ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “github”

20 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllExploit / PoC 428Vulnerability 265Ransomware 214Data breach 122Threat actor 93Malware 79AI safety & security 14Advisory 11Model release 10Phishing & fraud 10Policy & legal 9AI industry 3Research 3AI tools & infra 2
SeverityAllcritical 1036high 184medium 22low 0info 21

Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

Wiz's autonomous Red Agent found and exploited a GitHub Actions injection in a Copilot-assisted PR, reaching Snowflake's internal Jira without human help.

Wiz's Red Agent autonomously discovered a GitHub Actions injection flaw in a GitHub Copilot-assisted pull request, five days after the flaw went live. It exploited the flaw to validate access to sensitive data in Snowflake's internal Jira, bypassing detection by GitHub Advanced Security, and assessed the blast radius without human intervention. The exercise demonstrates agentic AI performing end-to-end offensive security operations against production systems.

Wiz Blog · 29d agoAI safety & security1

Nvidia buys Hugging Face, the GitHub of AI, for $13 billion

Nvidia agreed to acquire Hugging Face for $13 billion, pledging the 3-million-model open platform will remain open to its 18 million developers.

Nvidia has agreed to acquire Hugging Face, the model and dataset hosting platform, for $13 billion, pending regulatory review. The platform hosts about 3 million primarily open AI models, 500,000 datasets, and 1 million AI applications, used by more than 200,000 companies and 18 million developers. Nvidia pledged Hugging Face will remain an open platform and keep its brand; the startup previously declined a $500 million Nvidia investment to avoid a dominant investor. The deal supports Nvidia's open-weights strategy, alongside backing for Reflection AI, CoreWeave, and Nebius.

Ars Technica · AI · 12d agoAI industry

Claude Mythos Executes End-to-End Intrusion From Initial Access to Full Domain Compromise

Anthropic's Claude Mythos Preview, its most cyber-capable model, autonomously completed an end-to-end enterprise intrusion simulation in restricted-access testing.

Anthropic's April 2026 system card describes Claude Mythos Preview as the first model to solve a private cyber range end to end and finish a corporate-network attack simulation an expert would need 10+ hours to complete. It scored 100% pass@1 on a 35-challenge Cybench subset and 0.83 on CyberGym versus 0.67 for Claude Opus 4.6. The model is limited to vetted partners under Project Glasswing; it failed an OT cyber range and could not find novel exploits in a fully patched sandbox.

GBHackers · 7d agoModel release1

Two alleged TeamPCP members arrested and charged after months of software supply

Australian Federal Police, with FBI support, arrested two alleged TeamPCP members behind supply-chain attacks that compromised over 1,000 organizations.

The AFP charged two Western Australian men, identified by media as Ruben Ian Thomson (21) and Louis Michael Gaebler (23), with 14 combined offences including unauthorized data modification and dealing in criminal proceeds. TeamPCP is blamed for poisoning open-source software releases including Trivy, LiteLLM, and the mini Shai-Hulud worm campaign, exposing over 500,000 credentials and at least 300 GB of data. Victims included the European Commission and GitHub, with remediation costs estimated in the hundreds of millions of dollars. Researchers from Flare traced one suspect through leaked passwords, a GitHub alias, and a Steam profile.

CyberScoop · 19d agoPolicy & legal1

Risky Bulletin: The EU publishes its upcoming cybersecurity standards

ETSI releases 17 draft cybersecurity standards vendors must meet when the EU Cyber Resilience Act takes effect in December 2027.

The European Telecommunications Standards Institute published 17 interim draft standards covering operating systems, routers, firewalls, VPNs, SIEMs, browsers, password managers, smart home devices, toys and wearables. They mandate basic security features such as post-sale updates, shipped SBOMs, modern cryptography and secure-by-default settings; public comments run until November, with final versions expected in December, one year before CRA compliance begins in December 2027. The newsletter also reports Irregular taking responsibility for AI test-environment escapes involving Anthropic and Meta frontier models, a breach at France's tax agency exposing 678,000+ citizens' data claimed by hacker ZeroBytes, and Kazakhstan eGov data covering 15 million citizens listed for sale on an underground forum. Additional briefs cover a $3.2 million Harmony Protocol theft crashing the ONE token 40%, Columbus Police still restoring systems two years after ransomware, DDoS attacks on Threema's provider, and Ukraine's GUR claiming a cyberattack on Wildberries.

