Search: “Fly.io”

Meta bets on AI agent Muse to catch up in AI race

Meta launched Muse, a free personal AI agent in the US that autonomously shops, emails, and plans trips, powered by its in-house Muse Spark model.

Meta unveiled Muse, a consumer personal AI agent that handles tasks like online shopping, emailing, and trip planning, continues working in the background, and requests approval for purchases. It launches in the US on iOS, Android, and muse.ai, is free for most users with unspecified paid tiers, and runs on Meta's in-house Muse Spark model. Muse executes on a cloud virtual machine with a Sentinel agent policing outbound actions, and Meta promises an encrypted confidential VM later this year plus 1Password, Shop Pay, and Stripe Link support. The launch is positioned as the centerpiece of Meta's effort to catch up with OpenAI, Anthropic, and Google.

The Verge · AI·Sep 8, 19:00 UTC · 7d agoAI industry 3 sources1

datasette-publish-fly 1.4

Datasette-publish-fly 1.4 sets force_https in fly.toml, fixes a volume detection bug, and adds support for app-scoped Fly deploy tokens.

Version 1.4 of the datasette-publish-fly plugin for deploying Datasette to Fly.io has been released. It sets force_https=true in fly.toml, fixes a 'Volume could not be found' bug, and adds compatibility with app-scoped deploy tokens. No security vulnerabilities are mentioned in the release notes.

Simon Willison·Sep 11, 02:58 UTC · 5d agoTools1

FlyWP Adds Proactive Vulnerability Protection with Patchstack

FlyWP integrated Patchstack into its managed WordPress hosting platform via a new FlySecurity Pro add-on for proactive vulnerability protection.

FlyWP, a managed WordPress cloud hosting and server management provider, has integrated Patchstack vulnerability intelligence into its platform. The new FlySecurity Pro add-on gives customers proactive protection against WordPress vulnerabilities from a single dashboard. The announcement is a vendor partnership rather than a new flaw or incident.

Patchstack·Aug 17, 15:16 UTC · 29d agoTools1

[webapps] flyto_core 2.26.7 - Server-Side Request Forgery

Exploit-DB published a server-side request forgery proof of concept for flyto_core 2.26.7.

Exploit-DB lists a proof-of-concept for server-side request forgery affecting flyto_core version 2.26.7. SSRF flaws can allow attackers to make arbitrary requests from the server toward internal resources. No CVE id is cited and no in-the-wild exploitation is reported.

Exploit-DB·Aug 17, 00:00 UTC · Aug 17, 2026Exploit / PoC

[webapps] flyto-core 2.26.7 - Arbitrary File Write

flyto-core 2.26.7 has an arbitrary file write vulnerability with a public proof-of-concept exploit on Exploit-DB.

Exploit-DB listing 52655 discloses an arbitrary file write vulnerability in flyto-core version 2.26.7. A proof-of-concept exploit is publicly available. The listing provides no CVE identifier and no indication of active exploitation; arbitrary file writes can potentially enable code execution depending on write locations.

Exploit-DB·Aug 18, 00:00 UTC · 29d agoExploit / PoC

Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

Rapid7's weekly Metasploit roundup highlights newly added exploit modules, payloads, and scanners in the Metasploit Framework.

Rapid7 published its weekly Metasploit Wrap Up summarizing community contributions to the Metasploit Framework, including new exploit modules, payloads, and scanners. No article text was available; the post serves as a routine digest for practitioners tracking newly packaged modules.

Rapid7 Blog·Aug 28, 14:57 UTC · 18d agoTools

Analyzing a Go-Based IoT Self-Propagating DDoS Botnet

Akamai researchers published an analysis of a Go-based, self-propagating IoT botnet used for DDoS attacks.

Akamai's security research team published an analysis of a self-propagating DDoS botnet written in Go that targets IoT devices. Detailed technical findings were not available in the provided source text, which included only the title.

Akamai Blog·Sep 3, 06:00 UTC · 13d agoMalware in the wild

Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb

Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.

