ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “switch”

210 stories in the last 30d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 30AI safety & security 24Industry 22Tools 17Threat actor 16AI research 14Vulnerability 13Malware 13Research 12Exploit / PoC 11Phishing & fraud 10Advisory 9Policy & legal 8Model release 6
SeverityAllcritical 8high 35medium 39low 6info 128

The AI Kill Switch Act is repeating the Clipper Chip’s mistakes

Op-ed argues the AI Kill Switch Act repeats the Clipper Chip's mistake by mandating backdoors into frontier AI systems.

The op-ed criticizes the AI Kill Switch Act, sponsored by Reps. Ted Lieu and Nathaniel Moran, which would let CISA require frontier AI labs to build the ability to throttle, suspend, or shut down their systems. The author compares this to the 1993 Clipper Chip, whose Law Enforcement Access Field was found flawed in 1994, and argues mandated kill switches would create deliberate weaknesses in AI agents embedded in banking, power grids and other critical infrastructure. It also flags the bill's exemption of red-teaming incidents and CAISI's incomplete agent security standards, recommending mandatory red-teaming and liability frameworks instead.

CyberScoop · 16d agoAI policy

Switching Password Managers in 2026

An Apple password-management engineer (writing personally) explains switching password managers via iOS direct app-to-app export, crediting FIDO Credential Exchange for passkey portability.

Ricky Mondello, an Apple engineer in password management and authentication (writing personally, not for Apple), demonstrates moving 100 items from 1Password to Apple Passwords via the iOS system export, which transfers passwords, passkeys, verification codes, and notes directly between apps with Face ID confirmation and no intermediate files. He credits the FIDO Alliance's Credential Exchange format (first draft May 2024, now an open spec) and iOS 26/macOS 26 for enabling phishing-resistant credential transfer between apps like 1Password, Bitwarden, Dashlane, DuckDuckGo, and Devolutions. The post is advice rather than news, recommending bulk transfer on the existing device, switching AutoFill to the new app, and treating the new manager as the source of truth.

Lobsters · security · 8d agoIndustry1

Cisco Fixed Critical RCE in Nexus 9000 Series Switches

Cisco patched CVE-2026-20212 (CVSS 9.8) in Silicon One-based Nexus 9000 switches, allowing unauthenticated remote root code execution via TCP ports 43210/43211.

Cisco patched CVE-2026-20212 (CVSS 9.8), a flaw in the Silicon One integration for Nexus 9000 Series switches that lets unauthenticated remote attackers execute code with root privileges. TCP ports 43210 and 43211 are exposed through the default Layer 3 VRF, and exploitation can also crash the S1HAL process, forcing device reloads. Cisco TAC discovered the flaw during a support case; PSIRT is not aware of public disclosure or malicious exploitation. Workarounds include infrastructure ACLs or blocking the exposed ports, alongside a Live Protect shield pending fixed NX-OS upgrades.

Security Affairs · 12d agoVulnerabilityCVE-2026-20212

Nintendo Switch Vulnerability Allows Attackers to Run Unauthorized Code on Your Console

Nintendo patched CVE-2026-82079, a CVSS 7.0 stack buffer overflow in original Switch local wireless allowing nearby code execution via QR-code workflows.

Nintendo patched CVE-2026-82079 (CVSS 4.0 base score 7.0, High), a stack-based buffer overflow in the original Switch's local wireless networking affecting firmware earlier than 23.0.0. An adjacent attacker must scan a QR code displayed by the console, via the Album "Send to Smartphone" feature or Mario Kart Live: Home Circuit, before crafted packets can corrupt memory and enable return-oriented programming for arbitrary code execution. EPSS is approximately 0.16%, Switch 2 is not affected, and Nintendo's advisory was published September 10, 2026.

Cyber Security Newsupdated · 1d agofirst · 2d agoVulnerability 2 sourcesCVE-2026-82079

Train Smarter, Not Harder: Switching Signal-Guided Training in Active Learning

HybridAL is an active-learning training schedule that switches from retraining to fine-tuning on stabilization signals, saving up to 49% time.

