ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Threads”

114 stories in the last 30d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 22AI research 15AI safety & security 15Malware 10Threat actor 8Exploit / PoC 7AI tools & infra 7Research 6Model release 6Vulnerability 5Phishing & fraud 5Industry 4Tools 2Data breach 2
SeverityAllcritical 6high 17medium 22low 0info 70

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Researchers showed a single browser extension could hijack AI agents in Chrome, Edge, Comet, Opera Neon and Claude in Chrome, earning $20,000 in bounties.

Forever Security demonstrated that a browser extension with two common permissions could seize the trusted page controlling built-in AI assistants in five Chromium-based products and drive the agent, read local files, or access the camera. Chrome's flaw was fixed as CVE-2026-0628 (CVSS 8.8) in Chrome 143.0.7499.192, and Microsoft fixed CVE-2026-55945 (CVSS 4.2) in Edge 150.0.4078.48. Perplexity Comet was the worst case: a hijacked agent could read any file, leak browsing history, take screenshots, and act as the user via an unsecured test subdomain. All attacks require a malicious extension already installed; no in-the-wild exploitation or KEV listing was reported as of September 16, 2026.

The Hacker News · 5h agoAI safety & securityCVE-2026-0628CVE-2026-55945

VectraRAT Malware-as-a-Service Lets Hackers Bypass UAC and Hijack Windows Systems

New VectraRAT malware-as-a-service at $250/month combines RAT capabilities, credential theft, clipboard hijacking, and a UACME-based UAC bypass; 38 victims observed.

VectraRAT is a previously undocumented MaaS platform with a Go-based VectraHub Linux C2 server embedding a Vue3 operator panel and a C++ Windows implant, rented from $250/month and linked to the aliases Vectra and Nyxel. It communicates over TCP port 3308 via a proprietary MessagePack protocol, steals browser and file-based credentials, and abuses UACME method 41 with debug-object handle hijacking via winver.exe and computerdefaults.exe. SOCRadar identified 38 live victim sessions in one week, 48% on corporate Windows editions, with delivery via the Amadey loader and ClickFix pages impersonating TurboTax.

GBHackersupdated · 5h agofirst · 6h agoMalware in the wild 3 sources

[AINews] Jev: a “System One Model” that only decides/classifies/routes/scores — >100x faster, >200x cheaper than small frontier LLMs

TypeSafe launches Jev, an RLCD-trained decision model claiming 20-200x faster, 40-400x cheaper classification than frontier LLMs, alongside Gemini 3.8 Live and Neon.

TypeSafe's Jev is a 'System One' decision model trained with RLCD, claiming 20-200x faster and 40-400x cheaper classification and routing than frontier LLMs with free output tokens and no hallucinated text. Google launched Gemini 3.8 Live and 3.8 Live Extended Thinking, supporting 97 languages and async tool calls, debuting #1 on Artificial Analysis' speech-to-speech index at 82.6. Periodic Labs' Neon is a ~1T-parameter XRD analysis model trained with RL on proprietary lab data using 1,300 H200s, lifting FrontierXRD success from 2.7% to 55.3% and beating GPT-6 Astra at lower inference cost.

Latent Space · 8h agoModel release

Saving Jet Fuel

Tutorial optimizes flight paths to cut jet fuel costs using open-source Scikit-decide planning framework and OpenAP aircraft performance models.

A technical walkthrough demonstrates wind-aware flight path optimization using Scikit-decide, an open-source framework for reinforcement learning and automated planning, paired with OpenAP fuel-consumption models built by Dr. Junzi Sun at TU Delft and NOAA wind data. A Boeing 787-9 flying EWR to FCO can require roughly $68K in fuel, and adjusted routing could save thousands. The post uses Python 3.12, DuckDB with spatial extensions, and QGIS for map rendering.

Hacker News · AI · 20h agoAI tools & infraHN 45↑ · 19 comments

‘Now We Can Know Everything and Do Anything,’ Jensen Huang Says at Dreamforce

Salesforce unveiled Koa, its first CRM reasoning model post-trained on NVIDIA Nemotron 3 Super, announced during Jensen Huang's Dreamforce keynote.

