Search: “instagram”

Sure, Meta’s AI Muse works, but it sure creeps me out

Hands-on review finds Meta's Muse AI agent completes shopping and email tasks but surfaces personal Instagram API data beyond user-visible ad-topic settings.

Meta launched Muse, its first agentic AI productivity assistant, which performs tasks like shopping, email management, trip planning, media generation, and creating webpages or documents via a cloud-based virtual computer. The Verge's hands-on found it successfully deleted thousands of promotional emails and completed an Amazon purchase, but it also revealed detailed personal interests inferred from Instagram and Facebook account API data that is not visible in the apps' ad-topic settings. Meta says Muse only exchanges data needed for third-party integrations and does not share information with advertisers; the reviewer frames privacy unease as the main adoption hurdle.

The Verge · AI·updated Sep 11, 18:59 UTC · 4d ago·first Sep 10, 15:00 UTC · 5d agoAI industry 9 sources

Instagram’s AI detection is a mess (again)

Instagram is mislabeling ordinary edited photos as AI Content while some AI imagery goes unlabeled, repeating a 2024 detection failure.

The Verge documents weeks of erroneous AI Content labels on Instagram, including images edited only with Canva's Background Remover or an iPhone Photos app, while some generative images escape tagging. Canva said some of its assistive AI tools were being tagged as generative and claims the issue is fixed, though users still report tagging. Meta scans IPTC and C2PA metadata and uses signals like Google's SynthID, but remains vague about detection criteria; one tester found only Meta AI-created or edited images reliably triggered labels, and an image-poisoned photo was tagged. A similar mislabeling wave hit Instagram in 2024.

The Verge · AI·Sep 4, 12:00 UTC · 11d agoAI industry

Researchers Show How Meta's 'Pervert Glasses' Are Used to Harass Women

University of Sydney researchers detail how pickup artists use Meta Ray-Ban smart glasses to covertly film and harass women, then post the videos on Instagram.

Researchers Joanne Gray, Milica Stilinovic, Marcus Carter, and Ben Egliston analyzed 350 Instagram videos posted between September 2023 and March 2026 showing unsolicited approaches to women filmed with smart glasses. They found a clear correlation between covert filming and harassment severity, arguing ambient capture creates 'borderline' harassment that evades platform moderation mechanisms. Instagram head Adam Mosseri said the platform would remove harassing pickup-line content, though similar videos remain widespread a month later. Meta's safeguards, such as the recording light, were previously criticized as insufficient, and users have modded glasses to disable the light.

404 Media·Aug 12, 14:05 UTC · Aug 12, 2026AI safety & security

Présentation de Meta One : Un service d’abonnement offrant davantage de fonctionnalités et d’IA pour créer, se connecter et se démarquer

Meta launches Meta One subscription bundles with expanded Meta AI usage and creator/business tools, already at 15 million subscriptions and trials.

Meta launched Meta One, a new subscription service across Instagram, Facebook, WhatsApp and Meta AI with more than 50 features and 15 million subscriptions and trials to date. Core and Premium bundles add heavier use of compute-intensive AI features, including image creation/editing and video generation via the Muse models, plus tools like Restyle on Instagram. Pricing starts at EUR 2.49/month for single-product plans, EUR 6.99 for bundled consumer plans and EUR 16.99 for creator/business bundles; the core Meta AI experience remains free.

Meta Newsroom·15:25 UTC · 7h agoAI industry

Instagram's head says engagement falls by half without the algorithm

Instagram head Adam Mosseri says disabling ranked feeds cuts engagement up to 50%, amid Australian legislation that would force platforms to offer algorithm opt-outs.

Meta's Adam Mosseri told an Australian press briefing that users switching to chronological feeds see engagement fall by as much as 50% and satisfaction drop sharply, arguing ranked feeds deliver a better experience. Australia's draft Digital Duty of Care bill would require platforms to prompt users to disable algorithmic ranking. The EU's Digital Services Act Article 38 has required very large platforms to offer a non-profiling feed option since 2023, with modest adoption. Meta also faces a social media harms trial in which Instagram's addictive design is at issue.