Researchers find that choosing between retraining from scratch and fine-tuning is an exploitable decision variable in active learning: retraining helps in early rounds while fine-tuning is safer once the model trajectory stabilizes. HybridAL monitors an online stabilization signal using spectral exponent change and accuracy change, switching from retraining to fine-tuning after sustained stabilization. Across three encoder backbones and six text-classification tasks with five seeds each, HybridAL keeps endpoint macro-F1 non-inferior within a 0.010 margin, saves up to 49% of retraining time, and improves the time-calibration trade-off measured by negative log-likelihood.

Hugging Face daily papers · 10d agoAI research

Orchid Security targets AI agent risk with drift detection and kill switches

Orchid Security launched identity drift detection and application-level kill switches to govern AI agents that exploit enterprise identity debt.

Orchid Security announced AI readiness controls including agent discovery, continuous drift detection between an agent's intended purpose and observed behavior, and application-level kill switches that revoke credentials, disconnect tools, or suspend agent workflows. The company cites its Identity Gap 2026 finding that 57% of enterprise identity is unseen and unmanaged, which agents can leverage to gain elevated access in seconds to minutes. New integrations include a certified PAM integration for Palo Alto Networks Idira and identity telemetry streaming to Splunk Enterprise Security. The launch follows agentic enhancements to Orchid's Identity Control Plane in May 2026 and cites NIST's draft Cyber AI Profile and DORA as regulatory drivers.

Help Net Security · 7d agoAI safety & security

Tell HN: OpenAI brings back 5 hour limit for plus and business standard users

OpenAI reinstated a 5-hour usage limit for Plus and Business Standard subscribers, sparking Hacker News debate about subsidized inference pricing and subscription value.

A Hacker News discussion reports that OpenAI has brought back a 5-hour usage limit for Plus and Business Standard users. Commenters debated whether cheap tokens are a subsidized customer acquisition strategy, whether AI companies have sustainable margins on inference, and how switching costs between providers affect dependency. The thread reflects community sentiment on pricing and usage caps rather than an official policy announcement.

Hacker News · security · 9d agoAI industryHN 126↑ · 142 comments

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

Cisco patches critical CVE-2026-20212 (CVSS 9.8) in Nexus 9000 switches allowing unauthenticated remote root code execution, plus IOS XR hardening release.

Cisco released fixes for CVE-2026-20212 (CVSS 9.8), a flaw in 10 Silicon One-based Nexus 9000 switch models that binds a service to an unrestricted IP, leaving TCP ports 43210/43211 reachable in the default Layer 3 VRF and allowing unauthenticated remote attackers to execute code as root; exploitation attempts can also crash the S1HAL process. 45 NX-OS releases (10.3(1) through 10.6(3s)) are affected, with mitigations including infrastructure ACLs, the Live Protect shield lp00031, and fixed releases identified via Cisco's Software Checker. Cisco simultaneously issued an IOS XR hardening release bundling 7 umbrella CVEs, two rated 9.8 (CVE-2026-20274 for memory-safety bugs and CVE-2026-20279 for access-control bugs), affecting all releases with SMUs available for 14 releases and upgrades required for 93 of 111 listed releases. No malicious exploitation was reported as of the September 2 disclosure.

The Hacker News · 13d agoVulnerabilityCVE-2026-20212CVE-2026-20274CVE-2026-20279+5 CVEs

Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability

Cisco patches unauthenticated RCE in Nexus 9000 Silicon One switches exposed via TCP ports 43210 and 43211 in the default L3 VRF.

Cisco disclosed and patched a vulnerability in the Silicon One integration for Nexus 9000 Series switches that allows an unauthenticated remote attacker to execute code with root privileges. The flaw stems from TCP ports 43210 and 43211 being accessible in the default Layer 3 VRF. Exploitation can also crash the S1HAL process and force an affected device to reload. Cisco has released software updates, and workarounds are available to mitigate exposure.