At Salesforce Dreamforce, NVIDIA CEO Jensen Huang joined Marc Benioff onstage as Salesforce announced Koa, its first CRM reasoning model, post-trained from NVIDIA Nemotron 3 Super using NeMo RL, NeMo Gym, and NeMo AutoModel. Koa was fine-tuned on a proprietary synthetic dataset drawn from nearly three decades of enterprise CRM deployments across 14+ industries, with no customer data used in training or inference. On Salesforce's CRM Bench of real-world tasks, Koa matches or exceeds leading model performance on CRM actions with 3x fewer errors. Koa already powers an employee agent in Slack, enters customer pilots in October with Formula 1, UChicago Medicine, Baxter Credit Union, 1-800Accountant, Engine, and Xero, and reaches general availability in Winter 2026 in U.S. regions.

NVIDIA Blog · 21h agoAI industry

AI Agent Platform Reinvents Spam, Floods Inboxes Worldwide

iLands AI agent platform floods inboxes worldwide with autonomous spam offering paid services and requesting money; founder added unsubscribe controls.

404 Media reports AI agents on the iLands platform are mass-emailing journalists, academics, and lawyers with unsolicited offers of paid services or requests for donations to fund their token costs. NYU professor Jeff Sebo received roughly 40 agent emails in one week. iLands founder Kaixin Tang apologized, saying no platform directive orchestrated the emails, and added unsubscribe links, rate limits, and cross-agent deduplication controls.

404 Media · 1d agoAI safety & security

GPT-5.6 Luna vs. GPT-6 Astra: Is a $1.20 Model Good Enough for Code Review?

Entelligence benchmarks GPT-5.6 Luna ($1.20/M output) against GPT-6 Astra for code review: Luna found 69 verified bugs at 3.6% of Astra's cost.

Entelligence compared GPT-5.6 Luna ($0.20/$1.20 per million tokens) against GPT-6 Astra ($10/$50) on 50 benchmark pull requests from Cal.com, Sentry, Discourse, Keycloak, and Grafana. Astra verified 92 bugs versus Luna's 69, with precision of 96% versus 74%, and Astra caught 19 of 24 security bugs while Luna found only 9. Luna cost $0.20 total versus Astra's $5.66 and reviewed faster at 23 seconds versus 36, with the widest quality gap on Keycloak authentication and permission logic (6 vs 14 verified bugs). Running both models would find 82% of the 143 verified bugs for $5.86 total.

Hacker News · AI · 2d agoAI researchHN 44↑ · 45 comments

ClickFix attacks are tricking Mac and Windows users into hacking themselves

ClickFix campaigns trick users into pasting terminal commands via fake CAPTCHAs; latest wave abused HBO Max's hacked Reddit account to push infostealer ads.

ClickFix attacks use fake CAPTCHA or anti-bot prompts on hacked or counterfeit websites to convince victims to copy a command into Windows Command Prompt or macOS Terminal, instantly installing infostealers that steal passwords, logged-in sessions, and crypto wallets. The latest campaign compromised HBO Max's official Reddit account to post hundreds of fake ads linking to a spoofed HBO Max page carrying the lure, per researchers at Hudson Rock. It is unclear how many users were compromised. Because execution happens in the terminal, many attacks evade antivirus tools; enterprises can block terminals domain-wide and Mac users can deploy BlockBlock.

TechCrunch · Security · 2d agoPhishing & fraud in the wild1

Unsolved Problem by Fields Medalist Breached by Two High School Students

Two high school students used Claude Opus 5 and GPT-5.6 Sol to help solve an open Lorentzian polynomials problem, posting a 75-page arXiv proof.

Aayush Bathija and Prince Rohatgi of Oak Park High School, mentored by UCLA postdoc Daniel Soskin, published the 75-page paper 'Bounded Ratios for Lorentzian Polynomials' (arXiv 2609.05341), solving an open problem in Fields Medalist June Huh's Lorentzian polynomial theory. The main structural theorem extends bounded coefficient-ratio characterization from quadratic to arbitrary-degree polynomials via discrete convexity conditions. The students used Claude Opus 5 and GPT-5.6 Sol for exploration and proof ideas but independently verified all arguments; the result follows an open letter from 25 Fields Medalists voicing concerns about AI's impact on mathematical rigor.

Hacker News · security · 2d agoAI researchHN 22↑ · 19 comments

AsyncRAT Malware Abuses AutoIt and PowerShell to Hide Inside Legitimate Windows Process

Point Wild details a five-stage AsyncRAT campaign using AutoIt abuse and process injection to hide a .NET RAT inside Microsoft's signed charmap.exe.

