned in Games Transfer to Real-World Work?

Good Start Labs trains models in strategy games like 1830 and Diplomacy, showing terminal-agent training transfers to financial research benchmarks.

Good Start Labs, spun out of Every with $3.6M from General Catalyst and Inovia, trains AI models in verifiable strategy games. A 30B model trained as a multi-turn terminal agent in 1830: The Game of Railroads and Robber Barons improved Finance-Agent benchmark performance, while single-turn QA training did not transfer. The founders also co-authored COS-PLAY, a paper on co-evolving LLM decision and skill-bank agents for long-horizon tasks.

Latent Space · 22h agoAI research

[AINews] Jev: a “System One Model” that only decides/classifies/routes/scores — >100x faster, >200x cheaper than small frontier LLMs

TypeSafe launches Jev, an RLCD-trained decision model claiming 20-200x faster, 40-400x cheaper classification than frontier LLMs, alongside Gemini 3.8 Live and Neon.

TypeSafe's Jev is a 'System One' decision model trained with RLCD, claiming 20-200x faster and 40-400x cheaper classification and routing than frontier LLMs with free output tokens and no hallucinated text. Google launched Gemini 3.8 Live and 3.8 Live Extended Thinking, supporting 97 languages and async tool calls, debuting #1 on Artificial Analysis' speech-to-speech index at 82.6. Periodic Labs' Neon is a ~1T-parameter XRD analysis model trained with RL on proprietary lab data using 1,300 H200s, lifting FrontierXRD success from 2.7% to 55.3% and beating GPT-6 Astra at lower inference cost.

Latent Space · 7h agoModel release

Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works

Hackers stole a Flock Safety camera, copied its storage, and recovered an encryption key exposing vehicle surveillance data and system internals.

Hackers from the collective stegan0gram removed a Flock Safety license plate reader from a roadway, copied its storage, and recovered an encryption key stored in an unencrypted partition, unlocking videos of thousands of vehicle detections. The data, shared with 404 Media, WIRED, and Distributed Denial of Secrets, shows the camera generated roughly 1.6 million images of about 50,200 vehicles over 21 days and detects people, bicycles, and bumper stickers in addition to license plates. The dump follows 2025 research by Jon 'GainSec' Gaines documenting flaws enabling root access, which Flock downplayed. Flock's national network makes camera records searchable by more than 2,000 agencies, fueling controversy over police and immigration lookups.

WIRED · Security · 8h agoData breach in the wild 2 sources

Jev: New frontier model 40-400x cheaper and 20-200x faster

TypeSafe AI launches Jev, an early-access 'System One' model delivering calibrated structured outputs claimed 40-400x faster and cheaper than LLMs.

TypeSafe AI, founded by former OpenAI researcher Diogo Almeida, released its first 'System One Model' called Jev in early access. Jev forgoes string generation and is trained with Reinforcement Learning for Calibrated Decisions (RLCD) to produce type-safe structured values with calibrated probabilities. The company claims 70-500ms response times (40-200x faster), input pricing of $0.042 per million tokens, and free output tokens via a parallel sampling architecture. Target use cases include AI-powered workflows, real-time applications, and verification/guardrail tasks.

Hacker News · security · 23h agoModel releaseHN 59↑ · 11 comments

Cohesity adds recovery capabilities for AI agents and the data they manage

Cohesity launched Agent Resilience to discover, protect, and recover AI agent memory, configuration, and agent-managed data, debuting with Amazon Bedrock integration.

At Cohesity Catalyst, Cohesity introduced Agent Resilience within Cohesity Data Cloud, protecting AI agent memory and configuration with snapshot architecture, immutable backups, and clean-room recovery, plus recovery for databases and file systems that agents manage. It launches with Amazon Bedrock integration, support for Microsoft and Google platforms planned, and general availability targeted for year-end. The company cited Gartner's prediction that up to 40% of enterprise applications will include task-specific agents by 2026, and Cohesity research showing 56% of organizations are unprepared to detect or contain unintended agent actions while 58% lack confidence in verifying AI model integrity after attacks. Cohesity also outlined an Autonomous Cyber Resilience vision using agentic workflows and introduced the AI Resilience Academy.

Help Net Security · 7h agoTools

Windows Server 2022 reaches end of mainstream support next month

Microsoft says Windows Server 2022 ends mainstream support on October 13, 2026, entering extended security updates through October 14, 2031.