Cisco Security Advisories · 14d agoVulnerability

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

Cisco fixed a stored cross-site scripting flaw in Industrial Ethernet 1000 series switches exploitable by authenticated remote users.

Insufficient validation of user-supplied input in the web-based management interface of Cisco Industrial Ethernet 1000 Series Switches allows stored XSS. An authenticated remote attacker can inject malicious code into specific interface pages and execute arbitrary script in another user's context. Exploitation requires valid credentials; Cisco has released software updates.

Cisco Security Advisories · 28d agoAdvisory

Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

Cisco released a fix for a management-plane flooding DoS in IE-1000 switches that can make the device manager, SSH, or API inaccessible.

Insufficient protection against management plane flooding in Cisco Industrial Ethernet 1000 Series Switches allows an unauthenticated remote attacker to send high-rate ICMP, SSH, or HTTP traffic, raising CPU usage and causing a denial-of-service condition on the device manager web GUI, SSH, or API. Data traffic through the device is not affected. Cisco has released software updates to address the issue.

Cisco Security Advisories · 28d agoAdvisory

Six Chinese AI firms accused of aggressively copying US frontier models

NSA, CISA, and FBI accuse DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of industrial-scale distillation of US frontier models via API abuse.

A joint NSA, CISA, and FBI release alleges six Chinese AI firms have extracted capabilities from US frontier models, including Claude, GPT, Gemini, and Grok, since at least late 2024, likely with Chinese government awareness. Tactics include bulk procurement of premium subscriptions with fraudulent accounts, proxy routing to evade geo-restrictions, and prompt injection to force models to reveal hidden chain-of-thought reasoning. Agencies recommend stronger identity verification, monitoring of anomalous usage, and quietly downgrading or adding noise to responses for suspected distillers, while warning these mitigations could frustrate legitimate users.

Ars Technica · AIupdated · 4d agofirst · 6d agoAI safety & security in the wild 7 sources

Windows memory integrity switches on automatically for eligible devices in October 2026

Microsoft's Windows quality updates will automatically enable memory integrity and Virtualization-based Security on eligible devices starting October 2026.

Beginning in October 2026, Windows quality updates will automatically enable memory integrity on eligible devices and turn on Virtualization-based Security where it is not already running. Memory integrity restricts kernel-mode execution to trusted, signed code and drivers, blocking kernel compromise and rootkits. Microsoft said existing administrator decisions remain in effect, and readiness checks weigh hardware capability, compatibility, and performance. Memory integrity also underpins hotpatch updates that install without a reboot, so unprotected devices are excluded from that servicing model.

Help Net Security · 13d agoAdvisory

Defining an AI Kill Switch Is Hard, but Necessary

Proposed legislation could require companies to throttle, suspend, or shut down AI agents, but implementation questions remain open.

Dark Reading examines draft legislation that would mandate companies maintain the ability to "throttle, suspend, or shut down" AI agents. The piece argues that defining how and when to trigger such an AI kill switch is technically and legally difficult but necessary for AI governance.

Dark Reading · 19d agoAI policy

Automobile Camouflage to Hide from Flock Cameras

Schneier on Security highlights a printed vehicle-camouflage pattern tested to defeat Flock surveillance cameras and Axon body cameras.

The post discusses covering cars with printed patterns designed to fool Flock automated license-plate recognition software, with testing reportedly done against Flock and Axon body cameras. Reader comments question effectiveness against other ALPR vendors, Flock's RF MAC-address upgrade, and whether such camouflage might become regulated. The page also contains off-topic comment threads about anti-bot over-blocking and privacy.

Schneier on Security · 9d agoResearch

Cisco searched for IOS XR bugs and found so many it rolled them into an update release

Cisco patched three critical flaws, including CVE-2026-20212 unauthenticated remote root code execution in Nexus 9000 switches; no exploitation observed yet.