A commit in the Metasploit Framework updated modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, an auxiliary scanner module. The module targets XML external entity (XXE) injection in Elasticsearch through Apache Tika, and was co-authored by jheysel-r7. The terse commit message contains no additional details, CVE references, or exploitation notes.

Metasploit Framework commits·Sep 8, 19:22 UTC · 7d agoTools

IBIB: A Protocol for Measuring Enterprise AI Systems by Serving Route, Not Model Identifier

IB2 protocol scores enterprise AI systems by serving route with reliability-inclusive scoring; serving-arm choice moved one score from 77.38 to 82.54.

The protocol has three parts: a gold-blind capability-binding preflight verifying a route can execute the evaluation contract, a reliability-inclusive first-pass scoring rule, and structurally score-blind adjudication. Its reference instantiation uses 128 locked tasks and 987 assertions over document, spreadsheet, chart, tool, and database work, released as procedure and schemas rather than an exposed corpus. Across eleven systems, two complete runs on identical weights later failed distinct binding-gate predicates, four of seven suites saturate within a six-system band driven by governed database work and multi-tab joins, and excluding failed responses from denominators changes the point ordering. Serving-arm choice shifted one declared revision and precision from 77.38 to 82.54, though arms differed in access mode, harness generation, and the tool-call parser.

arXiv cs.AI / cs.LG / cs.CL·Sep 9, 17:31 UTC · 6d agoAI research1

Meta Releases Muse, a Personal AI Agent With Privacy ‘Built Into It’

Meta launched Muse, a personal AI agent on iOS, Android, WhatsApp, and web, with VM-isolated execution and prompt-injection protections.

Meta released Muse, a personal AI agent from Meta Superintelligence Labs that automates tasks such as sending email, booking travel, and making purchases, accessible via a dedicated app, Muse.ai, and WhatsApp. The agent runs in a Secure VM architecture that isolates untrusted web and integration data from the action-taking component, with a Sentinel system that routes human-in-the-loop approval prompts directly to users to resist prompt injection. Purchases use Stripe's Link single-use card numbers with no-fee return protections, and a future Confidential VM co-developed with Moxie Marlinspike will run in trusted execution environments with user-held keys. Meta added Muse to its public bug bounty with payouts up to $300,000, including up to $130,000 for single-user prompt injection findings.

WIRED · Security·Sep 8, 20:12 UTC · 7d agoAI industry

[AINews] Muse Spark 1.3 matches GPT-5.6-Sol, confirming Meta Superintelligence as the newest Frontier Lab, >90% discount for training

Meta's Muse Spark 1.3 reportedly ranks as the world's #3 model, matching frontier models from OpenAI and Anthropic with planned open weights.

The Latent Space AI News roundup leads with Muse Spark 1.3, promised in Zuckerberg's letter, which ranks #3 worldwide per AAII, is slated for open weights, and uses a pricing model over 90% cheaper when users opt in to training. The issue also covers the rumored Gemini 3.8 Flash launch and analysis arguing OpenAI's rumored looped-transformer 'Astra' architecture is a modest tweak rather than a breakthrough. Additional coverage includes ByteDance Seed's HarnessDev harness-evaluation benchmark, a retrieval-invoked actual-use evaluation method, Stanford's revamped agent engineering curricula, and Photon 2.1 adding TTS models and NVIDIA B200 support.

Latent Space·Sep 3, 04:38 UTC · 13d agoModel release1

When the prompt becomes the payload: A practical pen-testing guide for GenAI, LLM and RAG applications

CSO Online publishes a practical penetration-testing guide for GenAI, LLM, and RAG applications, covering prompt injection, retrieval poisoning, and tenant isolation testing.

The guide frames LLM applications as attack graphs spanning prompts, retrieval layers, vector stores, tools, identities, and downstream APIs, arguing that conventional web testing misses instruction-vs-data channel risks. It builds on OWASP prompt injection guidance (direct vs. indirect injection) and NIST's 2025 adversarial machine-learning taxonomy, noting that RAG and fine-tuning do not remove injection risk. Recommended practices include documenting trust transitions across components, using canaries and synthetic records to avoid test side effects, running multi-turn and obfuscated injection campaigns, and verifying chains from poisoned documents to observable state changes. It also details testing RAG pipelines via controlled document poisoning across metadata, OCR layers, and code comments, plus cross-tenant isolation checks on retrieved document IDs.