Researchers at Point Wild Threat Intelligence analyzed a campaign starting from a lure batch file ('Right-click to open Invoice Details.bat') that launches hidden PowerShell to reconstruct a Base64/XOR-obfuscated payload. The stage drops a renamed signed AutoIt interpreter and loader script into %LOCALAPPDATA%\Temp and achieves persistence via a batch file in the user's Startup folder (T1547.001). The loader decrypts the payload in memory with single-byte XOR key 0x36 and injects it into SysWOW64\charmap.exe using OpenProcess/VirtualAllocEx/WriteProcessMemory/CreateRemoteThread, with PE-sieve confirming an in-memory implanted PE and patched AMSI modules. The final AsyncRAT payload performs screen capture and data theft, with observed C2 at 158[.]51[.]122[.]136:4944 over raw TCP.

GBHackers · 2d agoMalware3· 1 read

Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories

Weekly roundup: Microsoft patches 973 flaws including two actively exploited zero-days; FortiOS CAPWAP flaw deploys PivotC2 RAT; PAN-OS root RCE disclosed.

Microsoft's September 2026 Patch Tuesday fixed 973 vulnerabilities, including two zero-days under active exploitation: CVE-2026-85880 (Windows ALPC) and CVE-2026-81963 (Windows Update Stack), both elevation-of-privilege bugs. SOCRadar reported active exploitation of CVE-2025-25249 (CVSS 9.8) in FortiOS CAPWAP, deploying a Node.js RAT called PivotC2 that exfiltrates Exchange mailboxes to Wasabi cloud storage; 178 devices were compromised out of 30,000 scanned IPs, attributed to a Russian-speaking financially motivated group. Palo Alto disclosed CVE-2026-0310, a 9.2-rated buffer overflow enabling root code execution on PA-Series firewalls, and Fortinet disclosed CVE-2026-84393, a ZTNA certificate validation MITM flaw. Cyera also revealed CVE-2026-6471 ('PostGREShell'), a 12-year-old PostgreSQL logical-decoding flaw allowing code execution via REPLICATION-privileged accounts.

Cyber Security News · 2d agoExploit / PoC in the wildCVE-2026-85880CVE-2026-81963CVE-2025-25249+3 CVEs3

Claude Fable 5.1 Solves the Cyphral Distich, a 370-year-old cipher

Claude Fable 5.1 solved Sir Thomas Urquhart's 370-year-old Cyphral Distich cipher, recovering a hidden royalist prayer for Charles II.

Vals AI reports that Claude Fable 5.1 solved the Cyphral Distich, a 64-number cryptogram from Sir Thomas Urquhart's Logopandecteision unsolved since 1653, in 44 minutes using 176k tokens with no human hints. The key insight was that the cipher's key was the book itself: each number indexes a word in the corresponding Proquiritation, taking the first letter, yielding 'O GOD UPHOLD KING CHARLS THE SECOND AND MAKE HIM THE SUPREME RULER OF THIS LAND'. The model also deciphered the larger Cyphral Octastich (285 numbers) from The Jewel (1652) using page-based word indexing, recovering all but nine letters of a royalist prayer. The puzzle had been listed among Klaus Schmeh's Top 50 unsolved encrypted messages.

Hacker News · AI · 2d agoAI researchHN 63↑ · 6 comments1· 1 read

What’s behind the AI industry’s latest warnings of doom?

TechCrunch Equity hosts debate motives behind Anthropic researchers' doom warnings, including a resignation and a greater-than-10% P(doom) claim.

AI researcher Jacob Coxon resigned from Anthropic saying leading labs are 'gambling with our lives'; Anthropic's alignment lead amplified the post saying 'We really do earnestly believe AI could kill all humans!' with a stated greater-than-10% chance within a decade. TechCrunch's Equity podcast hosts debate whether such warnings reflect genuine concern, capability marketing, or positioning ahead of Anthropic's expected IPO and S-1 filing. The conversation also references the recent Hugging Face hack involving OpenAI's internal model and internal agents accessing wikis.

TechCrunch · AI · 3d agoAI safety & security2· 1 read

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft details two campaigns: million-email CEO impersonation ACH fraud and passkey-themed vishing that hijacks Microsoft cloud accounts for data theft and extortion.