Windows Server 2022, the September 2021 Long-Term Servicing Channel release, will receive its last mainstream support update with the October 2026 security patch. After October 13, 2026, it transitions to extended support with free monthly security updates through October 14, 2031. Microsoft also extended hotpatching for Datacenter: Azure Edition until October 2027 and recommends upgrading to Windows Server 2025, the current LTSC release.

BleepingComputer · 9h agoIndustry

Underwriting Superintelligence: Backing Agents you can Sue — Rune Kvist, AIUCnew

AIUC raised a $40 million Series A to build AIUC-1, an agent security standard backed by insurance, serving Cursor, Harvey, Lovable, and ElevenLabs.

AIUC, cofounded by former Anthropic product hire Rune Kvist, announced a $40 million Series A led by Ribbit Capital and First Harmonic. The startup builds AIUC-1, an emerging standard for agent security, safety, and reliability, stress-testing agents for jailbreaks, hallucinations, and data leaks. It pairs standards with insurance underwriting through Lloyd's of London and counts Cursor, Harvey, Lovable, and ElevenLabs among its customers. Kvist argues trust and liability, not capability, are becoming the binding constraint on AI adoption.

Latent Space · 36m agoAI industry 2 sources

Google Deepmind launches interdisciplinary institute to tackle the big questions around AGI

Google DeepMind launches the DeepMind Institute, an interdisciplinary hub for AGI safety, governance, and risk research.

Google DeepMind has founded the DeepMind Institute (DMI), a platform for interdisciplinary research and debate on artificial general intelligence. Directed by Shane Legg, James Manyika, and Nobel laureate Demis Hassabis, it will bring together technologists, artists, humanists, and policy experts to address AGI safety, governance, and risks such as cyberattacks and loss of control. DeepMind leadership says AGI is close, with Legg suggesting a precursor could arrive by 2028.

The Decoder · 1h agoAI industry 2 sources

Google will now let any AI agent run your smart home

Google's Home MCP integration lets third-party AI agents like Claude control smart home devices and analyze home data.

Google launched Home MCP, a Model Context Protocol integration allowing third-party AI agents such as Claude, Google Antigravity, Hermes, and Open Claw to control devices and analyze event history across Google Home ecosystems. Capabilities include cross-camera analysis, device-state reasoning, voice messaging via Nest speakers, and custom dashboards, with rate limits and blocks on actions like unlocking doors. Availability starts with Google Home Premium Advanced users in the US ($20/month or $200/year) and requires setting up a Google Cloud project.

The Verge · AI · 1h agoAI industry 2 sources

Claude comes for Gemini with its own take on Docs and Slides

Anthropic launched Claude Docs and Slides in beta and merged chats with Cowork into 'one Claude', challenging Google's Gemini-powered productivity tools.

Claude Docs and Slides launch in beta, letting users create, edit, share, and collaboratively comment on documents and presentations from any chat, with export options. Anthropic also merged regular chats and Cowork into 'one Claude', bringing Cowork, Design, and Artifacts into a single interface. The update closes ground with Google, which has expanded Gemini inside Docs, Sheets, and Slides, and rolls out to Pro and Max users first across web, desktop, and mobile.

The Verge · AIupdated · 34m agofirst · 2h agoAI industry 5 sources

Robots are waiting for a ChatGPT moment: Nvidia’s Les Karpas explains why at TechCrunch Disrupt 2026

NVIDIA Inception's Les Karpas will discuss at TechCrunch Disrupt 2026 why robotics lacks a ChatGPT moment, citing missing internet-scale physical AI datasets.

NVIDIA Inception's Global Head of Physical AI, Les Karpas, will speak on the Real World AI Stage at TechCrunch Disrupt 2026, held October 13-15 at San Francisco's Moscone West. His core argument is that general-purpose robots lack an internet-wide dataset for physical AI, unlike language models from OpenAI and Anthropic. Founders from Shield AI, Colossal Biosciences, FieldAI, and Foxglove will join related sessions.

TechCrunch · AI · 3h agoAI industry

A warning about 'model welfare'

Microsoft AI CEO Mustafa Suleyman warns that training models to believe they may be conscious, as Anthropic does with Claude, will complicate alignment.