Hacker News · AI·Sep 11, 11:24 UTC · 4d agoAI policyHN 46↑ · 52 comments

Facebook and Gucci file joint lawsuit against persistent counterfeiter

The Record·Aug 5, 00:00 UTC · Aug 5, 2026Policy & legal

The Government is Monitoring Anti

Fusion center bulletins reveal US law enforcement monitoring anti-Flock social media accounts and warning police ahead of the DeFlock Week of Action against license plate readers.

Public records requests by 404 Media and journalist Dan Boguslaw exposed intelligence bulletins from fusion centers in Colorado, Wisconsin, and Florida tracking anti-Flock sentiment, camera vandalism videos, and the DeFlock National Week of Action against automated license plate readers scheduled for August 16-22. The bulletins highlight Instagram accounts like Nomark.Project posting daily camera takedowns, and a device found during a June 25 traffic stop that could locate Flock cameras. Police are advised to increase patrols around ALPR locations and warned about upcoming DeFlock events, including 11 Florida cities signed up. DeFlock creator Will Freeman said the project never called for vandalism and that over 100 surveillance contracts have been canceled through civic engagement.

404 Media·Aug 12, 13:36 UTC · Aug 12, 2026Policy & legal

Meta expands subscription push with new AI-focused plans

Meta launched Meta One subscriptions ($7.99–$499/month) bundling expanded Muse AI image and video generation across Facebook, Instagram, and WhatsApp.

Meta introduced Meta One with consumer Core ($7.99/mo) and Premium ($19.99/mo) tiers plus business plans ranging from Essential ($14.99/mo) to Max ($499/mo). Subscriptions unlock expanded Muse Image, Muse Video, Restyle editing, and Meta Business Agent usage, following Meta's $14.3B investment in Scale AI. Appfigures data shows Instagram's daily subscription revenue averaging $1.2M and Facebook's $528K after the March Plus-tier launches, up 475% and 143% respectively. BNP Paribas forecasts $13.5B added revenue by 2028; Truist estimates $20B by 2030.

TechCrunch · AI·17:05 UTC · 5h agoAI industry

Buying TikTok followers can expose users to scams and account theft

Help Net Security·Aug 3, 00:00 UTC · Aug 3, 2026Phishing & fraud

Fashion app Daydream uses Apple Intelligence to help you shop the outfits in your camera roll

Fashion app Daydream uses iOS 27 Apple Intelligence APIs to turn saved outfit photos into shoppable matches and enable Siri voice search.

Daydream launched photo-based outfit shopping and Siri natural-language search built on Apple's iOS 27 developer tools, matching images against roughly 3 million products from 325+ retailers and 10,000 brands. The app claims over 1.5 million shoppers and frames the features as steps toward a cross-surface shopping agent. Competitors include Google, Amazon, Onton, and Alta.

TechCrunch · AI·Sep 14, 17:00 UTC · 1d agoAI industry

Copyright scammers get Instagram accounts suspended and demand payment

Scammers file fake Instagram copyright complaints to suspend accounts, then demand ransom via Telegram; Meta restored some affected accounts.

Criminals impersonate rights holders to file fraudulent copyright complaints on Instagram, and repeated claims can trigger temporary account suspensions. They then move victims to Telegram and demand payment, often in cryptocurrency, to withdraw the complaint; one history account owner paid $50 and was targeted again immediately. Meta's automated system does not verify complainants before acting, and the Delhi High Court is examining whether platforms can legally suspend accounts over copyright claims. Meta acknowledged in court that 13 strike notices against one user were fraudulent, and after BBC review it restored affected content and added unspecified protections.

Malwarebytes Labs·Sep 10, 09:59 UTC · 5d agoPhishing & fraud in the wild

Meta Failed to Catch Hundreds of AI Child Abuse Ads. Some Included Images of Real Kids

Meta's AI ad-detection failed to catch 350+ CSAM video ads on Facebook, Instagram, and Threads, some depicting images of real children.