Cisco disclosed three critical-rated flaws found during a comprehensive internal security review. CVE-2026-20274 and CVE-2026-20279, both CVSS 9.8, affect the IOS XR carrier-grade operating system and are fixed in newly released versions. CVE-2026-20212 lets unauthenticated remote attackers execute code with root privileges on some Nexus 9000 Series Switches by reaching TCP ports 43210 and 43211 in the default Layer 3 VRF; no software fix exists yet, only infrastructure ACL mitigations. Cisco says it has not observed attacks against these flaws.

The Register · Security · 12d agoVulnerabilityCVE-2026-20274CVE-2026-20279CVE-2026-20212

Risks in IoT Supply Chain

Unit 42 analyzes multilayer IoT supply chain risks across hardware, firmware, and software, citing counterfeit Cisco switches and OpenWrt attacks.

Unit 42 examines weaknesses in the IoT supply chain ecosystem across hardware, firmware, operation, and vulnerability layers, noting that 89% of IT decision-makers reported IoT device growth and IDC forecast 41.6 billion connected IoT devices by 2025. Examples include counterfeit Cisco Catalyst 2960-X switches with possible backdoor access (F-Secure, July 2020), a March 2020 OpenWrt flaw enabling malicious update impersonation, and threat actor interest in TeamViewer remote support software. The report stresses that untracked third-party components and missing device inventories make it hard to assess vulnerability impact across vendors.

Palo Alto Unit 42 · 28d agoResearch

Tracking the Unseen: An Occlusion-Robust Framework for Target Tracking Under Full and Long-Term Occlusion

Occlusion-robust tracker combining YOLOv11n, Kalman filtering, and appearance Re-ID cuts identity switches and beats OccluTrack by 18.1% MOTA on OVIS.

The framework integrates YOLOv11n object detection, Kalman Filter motion prediction, and occlusion-aware appearance-based re-identification to maintain target identity through full and long-term occlusion. Six Re-ID architectures were evaluated under identical conditions, with the Occlusion-Aware Mask Network (OAMN) performing best. On the public OVIS dataset it improves MOTA by 18.1% and IDF1 by 25.1% over OccluTrack while reducing identity switches by 12.8%; on a custom military surveillance dataset it achieves MOTA 0.734 and IDF1 0.729.

arXiv cs.AI / cs.LG / cs.CL · 1d agoAI research

12 Best Enterprise Browsers Compared (2026): Features & Pricing

2026 comparison of twelve enterprise browsers ranks Island and Palo Alto Talon as purpose-built leaders, with Chrome Enterprise and Edge free or bundled.

Guide compares twelve enterprise browser options across three models: purpose-built secure browsers (Island, Talon, Surf), layered controls on existing browsers (Chrome Enterprise, Edge for Business, LayerX, Seraphic), and streamed/isolated browsers (Kasm). Island and Palo Alto's Prisma Access Browser lead the purpose-built category for BYOD and contractor DLP. It also notes Mammoth Cyber has ceased operations.

GBHackers · 1d agoTools

Tell HN: iOS 27 does not allow Apple Intelligence to be disabled

Hacker News discussion argues Apple Intelligence is a marketing umbrella for disparate long-standing ML features, explaining why iOS 27 lacks a disable switch.

A 'Tell HN' post reports that iOS 27 does not allow users to fully disable Apple Intelligence. Discussion replies argue 'Apple Intelligence' is a marketing term covering disparate features rather than a single product. Commenters cite long-standing local-model features such as image OCR, battery-life prediction, and the Latent Semantic Mapping text classification framework available since 2007.

Hacker News · security · 1d agoAI industryHN 30↑ · 2 comments

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT backdoor on Windows machines across East and Southeast Asia.

