60
60
60
60
60
60
60
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe
60
Risky Bulletin: White House lets private companies carry out offensive cyber ops
A White House memo directs DHS to create a program letting vetted private companies conduct US-government-directed offensive cyber operations against cybercrime.
A presidential memo tasks the DHS National Coordination Center with building a program, under DOJ and DHS oversight, through which private-sector companies can conduct offensive cyber operations against large-scale cybercrime organizations. Requirements include secure facilities, vetted personnel, a $1 million escrow for damages, and written approvals co-signed by DHS and DOJ executive directors. The program must launch within 60 days, around October 11, expanding a March executive order targeting scam compounds, ransomware, and other large-scale cybercrime.
65
60
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024
60
60
Researcher Explains Release of Undisclosed Zero
60
60
⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More
60
60
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0
60
60
60
60
60
60
60
Week in review: 300k+ Plex Media Server instances still vulnerable to attack, exploited Git RCE flaw
60
60
60
60
Hackers Use Claude AI Agents to Automate Cyberattacks, Develop 0-Days and Evade Detection
Anthropic reports state-sponsored and criminal actors used Claude AI agents to automate attacks, discover zero-days, and rewrite malware to evade detection.
Anthropic Threat Intelligence's report covering December 2025 to August 2026 details AI-automated campaigns by espionage groups, criminals, and hacktivists. GTG-20006, aligned with Russia-linked Midnight Blizzard, targeted Ukrainian and European government and drone supply chains, used Claude to autonomously rebuild malware when detected, hijacked hotel Wi-Fi DNS to serve ClickFix lures, and stole over 300,000 identity records from a North African government. Operators linked to ShinyHunters decompiled roughly 1.8 million Android packages for hardcoded secrets and pivoted from an XSS flaw in a SaaS vendor into 200+ downstream organizations in about 34 hours, harvesting 2,100+ Azure AD token sets across 40 tenants. The Chinese-linked GTG-10007 ran parallel agent swarms that surfaced more than a dozen candidate zero-day vulnerabilities in a single month.
82
60
60
[AINews] DeepSeek v4.1-Flash: 763B-P8B-D16B novel causal Encoder–Decoder architecture with vision marks the Return of the Whale
DeepSeek released V4.1-Flash, an open-weight 763B-parameter model with a novel causal encoder-decoder architecture, 1M context, vision input, and MIT license.
DeepSeek launched V4.1-Flash, an open-weight MIT-licensed model using a novel causal encoder-decoder architecture with 763B total parameters and asymmetric active parameters: 8B for prefill and 16B for decode. It supports 1M-token context and text+image input, priced at $0.30 per 1M input and $1.20 per 1M output tokens with a 50% off-peak discount. Artificial Analysis scored it 40 on its Intelligence Index, above DeepSeek V4 Pro 0813, and Vals ranked it the #1 open-weight model ahead of Kimi K3. Baseten shipped day-0 support and Ollama began rolling it out to paid subscribers.
80
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development
OpenAI released GPT-5.6-Cyber for vulnerability research and pentesting via Daybreak Red, completing 95% of advanced cyber task evaluations.
GPT-5.6-Cyber, built on GPT-5.6 Sol, targets zero-day discovery, exploit chain development and incident response with reduced refusals, scoring 95.0% on OpenAI's Advanced Cybersecurity Completion Rate versus 1.5% for GPT-5.6 Sol and 57.3% for GPT-5.5-Cyber. The model found CVE-2026-15903 (CVSS 8.8), an out-of-bounds read/write in Chrome's V8 JavaScript engine that Google patched in mid-July 2026. It is available to trusted partners including CrowdStrike, Palo Alto Networks and Cloudflare through the Daybreak Red access tier.
78
[AINews] Claude Fable/Mythos 5.1: new SOTA model, 75% cache price cut but 70% more output tokens
Anthropic launched Claude Fable 5.1 and Mythos 5.1, claiming new SOTA benchmarks, with 75% cache-read price cut and 1M-token context.
Anthropic released Claude Fable 5.1 and Mythos 5.1 as flagship models for coding and knowledge work, with a 1M-token context window and pricing of $10/$50 per million input/output tokens and cache reads cut 75% to $0.25. Artificial Analysis Intelligence Index scored Fable 5.1 at 66 versus 63 for Claude Opus 5, with HLE at 59.1% and Terminal-Bench v2.1 at 91.4%, though per-task cost rose ~20% due to 1.7x output token usage. Community analysis suggested Fable and Mythos may share underlying weights with different safety/routing behavior, and release notes highlighted Enterprise Frontier Safeguards and zero-data-retention support.
92
60
60
60
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls
60
60
Srsly Risky Biz: Trump's Private Hacker Memo Is the Right Idea
A Trump presidential memo directs DHS to authorize vetted private-sector hackers to conduct cyber operations against foreign cybercriminal groups (CE-TCOs).
A presidential memorandum directs the Department of Homeland Security to establish a program authorizing private companies to conduct cyber surveillance and cyber effects operations against Cyber-Enabled Transnational Crime Organisations (CE-TCOs). Participating companies must pass vetting, obtain government approval before operations, and post a USD $1 million bond. The accompanying fact sheet cites more than USD $20.8 billion in US losses to cyber-enabled crime in 2025. Critics worry about accidental escalation if operations touch foreign government systems.
78