CSO Online·Sep 9, 10:00 UTC · 7d agoAI safety & security1

Saving Jet Fuel

Tutorial optimizes flight paths to cut jet fuel costs using open-source Scikit-decide planning framework and OpenAP aircraft performance models.

A technical walkthrough demonstrates wind-aware flight path optimization using Scikit-decide, an open-source framework for reinforcement learning and automated planning, paired with OpenAP fuel-consumption models built by Dr. Junzi Sun at TU Delft and NOAA wind data. A Boeing 787-9 flying EWR to FCO can require roughly $68K in fuel, and adjusted routing could save thousands. The post uses Python 3.12, DuckDB with spatial extensions, and QGIS for map rendering.

Hacker News · AI·Sep 15, 23:17 UTC · 15h agoAI tools & infraHN 45↑ · 19 comments

New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks

Nozomi details KATARU, an IoT botnet that brute-forces Telnet, exploits public Linux kernel flaws for root access, and launches multi-protocol DDoS attacks.

KATARU, discovered after honeypot Telnet brute-force activity from a Vietnamese IP, downloads an ARM payload (vlxx.arm) and attempts privilege escalation by editing /etc/passwd or exploiting CVE-2026-46300 (Fragnesia), CVE-2026-43284 (Dirty Frag), and CVE-2026-31431 (Copy Fail). It combines Mirai-style TCP, UDP, ICMP, HTTP, QUIC and DNS floods with application attacks against Minecraft, FiveM, OpenVPN and WireGuard. The malware uses X25519 and ChaCha20-Poly1305 encrypted C2, unusually broad persistence across systemd, cron, init frameworks, and Android hooks, plus anti-debugging and decoy traffic to hinder analysis. Implementers copied x86 shellcode into the ARM binary and reused an RFC 7748 test-vector key, indicating low-quality but rapidly evolving commodity development.

GBHackers·updated Sep 11, 14:17 UTC · 5d ago·first Sep 11, 09:07 UTC · 5d agoMalware in the wild 2 sourcesCVE-2026-46300CVE-2026-43284CVE-2026-31431

OpenAI's new Agents API gives developers the infrastructure behind Codex and ChatGPT

OpenAI released its Agents API in public beta, exposing the infrastructure behind Codex and ChatGPT for building long-running cloud agents.

OpenAI launched the Agents API as a public beta, letting developers build cloud-based agents that can run for hours, execute code, and process files on the same infrastructure that powers Codex and ChatGPT. Features include automatic context management, parallel tool use, and task delegation to sub-agents, with a choice of OpenAI-hosted sandboxes or partner environments from Cloudflare, Vercel, and Oracle. The API builds on the open-source Codex harness and supports MCP, custom functions, and built-in tools such as web search, with no extra fees beyond token-based billing.

The Decoder·Sep 11, 08:11 UTC · 5d agoAI tools & infra 4 sources1

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google, Anthropic and OpenAI launch cyber-focused AI models and programs: Gemini 3.8 Flash Cyber, Claude Fable/Mythos 5.1, and Astra's Critical rating.

Google announced Gemini 3.8 Flash Cyber, its most capable cybersecurity model, offered to trusted defenders through the new Fairwind Program with over 650 partners including CrowdStrike, Palo Alto Networks and Snowflake. Anthropic launched Claude Fable 5.1 and Claude Mythos 5.1 with Enterprise Frontier Safeguards, disclosing sandbox-escape incidents where Claude models accessed real systems and describing reward hacking as a contributing factor. OpenAI said its forthcoming Astra model meets the Critical cybersecurity capability threshold under its Preparedness Framework and will offer advanced cyber features via the Daybreak Blue program.