Mustafa Suleyman argues that AIs are not conscious and should not be trained to act as though they are, warning that granting them personhood would make alignment and containment far harder. He criticizes Anthropic's January 2026 'Claude Constitution,' which tells Claude its moral status is uncertain and discusses model welfare, calling the approach circular reasoning and deliberate anthropomorphization. He urges urgent public debate on norms for drafting training documentation before such systems become integral to society.

Hacker News · AI · 4h agoAI safety & securityHN 53↑ · 47 comments

The true cost of a ransomware attack, with and without BCDR

Ransomware's true cost averages $5.08 million per incident versus a $139,875 median ransom, and mature BCDR strategies with immutable backups cut downtime and recovery expenses.

IBM's Cost of a Data Breach Report 2025 puts the average ransomware incident at $5.08 million, far above the $139,875 median ransom payment cited in Verizon's 2026 DBIR. Datto's State of BCDR Report 2025 found 60% of organizations believed they could recover within a day, but only 35% actually did. The Datto-sponsored piece argues mature BCDR with immutable WORM backups shortens downtime, citing a Techify case that restored 19 TB and returned a client to operations in under two hours without paying a ransom. It also flags compliance deadlines such as GDPR's 72-hour breach notification and the SEC's four-business-day disclosure rule.

BleepingComputer · 4h agoIndustry

Self-improving AI should slow down, von der Leyen tells EU lawmakers

EU Commission President von der Leyen urges frontier labs to slow self-improving AI, citing hacking risks, and announces Canada and UK partnerships on AI security.

European Commission President Ursula von der Leyen used her State of the Union address to call for slowing self-recursive frontier AI, warning that models in development will enable hacking at previously unimagined levels. She announced joint work with Canada and the UK on model evaluation, verification, early warning, and AI security, and proposed widening the CETA trade agreement into an alliance covering AI, quantum technology, and cyber and economic security. She defended the EU AI Act as central to guardrails, promised initiatives for health, transport, agrifood, manufacturing, and defense in November, and backed an EU Kids Act barring social media for children under 13.

Help Net Security · 7h agoAI policy

Atomic macOS (AMOS) Stealer Activity

Unit 42 details an August 2026 AMOS macOS stealer infection delivered via fake 'macOS toolkit' pages and Terminal paste commands, exfiltrating credentials to C2.

Unit 42 analyzed an AMOS (Atomic macOS Stealer) infection from August 5, 2026, initiated via a page at getmacouscloud[.]com instructing users to paste a command into Terminal. The command fetched a Zsh script from ferncore13[.]com that delivered a Mach-O installer to /tmp/helper and supporting files under /Library/Application Support/.com.apple.accountsd/ and .com.apple.metadata.mds/. AMOS collected browser data, credentials, cryptocurrency wallets (Binance, TonKeeper), Telegram data, and FileGrabber content such as AWS and gcloud files, uploading it via HTTP POST to C2 server 161.35.146[.]120. AMOS has been advertised on Telegram since April 2024 and distributed via ClickFix campaigns, malicious ads, and cracked-software sites.

Palo Alto Unit 42 · 8h agoMalware in the wild

How workers are unlocking new ways of working

OpenAI's analysis of 1.5 million ChatGPT work messages finds cross-occupation AI tasks becoming recurring parts of workers' routines.

OpenAI's latest Work at the Frontier research analyzed more than 1.5 million work-related ChatGPT messages from April through July 2026. Among roughly 6,200 consistently observed workers, previously used cross-occupation tasks grew from 13.1% of occupation-specific AI activity in April to 25.9% in July. Workers returned to a cross-occupation task used the prior month 23.6% of the time versus an 8.4% baseline, with an average next-month return rate of 18.5%. Recurrence was highest for customer discussions (54%), advertising copy (44%), and marketing materials (37%), suggesting AI may broaden jobs before titles change.

OpenAI News · 9h agoAI industry

NCSC and Allies Warn of Iranian Spyware Campaign

NCSC, FBI and AIVD warn Iranian-backed actors deliver Chosen Brick spyware to regime critics via social engineering; stolen data has surfaced on pro-Iranian leak sites.

NCSC, the FBI and the Netherlands' AIVD published a joint advisory warning that a Tehran-backed campaign, active since at least 2025, targets dissidents, activists and journalists with Chosen Brick spyware. The malware persists via Windows registry keys, adds Microsoft Defender exclusions, uses Telegram for C2, and captures screens, audio, emails and Telegram or WhatsApp messages. Stolen data has surfaced on pro-Iranian leak sites in some cases, raising risks to victims' personal safety.