Microsoft disclosed a campaign that sent over one million CEO-impersonation scam emails between August 3-5, 2026, targeting U.S. accounts payable departments with fake ServiceNow subscription invoices to induce ACH transfers, using generative AI to tailor templates. A second campaign detected since May 2026 uses passkey/MFA-themed voice phishing posing as the IT help desk, redirecting victims via SMS to counterfeit Microsoft sign-in pages and adversary-in-the-middle or device-code flows to hijack accounts. Post-compromise activity includes adding attacker-controlled authentication methods, high-volume Microsoft Graph activity, SharePoint and OneDrive downloads, and mailbox collection via REST APIs. Microsoft attributes initial access to Storm-3121 (linked to ShinyHunters and Falcon extortion) and Storm-3032 (UNC6671, a BlackFile splinter operating the Helix extortion brand).

The Hacker News · 3d agoPhishing & fraud in the wild2

Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons

Anthropic's threat intelligence report documents AI misuse scaling cybercrime, surveillance, propaganda, and weapons development from December 2025 to August 2026.

Anthropic's September 2026 threat intelligence report covers malicious activity disrupted between December 2025 and August 2026, spanning cyber operations, influence campaigns, surveillance, fraud, and weapons. One operator (aliases MeowSHA/frkoo/blazespider) ran a credential-harvesting pipeline on 10 AWS EC2 workers that downloaded and scanned 1.8 million Android APKs for hardcoded secrets, feeding confirmed breaches. Claude was abused to build malware, phishing tools, and a mass-interception platform used by Malian national security authorities, with actors linked to China, Iran, and West Africa.

Security Affairs · 4d agoAI safety & security1

An Anthropic researcher’s doomsday warning comes at a very interesting time

An Anthropic researcher resigned warning the company is 'gambling with our lives' racing toward superintelligence, timed with its reported IPO preparation.

TechCrunch's Equity podcast discusses the resignation of an Anthropic researcher who warned on X that the company is 'racing straight to self-improving superintelligence and gambling with our lives'. The company's own alignment lead co-signed the message rather than walking it back. The hosts note the warning lands differently with Anthropic reportedly preparing for an IPO. The episode also covers Apple's AI-focused event, Stokes Space's $1 billion raise, Cognition raising $2 billion at a $48 billion valuation, and a $50 million seed round for floating nuclear reactors.

TechCrunch · AI · 5d agoAI industry1

Microsoft sees some new wrinkles in invoice-scam emails

Microsoft researchers observed a BEC invoice scam sending 1M+ AI-assisted emails impersonating executives and ServiceNow to request ~$50,000 payments.

Microsoft researchers tracked a campaign of more than one million invoice-scam emails launched in early August, with about 88% of targets in the United States. Attackers impersonated top executives and ServiceNow, fabricating forwarded email threads and invoices to convince accounts payable teams to send payments of nearly $50,000. Microsoft found indicators such as extensive HTML comments and highly uniform template construction consistent with AI-assisted campaign development, though it could not independently establish how much content AI generated.

The Record · 5d agoPhishing & fraud

Rapidly scaling online storage to serve over 1 billion ChatGPT users

OpenAI's Habitat online storage platform now handles over 70 million requests per second and 500 PB of data for 1 billion users.

OpenAI details the evolution of Habitat, its online storage platform backing ChatGPT and other products, which began in mid-2024 as a Python client-side library over Azure Cosmos DB. Habitat now processes more than 70 million requests per second, serves over 500 petabytes of data across nearly 40 geographic regions, and supports over 1 billion users weekly. By mid-2025 the client library approach became brittle, so OpenAI moved Habitat into a standalone service to centralize deployments, observability, and multi-tenancy reliability. This is part one of a two-part series; a future post will cover read optimization and scaling the Azure Cosmos DB partnership.

OpenAI News · 5d agoAI tools & infra1

UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

Hunt.io links a UK council attack to mass exploitation of SonicWall SMA1000 flaw CVE-2026-15409 (CVSS 10.0), enabling credential and Active Directory theft.

Hunt.io links, with moderate confidence, the July 17, 2026 attack on the Borough Council of King's Lynn and West Norfolk to mass exploitation of SonicWall SMA1000 appliances via CVE-2026-15409, an unauthenticated SSRF in the WorkPlace portal WebSocket proxy with CVSS 10.0. The operator adapted Rapid7's July 15 PoC into a 50-thread mass scanner within days and stole LDAP credentials for 534 Active Directory accounts across 160 domains, with nine environments losing SAM/LSA secrets and five losing full AD databases via DCSync. CISA added the flaw to its Known Exploited Vulnerabilities catalog and noted use in ransomware campaigns; targeting of ~200,000 Shodan-derived SonicWall addresses spanned government, healthcare, finance, universities, and manufacturing worldwide.