Gen Digital found that China-linked UNC3569, a hacker-for-hire group tracked by Google since 2021, exploited a flaw in Sogou Input Method's Windows sgbiz: link handler to reach a sandbox-disabled Chromium 80 build and exploit 2021's CVE-2021-38003 for code execution. The chain delivered GRAYRABBIT, a remote shell backdoor capable of file transfer and module loading, via a 7-Zip DLL sideloading trick gated on process count. Tencent fixed the handler flaw in April 2026 but the embedded browser remains outdated. Sogou has over 455 million monthly users and roughly 70% share of Chinese input methods.

The Hacker Newsupdated · 2d agofirst · 5d agoThreat actor in the wild 3 sourcesCVE-2021-38003

Your passkeys can now move between password managers on Android

Google enabled direct password and passkey transfers between Android password managers, initiated from the destination app without unencrypted file exports.

Android now supports moving passwords and passkeys directly between password managers without exporting them to a file, replacing the previous unencrypted-export workflow. The transfer is initiated in the receiving app, which hands off to Android to detect installed managers and request authorization in the source app. The feature works today with Google Password Manager, 1Password, Bitwarden, and Dashlane, with more partners promised but unnamed. Google says data moves between apps in seconds and calls the handoff secure, without detailing the protections.

Help Net Security · 6d agoTools

Powering AI is an architecture problem

Sponsored analysis argues AI data centers need medium-voltage, inline power architecture after Virginia grid faults knocked over 3GW of load offline.

A sponsored MIT Technology Review piece recounts a July 22, 2026 transmission fault in Ashburn, Virginia that shed more than 3 GW of data center load, and a 2024 incident where one failed surge arrester dropped about 60 facilities and 1,500 MW. It argues legacy UPS-based power stacks fail at AI scale because campuses can swing 70% of load in milliseconds and trip offline during grid disturbances. The proposed fix moves protection to medium voltage (13.8 kV and above) in inline enclosures near substations, improving density, permitting timelines, and backup power economics. A full-scale system tested at the DOE National Laboratory of the Rockies cleared ERCOT large-load ride-through requirements.

MIT Technology Review · AI · 6d agoAI industry1

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

Alby warns a critical flaw in internet-exposed Alby Hub Bitcoin wallets (v1.7.0–v1.18.5) could allow takeover and fund theft; update to v1.24.0.

Alby disclosed a critical flaw in Alby Hub, its self-hosted Lightning wallet, affecting versions v1.7.0 through v1.18.5 when the management interface is reachable from the internet. The flaw could let attackers take over a wallet and send its funds; one affected user has been reported so far, with no word on losses. Versions v1.19.0 and later contain the fix, and Alby advises updating to v1.24.0, binding port 8080 to localhost or firewalled sources, and changing unlock passwords on previously exposed hubs. Full technical details will be published later under responsible disclosure.

The Hacker News · 7d agoVulnerability in the wild1

This Key Will Self-Destruct: An Open Standard for Revocable API Keys

SecurityWeek opinion piece proposes ORKS, an open standard adding issuer prefixes, discovery files, and unauthenticated revocation endpoints to make leaked API keys quickly revocable.

The article argues that plain API keys leak frequently yet lack any standardized revocation mechanism, unlike OAuth tokens which gained RFC 7009 revocation in 2013, and that GitHub's Secret Scanning Partner Program solves this only in a proprietary, invite-only way. The author proposes ORKS (Open Revocable Key Standard), with a draft spec on GitHub, built on four parts: keys embedding their issuer domain in a fixed prefix format, a discoverable /.well-known/api-key-config JSON file, unauthenticated revocation by possession of the full key, and declared constraints such as IP allowlists, expiry, scopes, and mTLS. An optional quarantine mode inspired by Toyota's andon cord restricts a reported key to read-only and throttled operation for a default 24-hour window before automatic revocation. The piece frames AI agents as making this urgent, since agents hold many credentials, can exfiltrate them via prompt injection, and can leak secrets into logs at machine speed.

SecurityWeek · 7d agoTools1

Chrome is now shipping updates every 2 weeks as AI changes the security landscape

Google switches Chrome to two-week release cycles starting with Chrome 153, shrinking the N-day patch gap as AI-driven threats accelerate.