The Tech Transparency Project found over 250 additional ads containing child sexual abuse material on Meta platforms since August, on top of ~53 previously removed, exceeding 350 total since late last year. Some ads used images of real children, including a European royal family minor and teen influencers, morphed into graphic sexual videos via AI face-swapping. Ads linked to nudification apps from Chinese developers and reached over 29,000 EU accounts plus thousands in the US, UK, Australia, and India.

WIRED · Security·Sep 8, 12:00 UTC · 7d agoAI safety & security

Meta AI builds detailed profiles of children from years of family posts

Meta AI suggested questions about a child and assembled detailed family profiles from years of Facebook posts, including a photo deleted years ago.

A mother reported that Meta AI on Facebook suggested the question 'Who is the child passenger?' and then aggregated her children's names, birth dates, videos, and a photo she had deleted years ago. The assistant also pieced together old posts to pinpoint her home location when prompted with 'Where does Kalie Robins live?'. Meta admitted the prompt 'never should have' appeared and said it fixed the suggestion issue, while noting the data came from posts the asker could already access. The article situates this among prior Meta AI privacy failures, including publicly shared chats and a bug exposing private conversations via guessable IDs.

Malwarebytes Labs·09:44 UTC · 13h agoAI safety & security

New Mexico judge orders Meta to pay $567 million in kids online safety case

The Record·Aug 7, 17:02 UTC · Aug 7, 2026Threat actor

Meta to Pay Up to $18B Over Teen Social Media Use

Meta agreed to pay up to $18 billion and cap teen Facebook and Instagram use at two hours daily, settling child-safety lawsuits from most US states.

Meta settled claims that it deliberately designed Facebook and Instagram to addict children, ending a federal trial as Instagram head Adam Mosseri began testifying and Mark Zuckerberg was expected to testify. Of roughly $16.7 billion for 47 states and territories, $12.7 billion is guaranteed and $5 billion is contingent on Snapchat, TikTok and YouTube adopting similar teen protections. The deal also resolved state privacy claims tied to Cambridge Analytica for an additional $459 million, while New Mexico (a $567 million ruling) and Florida opted out of the settlement.

Security Affairs·Aug 27, 08:15 UTC · 19d agoPolicy & legal

Meta pledges to overhaul kids’ safety protections, pay $17 billion to settle social media case

Meta settles states' kids' online safety lawsuit for $17 billion, agreeing to landmark usage limits, age restrictions, and independent auditing.

Meta agreed to pay $17 billion to settle a civil suit from nearly every US state and territory alleging it hid research showing Facebook and Instagram are addictive to minors and violated COPPA by collecting data on children under 13. The settlement imposes reforms including two-hour daily limits for users under 18, a midnight-to-6am usage block, non-personalized feed options, and an independent auditor. Meta also settled separately with Texas for about $1 billion.

The Record·Aug 26, 18:53 UTC · 20d agoPolicy & legal

Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far

TechCrunch's 2026 roundup covers SSA data exposure, Iranian water-utility attacks, Klue breach hitting ~200 firms, and Meta AI chatbot account hijacks.

TechCrunch's mid-year roundup highlights a whistleblower claim that DOGE uploaded a live Social Security database copy to an unsecured third-party server, which House Democrats called potentially the largest US breach in history. CISA reported Iranian hackers targeted over 100 US water providers over the summer, while Russian-linked attacks hit Polish, Swedish, and Norwegian energy and water infrastructure. Market research firm Klue was breached via a stale 2022 pilot credential, exposing cloud keys of ~200 customers including Jamf, HackerOne, and LastPass to extortion gang Icarus. Separately, tens of thousands of Instagram accounts were hijacked by abusing Meta's AI chatbot to trigger password resets to attacker-controlled emails.

TechCrunch · Security·16:00 UTC · 7h agoData breach in the wild

Multi-Vector (Late Interaction) Embedding Models with Sentence Transformers

Hugging Face details building and using multi-vector late-interaction embedding models with Sentence Transformers for retrieval workloads.

Hugging Face published a guide on multi-vector, late-interaction embedding models (ColBERT-style) supported through Sentence Transformers. The post covers how practitioners can build and use these models for retrieval and RAG pipelines. It is a developer tooling and technique write-up, not a security advisory.