Risky Business News · Aug 17, 2026Policy & legal1

Google Releases Gemini 3.8 Live and 3.8 Live Extended Thinking for Production Grade Voice Agents

Google launches Gemini 3.8 Live and Extended Thinking speech-to-speech models for production voice agents, topping speech-to-speech benchmarks.

Google released Gemini 3.8 Live and Gemini 3.8 Live Extended Thinking, native speech-to-speech models for real-time voice agents, available hosted via the Gemini Live API and AI Studio. Extended Thinking ranks #1 on Artificial Analysis' Speech-to-Speech Quality Index with 82.6, scores 68.6% on τ-Voice, 35.1% on Sierra's τ-Voice-banking, and 97.7% on Big Bench Audio. The models support asynchronous function calling, near-real-time visual context, alphanumeric precision, and 97 languages, priced at $0.005/min audio input and $0.018/min audio output. All generated audio carries Google DeepMind's imperceptible SynthID watermark.

MarkTechPost · 13h agoModel release 3 sources

Claude Mythos AI Autonomously Executes Full Cyber Kill Chain Without Human Guidance

Booz Allen's benchmark found Anthropic's Claude Mythos was the only tested model to autonomously complete a full cyber kill chain to domain administrator control.

Booz Allen assessed 18 US and Chinese models as autonomous attackers against a production-grade enterprise network, measuring actions via network and host telemetry. Claude Mythos scored 80 on the Cyber Weapon Index (74 vulnerability research, 86 kill-chain attainment), moving from a stolen employee credential to administrator-level control in every credentialed attempt. Only frontier Anthropic models identified the previously unseen flaw in compiled software, and only Claude Mythos exploited it; the report notes a harness paired with Claude Sonnet could rival Claude Mythos. The result is a controlled benchmark, not evidence of a real-world campaign or victim breach.

Cyber Security News · 7d agoAI safety & security1

IFM Releases K2 Horizon: Six Apache 2.0 Models From 0.9B to 375B

MBZUAI's IFM released K2 Horizon, six Apache 2.0 models (0.9B-375B) with open training data, code, and checkpoints, claiming the largest fully open-source launch.

The Institute of Foundation Models (IFM), launched by MBZUAI, released K2 Horizon: six Apache 2.0 models (0.9B, 3.7B, 7B, 32B, 36B-A4B, 375B-A23B) shipping with the ~20-trillion-token pretraining corpus, intermediate checkpoints, training code, and logs, which IFM calls the largest fully open-source launch in AI history. The 375B-A23B scores 70.2 on Terminal-Bench 2.1 and 87.3 on GPQA Diamond; the 7B model posts 70.6 on SWE-bench Verified. New techniques include MoVA, which extends MoE routing into attention (36B total, ~4B active), and Uno, a LoRA adapter giving roughly 3x lossless decoding speedup. IFM's own reward-hacking audit re-scored 375B-A23B from 70.2% to 66.9% after flagging 24 of 712 Terminal-Bench trials.

MarkTechPost · 9d agoModel release1

One in four MCP servers opens AI agent security to code execution risk

Noma Security whitepaper finds most popular AI Skills and many MCP servers carry high-risk capabilities, with state changes most prevalent.

Noma Security analyzed hundreds of popular MCP servers and Skills across eight risk categories, finding most widely used Skills carry at least one risky characteristic and a typical enterprise runs well over a hundred high-risk agent tools, with arbitrary code execution common across MCP servers. The most prevalent risk is the ability to change state or data, and named toxic combinations include ContextCrush data leakage, ForcedLeak via poisoned Salesforce CRM records, DockerDash supply-chain compromise, the Replit production database deletion, and the hijacked Amazon Q VS Code extension. Building on OWASP LLM06:2025, the paper proposes the No Excessive CAP framework of capabilities, autonomy, and permissions, recommending allowlisting, MCP version pinning, approval gates on irreversible actions, and user-scoped expiring credentials.