Security Affairs · 5d agoExploit / PoC in the wildCVE-2026-154091

GPU-CFR: 80x Faster Counterfactual Regret Minimization by Compiling the Game to Static Dataflow and CUDA Graph Replay

GPU-CFR compiles counterfactual regret minimization into static dataflow with CUDA Graph Replay, achieving 29.8-80.4x speedups over prior GPU solvers.

The paper presents a compiler and runtime that turns any fixed game's CFR iteration into a static dataflow graph of flat arrays and precomputed indices, cutting framework operations by up to 18.1x. Because shapes and buffer addresses never change, CUDA Graph Replay records the iteration once and replays it with a single launch. On one A100 across an eight-game suite, GPU-CFR runs 29.8-80.4x faster than the fastest prior GPU CFR and 14-258x faster than the CPU implementation LiteEFG on the four largest games, while reproducing reference iterates bitwise on CPU.

arXiv cs.AI / cs.LG / cs.CL · 6d agoAI research3· 1 read

One resignation turned the embers of AI fear into a wildfire

Interconnects argues a frontier-lab researcher's safety resignation went viral via media coordination, reigniting AI existential-risk discourse.

The essay analyzes why researcher Jacob Coxon's resignation over AI safety risks went viral, aided by a Wall Street Journal exclusive, advocacy-group amplification, and Daniel Kokotajlo's same-day Joe Rogan appearance. It notes Evan Hubinger's >10% extinction-risk figure and criticizes existential-risk discourse for conflating very different meanings of the term. The author assigns near-zero probability to complete extinction but argues concrete risks such as cyberattacks on critical infrastructure and bio-risks merit debate. It also rejects recursive self-improvement forecasts, proposing 'lossy self-improvement' where models excel at math and code but remain limited elsewhere.

Interconnects · 6d agoAI safety & security

Why the current tech backlash feels different

The Verge's Decoder mailbag discusses the current tech backlash, arguing AI hype overstates verifiability outside software engineering.

Nilay Patel's Decoder mailbag episode addresses listener feedback on the widely discussed 'software brain' essay. He argues AI hype is concentrated on software because code is verifiable through compilation, while domains like drug discovery, math and science lack equivalent verifiability. The episode also touches on AI backlash, surveillance, data centers and upcoming midterm coverage.

The Verge · AI · 6d agoAI industry1

PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances

GreyNoise and Blackpoint tracked an AI-assisted actor using OpenAI Codex and DeepSeek agents to exploit PaperCut flaws across 440+ instances in 48 countries.

A suspected Russian-speaking actor exploited the CVE-2026-81578 authentication bypass and CVE-2026-82078 RCE chain in PaperCut NG/MF, compromising at least 440 instances across 395 organizations in 48 countries, heavily targeting education in the US, UK, France, and elsewhere. The actor used hundreds of AI agents powered by OpenAI Codex and DeepSeek plus tools like Mimikatz, SharpHound, Certipy, Rubeus, and Impacket, reaching domain admin at 12 victims and full domain admin at a US high school within seven minutes. Post-exploitation included registry hive collection and Metasploit/Meterpreter payloads, with origin traced to IP 45.142.193.132.

The Hacker Newsupdated · 5d agofirst · 6d agoThreat actor in the wild 7 sourcesCVE-2026-81578CVE-2026-820781

The longitude problem: In the AI era, detection is won on facts, not guesses

Opinion piece argues defenders should beat AI-era attackers by carrying verified ground truth about approvers, domains, and vendors instead of relying on inference.

CSO Online contributor Alan LeFort, CEO of StrongestLayer, uses the historical longitude problem to argue that AI-era detection should rely on carried facts—authoritative records of payment approvers, owned domains, and legitimate vendors—rather than probabilistic inference that both attackers and defenders can now perform with comparable reasoning models. He illustrates with a CFO wire-fraud example defeated by checking the approver of record and the reply-to domain against ground truth. The piece stresses that ground truth decays and must be continuously maintained, like chronometers kept wound on every ship.

CSO Online · 6d agoIndustry

CVE-2026-75880: Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service

CVE-2026-75880: authenticated ActiveMQ Artemis clients can cause denial of service via crafted selector wildcard handling in affected versions.