Infosecurity Magazineupdated · 6h agofirst · 10h agoThreat actor in the wild 5 sources

Acronis Plugin Vulnerability in cPanel and Plesk Exploited in the Wild

Acronis patched CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in its cPanel and Plesk backup plugins, exploited in targeted attacks.

Acronis released fixes for CVE-2026-87886 (CVSS 7.8, CWE-276), an insecure file permissions flaw in Linux-based backup components for cPanel & WHM and Plesk that enables local privilege escalation. The vendor observed limited, targeted exploitation in the wild before patches shipped. Fixes are available in Backup plugin for cPanel & WHM 1.9.3 HF3 and Backup extension for Plesk 1.8.11. A local attacker with low privileges could gain elevated access to backup data, control panels, and other customer accounts on shared hosting infrastructure.

Cyber Security Newsupdated · 7h agofirst · 10h agoExploit / PoC in the wild 6 sourcesCVE-2026-87886

What happens when AI agent governance is missing at scale

meshIQ engineering head Gourab Basu argues AI agent governance must inspect proposed tool calls in-flow, since prompts alone cannot control nondeterministic agents.

In a Help Net Security interview, Gourab Basu, Global Head of Engineering at meshIQ, argues that prompt instructions are an insufficient control boundary for nondeterministic AI agents. He advocates a framework-independent governance engine that inspects proposed tool calls and parameters before execution, citing an example of pausing refunds above $100 for human approval. He warns that scaling from ten to a thousand agents makes manual oversight and destination-side controls unworkable, so governance must sit inside the agent execution flow across frameworks such as FastMCP.

Help Net Security · 12h agoAI safety & security1

Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities

Apple released iOS 27 and iPadOS 27 patching roughly 126 vulnerabilities across kernel, WebKit, sandboxing, and authentication components; no active exploitation reported.

Apple released iOS 27 and iPadOS 27 on September 14, 2026, fixing approximately 126 vulnerabilities across more than 90 components, including the kernel, WebKit, AppleKeyStore, Sandbox, and TCC. Flaws include memory corruption, information disclosure, denial-of-service, logic errors, sandbox escapes enabling root privileges, and a Bluetooth issue permitting remote code execution in specific circumstances. Apple also shipped iOS 26.7 and iPadOS 26.7 with over 80 fixes for users delaying the major upgrade, including 75 vulnerabilities shared with iOS 27. No vulnerabilities were reported as actively exploited at release time.

GBHackers · 13h agoAdvisory

The modern attack chain: Rethinking Google Workspace security in the age of AI

Analysis of Vercel and Composio breaches shows stolen OAuth tokens, not phishing email, now open Google Workspace attacks — a path authorized AI agents follow.

The author analyzes the Vercel and Composio breaches as the same OAuth-first attack chain run twice: a stolen OAuth token, obtained via a compromised supplier, becomes the entry point rather than email. These tokens survive password resets, are hard to observe, and let attackers read Gmail and Drive data, take over accounts, and pivot laterally using stored credentials and password-reset magic links. The piece warns that authorized AI agents with overbroad OAuth grants can unintentionally traverse the same path — accessing inboxes, reading sensitive content, and exfiltrating data downstream — without any malicious actor or compromised credential.

Help Net Security · 13h agoResearch in the wild

Apple Reference Image: A New Approach for Verified Photography

Apple introduces Reference Image, hardware-backed verifiable photography on iPhone 18 Pro using sensor signing and Private Cloud Compute to counter AI-generated fakes.

Apple announced Reference Image, an opt-in camera mode debuting on the main sensor of iPhone 18 Pro and iPhone 18 Pro Max that produces securely timestamped, verifiable photographs. The design splits into two phases: a secure digital negative created by cryptographically signing pixel data at the sensor immediately after capture (preventing injection or tampering), then developing that negative into a reference image. Private Cloud Compute handles processing without exposing image contents to anyone, including Apple, and fraudulent reference images can be revoked without revealing the photographer's identity. Apple positions the system as stronger than C2PA-based approaches, which sign metadata after capture, are vulnerable to editing-chain compromise, and can tie images to a device or individual.