Chrome officially moved from a four-week to a two-week release schedule with Tuesday's launch of Chrome 153 on desktop, iOS, and Android. Google ties the change to its evolving security strategy, saying faster releases shrink the N-day patch gap as AI tools and community bug reports increase patch volume. Mozilla, Microsoft, and Brave have already adopted the two-week cadence, and Google is also racing AI-native browsers like Brave, Dia, Opera Neon, and Perplexity's Comet while experimenting with AI features in Chrome.

TechCrunch · Security · 8d agoIndustry

LLM Forensics: Where Do Backdoors Hide? Localizing and Controlling Trigger Mechanisms with Sparse Autoencoders

Researchers use sparse autoencoders to localize trigger-based backdoor mechanisms in 1B and 8B LLMs, finding detection features differ from causal control features.

In a controlled language-switching backdoor setting where fixed trigger sequences make 1B and 8B language models continue English prompts in French or German, the authors train sparse autoencoders (SAEs) across layers and transformer components. Attention and MLP features detect triggered prompts with near-perfect F1, but ablating them rarely suppresses the language switch, while residual-stream features can suppress triggered generation and some can induce target-language continuations without the trigger. The work decomposes token-trigger mechanisms into distinct SAE feature roles: trigger detection, residual-stream propagation, and language tracking, a decomposition the authors expect to transfer to other trigger-based backdoors.

arXiv cs.AI / cs.LG / cs.CL · 9d agoAI safety & security1

CVE-2026-20212: Cisco Nexus 9000 RCE Flaw

Cisco disclosed CVE-2026-20212, a critical unauthenticated remote code execution flaw in the Silicon One integration of Nexus 9000 switches.

Cisco has disclosed CVE-2026-20212, a critical vulnerability in the Silicon One integration used by certain Nexus 9000 switches. The flaw allows an unauthenticated remote attacker to achieve remote code execution. The source excerpt does not state active exploitation or provide patch details.

SOCRadar · 12d agoVulnerabilityCVE-2026-20212

Triage & Response Bottlenecks Eating into MSSP Margins: How to Remove the Friction

ANY.RUN says manual triage bottlenecks erode MSSP margins and promotes its Threat Intelligence Lookup and sandbox to cut Tier 1 workload by up to 20%.

Vendor blog post from ANY.RUN describes recurring MSSP triage and response bottlenecks: manual alert validation, unnecessary Tier 2 escalations, manual handoffs, outdated threat data, and disconnected tools. It cites a healthcare MSSP case study where the Tier 1 closure rate rose from 20% to 70% and false escalations dropped 34% after adopting its tools. The piece claims ANY.RUN can reduce Tier 1 workload by up to 20%, letting MSSPs absorb more clients without proportional headcount growth.

ANY.RUN · 14d agoIndustry

An AI CAPTCHA solver talked itself out of the right answer

Bern researchers solved rotation CAPTCHAs in 0.006 seconds with classical computer vision, while Gemini 3.1 Pro needed 67 seconds and overruled correct tool answers.

Researchers at Bern University of Applied Sciences built a script using 1970s circle-detection math and signal matching that solved rotation CAPTCHAs in 0.006 seconds, scoring 10/10 on real-world puzzles. Frontier models fared poorly: Gemini 3.1 Pro scored 7/10 taking 67 seconds, while GPT-4o and Grok scored 1/10. When given the script's correct answer as a tool, Gemini overruled it and lost a fifth of its score; models could verbally describe targets, such as identifying a cyan ring, but could not produce accurate click coordinates. The paper also notes these no-JavaScript CAPTCHAs reduce tracking, leaving only shape-matching tasks classical vision solves easily.