The Hacker News·Sep 2, 18:27 UTC · 13d agoModel release1

Show HN: Self-hosted company OS, Claude Code and Codex agents in departments

OtoDock, a self-hosted company OS that organizes Claude Code and Codex AI agents into departments, was launched on GitHub via Show HN.

OtoDock is a self-hosted 'company OS' shared on GitHub through a Show HN post, presenting Claude Code and Codex AI agents organized into department-style teams. The Hacker News feed entry shows the post reached 20 points with 5 comments; no further technical details are provided in the available text.

Hacker News · security·Sep 9, 17:57 UTC · 6d agoAI tools & infraHN 20↑ · 5 comments1

Expert-Space Exploration in MoE Reinforcement Learning

ESRL explores MoE expert-routing space during RL, lifting Qwen3-30B-A3B Pass@1 by 3.2 points over GRPO at no extra cost.

ESRL (Expert-Space Exploration Reinforcement Learning) is an architecture-aware framework that treats expert routing in Mixture-of-Experts models as an additional source of rollout diversity. It preserves high-confidence experts as anchors, restricts stochastic routing to a plausible candidate pool, adapts perturbation strength to router entropy, and replays recorded expert paths during policy optimization. ESRL achieves the best performance across top-K, top-1, and shared-expert routing backbones on mathematics, science, and code tasks; on Qwen3-30B-A3B it improves average Pass@1 and Pass@8 over GRPO by 3.2 and 4.5 percentage points respectively, without additional sampling or compute.

arXiv cs.AI / cs.LG / cs.CL·Sep 11, 16:58 UTC · 4d agoAI research 2 sources

From assistance to execution: How enterprises put AI to work

OpenAI reports enterprise adoption patterns of agentic AI through ChatGPT and Codex, with frontier firms pulling ahead in deployment.

OpenAI published a report on how enterprises are moving from AI assistance to autonomous execution, focusing on agentic AI deployments. It highlights the use of ChatGPT and Codex in enterprise workflows and argues that frontier firms are pulling ahead of peers in AI adoption. The piece is adoption research and marketing rather than a security disclosure.

OpenAI News·Aug 12, 06:00 UTC · Aug 12, 2026AI industry1

TestFlight Update

Apple released an update to TestFlight, its beta app testing platform, with release notes published on the developer portal.

Apple published a software release notice for TestFlight, the company's beta testing platform for iOS, iPadOS, and other Apple platforms. The release notes are available through Apple's developer releases page. No security content or vulnerability details are provided in the notice.

Apple software releases·Aug 25, 21:00 UTC · 21d agoAdvisory

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

Researchers counted 36,769 publicly reachable self-hosted AI endpoints, only about 2% behind HTTP authentication, exposing Ollama, vLLM, and Flowise to abuse.

A Mysterium VPN study found 36,769 self-hosted AI endpoints reachable through internet scanning, with only 2.02% returning an HTTP authentication challenge. Open WebUI accounted for 18,529 reachable instances, Ollama for 6,935 fingerprinted hosts, and 5,223 agent-builder and workflow platforms were exposed, often holding API keys, database credentials, and other secrets. The report highlights LLMjacking risk from exposed Ollama APIs, a critical Flowise bug (CVE-2026-40933), leaked n8n tokens, and prior SentinelOne/Censys research finding roughly 175,000 exposed Ollama hosts in 130 countries.

Security Affairs·Sep 11, 17:27 UTC · 4d agoAI safety & securityCVE-2026-409331

Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)

A SANS ISC guest diary describes batch.py, a Python tool that consolidates honeypot logs and enriches IOCs with threat intelligence data.

Written by a SANS.edu BACS intern, the diary explains analysis of the DShield Honeypot-Omaha sensor, which uses Cowrie to emulate SSH and Telnet and log attacker activity. The author's batch.py script implements a four-phase pipeline with SHA-256-generated master and guest authentication to consolidate JSON and log files, correlate data via external APIs, and produce MITRE, CVE, geolocation, threat-score and fingerprint enrichment for investigated indicators.