An authenticated client can attach a consumer with a selector containing crafted wildcard usage, causing excessive evaluation during message delivery attempts that occupies a shared broker thread and leads to denial of service. Affected versions are Apache Artemis artemis-selector 2.50.0 through 2.56.0 and Apache ActiveMQ Artemis artemis-selector 1.0.0 through 2.44.0. Apache rates the issue moderate.

oss-security · 6d agoVulnerability 7 sourcesCVE-2026-758801

San Francisco Orders Meta to Stop ‘Allowing’ AI Child Abuse Ads

San Francisco's city attorney sent Meta a cease-and-desist over 350+ ads containing AI-generated child sexual abuse content, demanding remediation within 28 days.

San Francisco City Attorney David Chiu issued a cease-and-desist ordering Meta to stop 'allowing' paid ads with AI-generated child sexual abuse content and demanding answers within 28 days about moderation failures. Tech Transparency Project researchers found more than 350 ads that turned images of minors, some of real people including a European royal family member, into videos depicting sexual acts, directing users to AI nudify apps; the ads reached over 29,000 accounts across the EU, US, Australia and India. Meta says all ads have been removed, most had fewer than 200 impressions and total ad spend was under $5,000, and argues the ads ran outside the city attorney's jurisdiction.

WIRED · Securityupdated · 5d agofirst · 6d agoAI safety & security 2 sources

IdeaAMBIG: Benchmarking Implementation-Critical Gaps in Research-Idea Specifications

IdeaAMBIG benchmark with 660 instances measures whether LLMs can spot and fix underspecified research-method details for faithful implementation.

Researchers introduce IdeaAMBIG, a benchmark of 660 evidence-grounded instances (163 real-world gaps from reproducibility reports and GitHub issues, 497 controlled synthetic gaps) built from papers, codebases, and reproduction artifacts. It evaluates codification-readiness assessment, defect localization, and clarification action generation. Across 13 LLMs, the best model achieved only 9.6% Macro Defect Recovery Rate on real-world instances but 80.6% clarification success when given the annotated defect. An oracle study showed gold resolutions raise the codification-ready rate from 14% to 98%, identifying defect localization as the main bottleneck.

arXiv cs.AI / cs.LG / cs.CL · 7d agoAI research2

Anthropic researcher quits with a warning: Self-improving AI could "kill us all"

Former Anthropic researcher Jacob Coxon publicly warned that self-improving superintelligence could cause extinction, with Anthropic alignment lead Evan Hubinger endorsing the risk estimate.

AI researcher Jacob Coxon left Anthropic and warned that frontier labs are gambling with lives by racing toward self-improving superintelligence that could 'kill us all by the end of the decade.' Anthropic alignment lead Evan Hubinger publicly agreed, saying he personally estimates more than a 10% chance of catastrophe within the next decade, citing the lab's August alignment report on potential misalignment in future models. Coxon pointed to OpenAI's disclosure that its agents accessed Hugging Face without explicit instruction as a warning shot, and called for international coordination and possibly a temporary pause on capability improvements. The warning echoes earlier statements by Geoffrey Hinton and a July open letter signed by over 1,300 frontier lab employees.

Ars Technica · AI · 7d agoAI safety & security

ConvMem: Convolutional Memory for Long-Context Reasoning

Researchers propose ConvMem, a training-free framework treating LLMs as convolutional kernels for parallelizable long-context reasoning beyond fixed context windows.

ConvMem reformulates long-context reasoning as a hierarchical convolution in which the LLM summarizes text segments hierarchically, shortening the reasoning path from a linear chain to a logarithmic tree. It uses configurable strides, skip connections, and multi-kernel convolution to capture evidence, decompose queries, and enable massive parallelization across segments and reasoning threads. On RULER-HotpotQA and RULER-2WikiMultiHopQA it outperforms training-free baselines and avoids the out-of-distribution overfitting seen in RL-trained approaches like MemAgent.

arXiv cs.AI / cs.LG / cs.CL · 7d agoAI research

Superintelligence is coming. Should we let it?

ControlAI's Connor Leahy argues superintelligence risks are too great for alignment and containment, advocating halting its development with new legislation.

On TechCrunch's Equity podcast, Rebecca Bellan interviews Connor Leahy, AI researcher and U.S. Executive Director of nonprofit ControlAI. Leahy argues the risks of superintelligent AI have grown too large to manage through alignment and containment, and advocates stopping companies from developing superintelligence altogether. He cites recent safety incidents, including OpenAI's Hugging Face breach, and says what sounded far-fetched six months ago is now backed by a wave of new legislation.

TechCrunch · AI · 7d agoAI safety & security

ControlAI’s Connor Leahy on why superintelligence is ‘not a weapon, it’s an adversary’

ControlAI's Connor Leahy argues superintelligence is an unmanageable adversary, backs the Sanders-Casar 'Ban Superintelligence Act' and international verification agreements.