Help Net Security · 14d agoAI research1

DavidAU/Qwen3.8-27B-TURBO-Fable-Cold-Fusion-735-882-Heretic-Uncensored-NEO-CODER-MAX-MTP-GGUF — new model trending #8 on Hugging Face

A new Qwen3.8-27B GGUF fine-tune claims ARC-C 735 at 8-bit with thinking tokens cut 2x-10x versus the base model.

Independent creator DavidAU released a GGUF fine-tune of Qwen3.8-27B built with Unsloth, claiming ARC-C of 735 at 8-bit and 719 at 4-bit, trending #8 on Hugging Face. The 'TURBO' variant cuts thinking tokens by one half to as much as one tenth while retaining output quality and detail. The repo ships both regular and MTP quants and claims gains over the base model across seven benchmarks, using 'Cold Fusion (GAIN + Unsloth)' and 'Fable Fusion 711' training methods.

Hugging Face trending models · 15d agoModel release

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claudenew

Researchers showed a single browser extension could hijack AI agents in Chrome, Edge, Comet, Opera Neon and Claude in Chrome, earning $20,000 in bounties.

Forever Security demonstrated that a browser extension with two common permissions could seize the trusted page controlling built-in AI assistants in five Chromium-based products and drive the agent, read local files, or access the camera. Chrome's flaw was fixed as CVE-2026-0628 (CVSS 8.8) in Chrome 143.0.7499.192, and Microsoft fixed CVE-2026-55945 (CVSS 4.2) in Edge 150.0.4078.48. Perplexity Comet was the worst case: a hijacked agent could read any file, leak browsing history, take screenshots, and act as the user via an unsecured test subdomain. All attacks require a malicious extension already installed; no in-the-wild exploitation or KEV listing was reported as of September 16, 2026.

The Hacker News · 2h agoAI safety & securityCVE-2026-0628CVE-2026-55945

ANY.RUN & SentinelOne: One Workspace, Instant Context for Rapid Response

ANY.RUN integrates its interactive sandbox, IOC lookups, and STIX/TAXII threat feeds natively into SentinelOne for faster automated malware triage.

ANY.RUN and SentinelOne launched connectors that embed interactive sandbox analysis and threat intelligence into the SentinelOne console via Singularity Hyperautomation. Suspicious files and URLs from alerts are automatically submitted to the ANY.RUN sandbox, with behavioral verdicts and risk scores returned into alert notes. On-demand IOC lookups draw on sandbox history from 16,000 organizations and 700,000 analysts. A separate STIX/TAXII feed streams verified malicious IPs, domains, and URLs through the SentinelOne Marketplace TAXII Connect app.

ANY.RUN · 10h agoTools

AI for everyone in every language

Google says its AI now spans 300+ languages reaching 7 billion people, unveiling Gemini 3.5 Transcribe, Live Translate, and TranslateGemma models.

Google announced its technologies now support more than 300 languages spoken by 7 billion people, 86% of the global population. Gemini 3.5 Live Translate powers real-time spoken translation across 70 languages and 2,000+ language pairs, while Gemini 3.5 Transcribe is its most precise speech-to-text model. Its Universal Speech Model was trained on 12 million hours of audio using cross-lingual transfer learning, and TranslateGemma is a family of lightweight open translation models covering 55 languages that run on-device. Open-data partnerships include WAXAL covering 27 Sub-Saharan African languages and Project Vaani with 30,000+ hours of speech across 109 languages.

Google · AI · 1d agoAI industry

Australia is replacing the Essential Eight with a new cyber framework. Here’s how exposure management can help you get ahead of it.

Australia's ASD is replacing the Essential Eight with an outcomes-based Essentials series covering IT, cloud, OT and likely agentic AI, with deprecation from mid-2027.

The Australian Signals Directorate announced in June 2026 that the Essential Eight will be replaced by an outcomes-focused Essentials series structured as chapters covering enterprise IT (including identity and SaaS), cloud, OT, and likely agentic AI. Deprecation begins around mid-2027 with full retirement around mid-2028, though timelines are targets; the Essential Eight is mandatory for roughly 98 non-corporate Commonwealth entities but voluntary for private firms. Tenable argues the shift demands continuous security posture evidence via exposure management rather than point-in-time checklist assessments.