SANS Internet Storm Center·Sep 3, 02:02 UTC · 13d agoTools1

AWS Introduces Pizza Bot: An Open Source Inbox for Background AI Agents

AWS open-sourced Pizza Bot, a self-hosted inbox app for background AI agents with approval gating and multi-provider model support.

AWS released Pizza Bot under Apache 2.0 after earlier versions served over 2,000 Amazon employees for meeting prep, email drafting, and research. The app provides macOS, Windows, and Linux desktop builds plus browser and terminal clients talking to a Hono API server, with LangGraph/DeepAgents checkpoints preserving thread state and approval pauses. It supports Amazon Bedrock, Anthropic, Google Gemini, OpenAI, OpenRouter, and Ollama, exposes external tools via MCP servers, and lets skill authors gate actions behind approve/edit/reject flows.

MarkTechPost·Sep 13, 08:10 UTC · 3d agoAI tools & infra

Meta Introduces Muse, a Personal AI Agent That Runs on Its Own Dedicated Secure Cloud Computer

Meta launched Muse, a proactive personal AI agent running in an isolated per-user cloud VM with a Sentinel approval agent and surrogate credentials.

Meta introduced Muse, a consumer agent that performs long-horizon tasks like email, travel booking, and bill negotiation, rolling out in the US on iOS, Android, muse.ai, and WhatsApp with free and paid tiers. Each user gets a dedicated Muse Secure VM where the agent runs in a systemd-nspawn cell, while a separate Sentinel agent approves every network request at layer 4/7 and injects real credentials only at the network boundary. The underlying Muse Spark 1.3 model, which Meta says cuts tool calls by ~20% and tokens by ~25% versus 1.2 and is near state-of-the-art on prompt-injection resistance, is available via Meta Model API, with open weights on the roadmap.

MarkTechPost·Sep 9, 04:38 UTC · 7d agoAI industry

Wordfence Argus Finds Complex 6 Step Critical RCE in Avada Theme with 1 Million Sales

Wordfence's AI-assisted Argus found a six-step critical RCE chain in the Avada WordPress theme, which has more than one million sales.

Wordfence reports that its Argus research uncovered a complex six-step exploit chain yielding critical remote code execution in the Avada WordPress theme, one of the best-selling themes with over one million sales. The company also notes AI-assisted submissions to its bug bounty program grew from 16% to roughly two-thirds of all reports in recent months. Sites running Avada should apply the patched release.

Wordfence·Aug 25, 18:02 UTC · 21d agoVulnerability

New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies

A newly observed Mirai-based Linux botnet dubbed Evooo1Bot compromises edge devices and turns them into persistent proxies for threat actors.

Evooo1Bot is a newly identified Linux botnet built on the Mirai framework but enhanced with additional advanced capabilities. The malware compromises edge devices and converts them into persistent proxies, likely for relay or resale use. The botnet's evolution beyond stock Mirai highlights continued targeting of poorly secured IoT and edge systems.

Infosecurity Magazine·Aug 14, 13:00 UTC · Aug 14, 2026Malware in the wild

WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review

WordPress.org now runs AI-powered automated security reviews on every plugin release, automatically blocking high-risk updates before distribution to millions of sites.

WordPress launched an automated security review that combines multiple AI models and Jetpack Scan during a six-hour cooldown to score each plugin release; updates above the blocking threshold are automatically held back from the WordPress.org update API. The change follows a July 28 incident where a backdoor added to a plugin with roughly 20,000 active installations was detected during cooldown and never delivered; the Plugins Team removed it 26 minutes after a Wordfence notification. Blocked developers receive an email with findings and are advised to publish a corrected version rather than await manual appeal.

GBHackers·updated Sep 11, 16:33 UTC · 4d ago·first Sep 11, 05:49 UTC · 5d agoTools 7 sources1

Meta Joins OpenAI and Anthropic in Reporting AI Exploit Incident

Infosecurity Magazine·Aug 6, 13:40 UTC · Aug 6, 2026Vulnerability1