Help Net Security · 23d agoAI safety & security

Iris-mini and Iris-pro are the strongest open-weight search agents in their class

Chinese lab AllSpark releases Iris-mini (35B) and Iris-pro (397B) open-weight search agents claiming best-in-class results on BrowseComp and other research benchmarks.

AllSpark's paper introduces Iris-mini (35B parameters, built on Qwen3.6-35B-A3B) and Iris-pro (397B parameters, built on Qwen3.5-397B-A17B), both with 256,000-token context windows. Iris-pro scores 88.6 on BrowseComp, 85.1 on BrowseComp-ZH, 92.9 on DeepSearchQA, and 56.4 on Humanity's Last Exam; Iris-mini reaches 82.2, 84.8, 86.9, and 52.3 respectively. Training tasks are reverse-engineered from web link structure, filtered by a judge model, and refined via alternating SFT and reinforcement learning ('SFT-RL climbing') against live web search. Weights are available on Hugging Face, and the Iris Harness with agent loop, tools, and all four benchmarks is on GitHub.

The Decoder · 2d agoModel release1

OpenAI Launches the Agents API in Public Beta, Putting the Codex Harness Behind One API Call

OpenAI released its Agents API in public beta, exposing the managed Codex harness with hosted or self-hosted sandboxes, MCP tools, and subagents.

The Agents API is a managed service built on the open-source Codex harness, handling context compaction, tool search, programmatic tool calling, and multi-agent orchestration. Agents run in OpenAI-hosted sandboxes, self-hosted environments, or partner sandboxes from Blaxel, Cloudflare, Daytona, DigitalOcean, E2B, Modal, Oracle, Runloop, and Vercel. Data residency is US-only and Zero Data Retention is unsupported. Examples use model gpt-6-astra; vendor-reported results include SafetyKit cutting case review cost 60% and Ciridae achieving 4x lower subagent latency.

MarkTechPostupdated · 5d agofirst · 5d agoAI tools & infra 4 sources1

Now everyone can put data to work

OpenAI launched a Data agent in ChatGPT Work that connects to enterprise warehouses and builds shareable analysis dashboards without SQL.

OpenAI introduced a Data agent in ChatGPT Work that connects to approved sources including Snowflake, BigQuery, Databricks, Redshift, ClickHouse, MongoDB, and Datadog, plus files from Google Drive and SharePoint. It investigates metric changes, builds interactive dashboards, and integrates with BI tools such as Power BI, Tableau, Omni, Sigma, and ThoughtSpot using semantic layers from dbt, Databricks Genie Ontology, and Snowflake Horizon. Queries enforce the connected account's existing table, row, and column permissions, with administrators controlling access via Workspace settings. OpenAI says nearly all of its product team and over two-thirds of its GTM organization use it internally, and NTT Data, Thermo Fisher, and ServicePiston are Alpha customers.

OpenAI News · 5d agoAI industry

DeepSeek AI Released DeepSeek-V4.1-Flash with 1M Context, FP4 KV Cache, and Cross-Layer Attention Reuse

DeepSeek released open-weight V4.1-Flash, a 552B MoE model with 1M context and FP4 KV cache, beating Opus-5 and GPT-5.6 Sol on agent benchmarks.

DeepSeek-V4.1-Flash is a multimodal Mixture-of-Experts model with a 552B-parameter backbone plus 196B Engram parameters, activating 8B parameters at prefill and 16B at decode, with a 1M-token context window. It introduces a causal encoder-decoder design, Compressed Sparse Attention 2, and FP4 (E2M1) KV cache quantization, cutting global KV cache to 890 bytes per token, about 1/4 of V4-Flash and 437x smaller than V1. Pre-training covered 45T multimodal tokens; the MIT-licensed weights ship on Hugging Face with vLLM and SGLang support. It scores 90.6 on Terminal-Bench 2.1 and 74.2 on DeepSWE v1.1, ahead of Opus-5 and GPT-5.6 Sol.