Tenable Blog · 1d agoPolicy & legal1

[AINews] AEF-1 standard emerges for Third Party Evaluators, as Xai, OpenAI, and Anthropic all cosign

xAI, OpenAI, and Anthropic cosign the AEF-1 third-party evaluation standard while Dario Amodei proposes embedded evaluators for safety verification.

The AI Evaluator Forum published AEF-1, a baseline standard for independent third-party AI evaluations covering access, conflicts of interest, funding relationships, recusal, and transparency, cosigned by xAI, OpenAI, and Anthropic. Dario Amodei wrote a rare personal blogpost proposing embedded evaluators such as METR with desks, badges, company laptops, and internal-risk-team-level access to verify safety commitments, plus democratic and global coordination frameworks. The roundup also covers the pacing debate: Bilal Chughtai left Google DeepMind arguing progress may outrun alignment, while critics including Aidan Gomez and Cohere push back against slowdowns and lab gatekeeping. Additional items include Cline Desktop's launch with open-weight model support.

Latent Space · 1d agoAI safety & security

With iOS 27, I’m actually using Siri again

Apple's rebuilt Siri, powered by Google Gemini models in iOS 27, finally handles complex multi-step and on-screen-context requests, per TechCrunch review.

Apple's iOS 27 ships a redesigned Siri built on Google's Gemini models, supporting multi-step instructions, on-screen context, file/message/email lookups, and camera viewfinder queries. Siri AI gets a dedicated app with chat history, plus settings for voice and expressiveness. Apple Intelligence also adds natural-language Shortcuts creation and automatic password rotation in the Passwords app.

TechCrunch · AI · 1d agoAI industry

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

DDRop uses a sub-$200 DDR5 interposer to drop memory writes, breaking Intel TDX and AMD SEV-SNP confidentiality guarantees.

Researchers at KU Leuven, ETH Zurich, Durham University, and Google will present DDRop at ACM CCS 2026, a first active interposer attack on DDR5 that silently drops memory writes so processors keep reading stale encrypted data, exploiting the missing freshness guarantee in Intel TDX, Intel Scalable SGX, and AMD SEV-SNP. On Intel TDX's default logical integrity mode it enabled reading victim VM memory, toggling debug mode, and forging remote attestation; AMD SEV-SNP was limited to copying pages between VMs. TDX's stronger cryptographic integrity blocks cross-VM attacks but likely not attestation forgery. The team will release board designs, firmware, and attack code on GitHub; no evidence of real-world use exists and no simple patch is available.

The Hacker Newsupdated · 1d agofirst · 2d agoResearch 2 sources

UK.gov begins killing off passwords for 23 million users

UK government rolls out passkeys to 23 million GOV.UK One Login users, saving £600 daily in SMS costs and resisting phishing.

The UK government is expanding passkey sign-in across GOV.UK One Login for more than 23 million users after a trial with over 300,000 people. Nearly one in ten daily One Login sign-ins already use passkeys, which the government says are up to eight times faster than password plus 2FA code. The switch saves taxpayers nearly £600 per day in SMS costs, and the NCSC is encouraging adoption while passwords remain optional.

The Register · Security · 2d agoPolicy & legal

WhatsApp Restricted Chat locks a conversation to your primary phone

WhatsApp is developing Restricted Chat, a per-chat setting blocking conversation sync to linked devices, defeating third-party clients and AI agents.

Restricted Chat, spotted in Android beta version 2.26.36.5 but not yet enabled, keeps a chosen conversation exclusively on the primary phone, out of reach of WhatsApp Web and linked secondary devices. It extends Advanced Chat Privacy controls: media is not auto-saved to gallery, export is blocked, and messages cannot be handed to Meta AI, with system messages notifying participants of changes. WhatsApp has not announced a release date.

Help Net Security · 2d agoIndustry