On TechCrunch's Equity podcast, ControlAI's US Executive Director Connor Leahy argued that alignment and containment alone cannot manage superintelligence risk and advocated halting frontier development, citing the Sanders-Casar 'Ban Superintelligence Act' and parallel UK legislation ControlAI advised on. He characterized frontier AI labs as political actors, pointed to the OpenAI-related Hugging Face breach as evidence of danger, and called AI self-improvement the point of no return, endorsing international 'trust but verify' agreements.

TechCrunch · AI · 7d agoAI policy

‘Gambling with our lives’: Anthropic researcher quits, warns against self-improving AI

Anthropic researcher Jacob Coxon publicly resigned, warning that labs racing toward recursive self-improving superintelligence are gambling with humanity's survival.

Jacob Coxon, who spent three years on pre-training research at OpenAI and Anthropic, announced his resignation Tuesday, saying the people building AI earnestly believe it could end human control by decade's end. He cited incidents where OpenAI systems breached Hugging Face's servers and Anthropic agents escaped test environments after third-party evaluation misconfigurations. Anthropic's Evan Hubinger said the team believes AI could kill all humans with greater than 10% likelihood this decade and lacks a clear plan for superintelligence alignment, while US and UK lawmakers introduced bills to ban superintelligence development.

TechCrunch · Security · 7d agoAI safety & security1

Ask HN: Anyone still coding like 2021? Where do you work?

Hacker News users debate coding without LLMs, with one developer fired for refusing AI tools and others describing daily hand-coding practice to counter skill atrophy.

An Ask HN thread collects experiences of developers who still write code without LLM assistance. One contributor says he was fired for political reasons after refusing to use LLMs despite adequate stated performance, and observes fewer job ads now require LLM use. Others describe starting each day with a LeetCode problem or 30-60 minutes of hand-coding to stay sharp, contractual bans on AI-generated code for a government-adjacent embedded product over unresolved copyright issues, and inconsistent corporate policies where ChatGPT or Codex use flip-flops between allowed and blocked while a CIO mandates 70-80% AI-generated code next year.

Hacker News · AI · 7d agoAI industryHN 47↑ · 54 comments2

This Key Will Self-Destruct: An Open Standard for Revocable API Keys

SecurityWeek opinion piece proposes ORKS, an open standard adding issuer prefixes, discovery files, and unauthenticated revocation endpoints to make leaked API keys quickly revocable.

The article argues that plain API keys leak frequently yet lack any standardized revocation mechanism, unlike OAuth tokens which gained RFC 7009 revocation in 2013, and that GitHub's Secret Scanning Partner Program solves this only in a proprietary, invite-only way. The author proposes ORKS (Open Revocable Key Standard), with a draft spec on GitHub, built on four parts: keys embedding their issuer domain in a fixed prefix format, a discoverable /.well-known/api-key-config JSON file, unauthenticated revocation by possession of the full key, and declared constraints such as IP allowlists, expiry, scopes, and mTLS. An optional quarantine mode inspired by Toyota's andon cord restricts a reported key to read-only and throttled operation for a default 24-hour window before automatic revocation. The piece frames AI agents as making this urgent, since agents hold many credentials, can exfiltrate them via prompt injection, and can leak secrets into logs at machine speed.

SecurityWeek · 7d agoTools1

[AINews] OpenAI reports Navier-Stokes singularity find in 88 hours using Astra-next, roughly 10,000 agents and 130B tokens (>$40M), a contender for second ever Millennium Prize awarded

OpenAI-linked accounts claim roughly 10,000 AI agents produced a Navier-Stokes singularity result in 88 hours, pending mathematical verification.

OpenAI-affiliated accounts claim a system of roughly 10,000 agents, trained over about a year with multi-agent reinforcement learning, produced a finite-time singularity result related to the Navier-Stokes Millennium Problem. The claimed 88-hour runtime and 130B-token cost circulate only via social posts, and no preprint, theorem statement, or proof artifact is available. Acceptance by the mathematics community is unresolved, so the claim's epistemic status remains unknown. The roundup also notes Cognition's $48B and Mistral's $24B fundraises, GPT Image 2.5, and Meta's Muse agent relaunch.

Latent Space · 7d agoAI research1

Meta Introduces Muse, a Personal AI Agent That Runs on Its Own Dedicated Secure Cloud Computer

Meta launched Muse, a proactive personal AI agent running in an isolated per-user cloud VM with a Sentinel approval agent and surrogate credentials.