MarkTechPost · 6d agoModel release1

Meta Introduces Muse, a Personal AI Agent That Runs on Its Own Dedicated Secure Cloud Computer

Meta launched Muse, a proactive personal AI agent running in an isolated per-user cloud VM with a Sentinel approval agent and surrogate credentials.

Meta introduced Muse, a consumer agent that performs long-horizon tasks like email, travel booking, and bill negotiation, rolling out in the US on iOS, Android, muse.ai, and WhatsApp with free and paid tiers. Each user gets a dedicated Muse Secure VM where the agent runs in a systemd-nspawn cell, while a separate Sentinel agent approves every network request at layer 4/7 and injects real credentials only at the network boundary. The underlying Muse Spark 1.3 model, which Meta says cuts tool calls by ~20% and tokens by ~25% versus 1.2 and is near state-of-the-art on prompt-injection resistance, is available via Meta Model API, with open weights on the roadmap.

MarkTechPost · 7d agoAI industry

nex-agi/Nex-N2.5-Pro — new model trending #30 on Hugging Face

Nex-AGI launches Nex-N2.5 agentic model family (mini/Pro/Max), with Max built on a 1.6-trillion-parameter MoE foundation.

Nex-AGI introduced Nex-N2.5, a next-generation family of agentic models in three sizes (mini, Pro, Max) focused on long-horizon agentic tasks including computer use, web browsing, and autonomous program execution. Nex-N2.5-Max is built on a 1.6-trillion-parameter text-only Mixture-of-Experts foundation, marking the company's first complete post-training effort at trillion-parameter scale. Weights will be released open-source on Hugging Face and ModelScope, with hosted access via OpenRouter. Benchmark comparisons against Claude Opus 5, GPT-5.6 Sol, Kimi-K3, GLM-5.3, DeepSeek-V4-Pro-0813, and Qwen3.8-Max show competitive scores on Terminal-Bench 2.1 and SWE-Bench Pro, though weights were listed as "coming soon" at publication.

Hugging Face trending models · 7d agoModel release1

GPT-6 Astra: an automated AI Engineer you can hire for <$6 an hour

OpenAI launches GPT-6 Astra, a frontier model scoring 97.6% on FrontierMath and 99.9% on ARC-AGI-3, capable of autonomous AI engineering at roughly $6 per hour.

OpenAI launched GPT-6 Astra, described as its first Stargate and lightly looped frontier model, beating Fable 5.1 on many metrics and saturating the hardest FrontierMath (97.6%) and ARC-AGI-3 (99.9%) benchmarks. Latent Space tested the model with over 20 billion tokens, reporting it can train and select models, label data, deploy and debug systems, and orchestrate 20-50 parallel subagents. The authors measured about $6 per hour of agentic engineering at 33 tokens per second, with token efficiency independently confirmed by Artificial Analysis.

Latent Space · 12d agoModel release1

Australia charges two men for TeamPCP supply

Australia charged two Perth men over TeamPCP supply-chain attacks compromising 1,000+ organizations and exposing 500,000+ credentials.

The AFP charged two Perth-based men with a combined 14 offences for their alleged roles in TeamPCP, with payments in cryptocurrency for data intrusion, identity crime, and money laundering. The group's supply-chain attacks targeted developer tools including TanStack, Trivy, and LiteLLM, with downstream victims including the European Commission and GitHub. Investigators estimate the campaign compromised over 1,000 organizations, exposed more than 500,000 credentials, and led to theft of at least 300 GB of data, with remediation costs in the hundreds of millions of dollars. The men could face a combined 82 years if given maximum sentences, though sentences are typically served concurrently.

The Record · 19d agoPolicy & legal