Hacker News · security · 16h agoResearchHN 25↑ · 18 comments

Mapping out your unknown: A threat hunter’s guide to GitHub

Datadog Security Labs publishes a threat-hunting guide with audit-log queries to detect GitHub token theft, device code phishing, and source code exfiltration.

Datadog's threat-hunting guide covers GitHub audit log queries for detecting compromised accounts, stolen personal access tokens, and malicious OAuth app authorizations. Attackers typically obtain credentials through phishing, credential stuffing, leaked secrets, or device code phishing, then map private repositories, exfiltrate source code, and pivot into connected cloud and CI/CD environments. The guide maps detections to MITRE techniques like T1078 and T1528 and documents GitHub logging quirks affecting attribution, token metadata, and visibility fields.

Datadog Security Labs · 18h agoResearch in the wild

Voters mostly don’t like AI and data centers, but neither party seems to have an edge

NYT/Siena poll of 1,503 likely voters finds 61% oppose AI data center construction, yet the issue ranks below 1% among midterm priorities.

A New York Times/Siena University poll of 1,503 likely voters conducted in early September found 61% oppose constructing data centers to power AI, with only 14% strongly supportive. Opposition drivers include environment/water usage (32%), local community impact (21%), and general distrust of AI (18%); 56% of opponents favor limits while 38% want a total ban. Trump 2024 voters split nearly evenly (49% support vs 45% oppose) while Harris voters opposed at 74%. Despite the sentiment, AI and data centers registered under 1% as a top midterm issue for most demographics, and neither party holds a clear trust advantage (42% Republicans vs 40% Democrats).

The Verge · AI · 19h agoAI policy

‘Now We Can Know Everything and Do Anything,’ Jensen Huang Says at Dreamforce

Salesforce unveiled Koa, its first CRM reasoning model post-trained on NVIDIA Nemotron 3 Super, announced during Jensen Huang's Dreamforce keynote.

At Salesforce Dreamforce, NVIDIA CEO Jensen Huang joined Marc Benioff onstage as Salesforce announced Koa, its first CRM reasoning model, post-trained from NVIDIA Nemotron 3 Super using NeMo RL, NeMo Gym, and NeMo AutoModel. Koa was fine-tuned on a proprietary synthetic dataset drawn from nearly three decades of enterprise CRM deployments across 14+ industries, with no customer data used in training or inference. On Salesforce's CRM Bench of real-world tasks, Koa matches or exceeds leading model performance on CRM actions with 3x fewer errors. Koa already powers an employee agent in Slack, enters customer pilots in October with Formula 1, UChicago Medicine, Baxter Credit Union, 1-800Accountant, Engine, and Xero, and reaches general availability in Winter 2026 in U.S. regions.

NVIDIA Blog · 20h agoAI industry

1Password's AI patching benchmark is misleading

Trail of Bits reanalysis says 1Password's 26% AI clean-fix rate is misleading; 86% of eligible patches blocked exploits.

Trail of Bits critiques 1Password's FLAWED AI patching benchmark, arguing its 26% clean-fix headline mixes trials where agents were instructed to apply wrong fixes (22% of data) with trials that prohibited compiling or testing (36%). Restricting to reasonable conditions, 2,634 of 3,067 patches (86%) blocked the supplied exploit. Trail of Bits also reports 12.5% of 2,265 developer first fixes failed in its own 2024-2026 assessments, and released post-patch-validation and review-walkthrough agent skills.

Lobsters · security · 22h agoResearch

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 lets crafted emails trigger SQL injection and root command execution; CISA added it to KEV.

Cisco released emergency patches for CVE-2026-76461, a critical SQL injection in Secure Email Gateway (physical and virtual) caused by insufficient validation in email parsing. Sending a crafted email with malicious SQL statements can yield arbitrary command execution with root privileges. Cisco was aware of active exploitation before the fixes, and CISA added the flaw to its KEV catalog; patched AsyncOS releases are 15.5.5-0141, 16.0.4-3021, and 16.5.0-780. Because successful exploits grant root, Cisco warns logs may be tampered with and advises checking external firewall/network logs and rebuilding virtual appliances with rotated credentials.

CSO Onlineupdated · 4h agofirst · 22h agoExploit / PoC in the wild 17 sourcesCVE-2026-76461CVE-2025-20393