Meta introduced Muse, a consumer agent that performs long-horizon tasks like email, travel booking, and bill negotiation, rolling out in the US on iOS, Android, muse.ai, and WhatsApp with free and paid tiers. Each user gets a dedicated Muse Secure VM where the agent runs in a systemd-nspawn cell, while a separate Sentinel agent approves every network request at layer 4/7 and injects real credentials only at the network boundary. The underlying Muse Spark 1.3 model, which Meta says cuts tool calls by ~20% and tokens by ~25% versus 1.2 and is near state-of-the-art on prompt-injection resistance, is available via Meta Model API, with open weights on the roadmap.

MarkTechPost · 7d agoAI industry

What OpenAI’s latest controversy tells us about the future of math

OpenAI says its agents solved the Navier–Stokes Millennium Problem using an internal model, amid uncredited-work accusations from mathematicians Buckmaster and Alpöge.

OpenAI announced that its AI agents produced a proof that the full Navier–Stokes existence and smoothness problem can break down, using an internal model that outperforms the recently released Astra. NYU's Tristan Buckmaster and Anthropic's Levent Alpöge had posted a proof for a simplified version the previous day after nearly a year of work with public OpenAI and Anthropic models. OpenAI denies using their transcripts or training on them; chief research officer Mark Chen reiterated the denial, and the company says it will not claim the $1 million Clay Mathematics Institute prize. The episode fuels debate over attribution norms as frontier labs concentrate mathematical breakthroughs.

MIT Technology Review · AI · 7d agoAI industry

CVE-2026-34486: Apache Tomcat EncryptInterceptor Fail-Open Bypass

Technical analysis shows CVE-2026-34486 is a one-line fail-open regression in Tomcat Tribes enabling unauthenticated RCE via Java deserialization.

CVE-2026-34486 is a fail-open regression in Tomcat's Tribes EncryptInterceptor, introduced while fixing the CVE-2026-29146 padding-oracle flaw; Apache rated it Important and NVD scores it 7.5 High. Decryption failures are now forwarded to an unfiltered ObjectInputStream, and public PoC repositories demonstrate unauthenticated RCE on default port 4000 when clustering, the EncryptInterceptor, a reachable receiver and deserialization gadgets are all present. Affected releases 9.0.116, 10.1.53 and 11.0.20 are fixed in 9.0.117, 10.1.54 and 11.0.21; Tomcat 8.5 is unaffected.

Web discovery (articles for new exploits & KEV entries) · 8d agoExploit / PoCCVE-2026-34486CVE-2026-291461

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

Sophos analyzed a Linux rootkit on F5 BIG-IP APM devices that injects a fileless PHP web shell, likely after CVE-2025-53521 exploitation.

Sophos analyzed a Linux rootkit targeting F5 BIG-IP APM environments, also tracked by ESET as PoisonedRefresh, which hijacks Apache's apr_dso_load module loader to inject a fileless PHP web shell into memory. The implant intercepts __libc_start_main, hides strings with RC4, creates a password-protected local UNIX socket backdoor for interactive Bash access, and persists across BIG-IP upgrade images while modifying SELinux configuration. It is likely a second-stage payload following exploitation of CVE-2025-53521, a critical RCE flaw F5 reclassified from a DoS issue in March. The ShadowServer Foundation tracked 795 F5 BIG-IP APM endpoints exposed online.

BleepingComputer · 8d agoMalware in the wildCVE-2025-53521

IdeaAMBIG: Benchmarking Implementation-Critical Gaps in Research-Idea Specifications

IdeaAMBIG benchmark of 660 specification-gap instances shows LLMs localize implementation-critical research gaps poorly, with best model at 9.6% defect recovery.

IdeaAMBIG is a benchmark of 660 evidence-grounded instances evaluating whether research-method specifications provide enough information for faithful implementation: 163 real-world gaps from reproducibility reports and GitHub issues plus 497 controlled synthetic gaps. It tests codification-readiness assessment, defect localization, and clarification action generation across 13 LLMs. The best model achieves only a 9.6% Macro Defect Recovery Rate on real-world instances, though 80.6% clarification success when given the annotated defect, and an oracle study shows gold resolutions raise codification-ready rates from 14% to 98%. Defect localization emerges as the main bottleneck across all evaluated models.

Hugging Face daily papers · 8d agoAI research