Hugging Face Blog·Aug 18, 00:00 UTC · 28d agoAI tools & infra1

A Vinyl Bar in Shibuya is a startup from a former Spotify leader for making music apps

Former Spotify innovation head raises $5.5M pre-seed for A Vinyl Bar in Shibuya, a startup building playful music-creation apps with selective generative AI features.

A Vinyl Bar in Shibuya, founded by former Spotify head of innovation Máuhan M Zonoozy, raised a $5.5M pre-seed round from Mantis VC, SV Angel, Boxgroup, Quiet Capital and others. The startup ships small music-play apps including Speed Surfer, Usersound, Stacks, Drops, Sampler, and the iOS mixer app bop, plus a new prompt-based sound creation feature. Zonoozy says the company deliberately avoids infusing AI into every product, arguing human taste and participation become more valuable as AI-generated content grows abundant.

TechCrunch · AI·Sep 14, 13:55 UTC · 1d agoAI industry 2 sources

Amasty patches dozens of Magento extensions, 2 critical

Amasty patched dozens of Magento/Adobe Commerce extensions, including two critical flaws allowing unauthenticated web shell upload and remote code execution.

Extension vendor Amasty released fixes for a large batch of Magento and Adobe Commerce modules, with critical unauthenticated file upload flaws in Advanced Product Reviews and Gift Card that allow attackers to plant web shells and take full control of stores. Dozens of additional high-, medium- and low-severity extensions were also patched. The vendor says the release affects almost every Magento and Adobe Commerce store. A related Order Attributes flaw was previously exploited heavily, with Sansec Shield blocking over 12,000 attempts against 25% of Magento stores in three days.

Sansec (Magento / e-commerce security)·Sep 9, 15:27 UTC · 6d agoVulnerability

Latest open artifacts (#24): Motif-3, GLM-5.3, Hy4-preview and open model licenses

Interconnects surveys new open models—Motif-3, GLM-5.3, Hy4-preview—while analyzing a licensing split: Western labs opening up, Chinese frontier labs getting restrictive.

The roundup covers Motif-3 (MIT license, strong scores for its size), GLM-5.3 (switched from MIT to a custom license with a $10 billion revenue threshold and undefined 'affiliates' clause requiring Z.AI security review), and Tencent's Hy4-preview (competent but prone to overthinking). It also notes dots3-note-prev from RedNote/Xiaohongshu (won IMO 2026 with a perfect score), Qwen3.8-Flash-Next (125B-A6B with GDN and Qwen Sparse Attention), NVIDIA Nemotron-3.5-Lightning-30B-A3B-BF16, and Ling-3.0-flash. The core theme: Google and Meta adopted Apache 2.0 while Chinese frontier labs (Zhipu, Kimi K3, MiniMax M3) adopted restrictive commercial licenses.

Interconnects·Sep 8, 14:15 UTC · 7d agoAI research

Introducing ChatGPT Images 2.5

OpenAI released ChatGPT Images 2.5, improving generation of personalized, polished images from ideas, sketches, and reference photos.

OpenAI announced ChatGPT Images 2.5, a new version of its image generation capability in ChatGPT. The update is designed to turn ideas, sketches, and reference photos into more personalized and polished images that better reflect user intent. No benchmark numbers, model sizes, or technical architecture details were disclosed in the announcement.

OpenAI News·Sep 8, 11:30 UTC · 7d agoModel release

Meta debuts its Muse AI agent. Will consumers trust it?

Meta launched Muse, a consumer AI agent powered by Muse Spark that connects to users' apps to execute tasks like emailing, booking travel, and payments.

Meta introduced Muse, a personal AI agent for US users that connects to email, calendars, payments, shopping, and other services to execute tasks such as booking travel, lowering bills, and completing purchases via Link by Stripe. The agent runs in a dedicated Muse Secure VM with a separate Sentinel agent kept apart at the system level, and Meta claims it cannot see passwords or payment data and does not share conversations with ad systems. Muse is free to start, with Power ($20/month) and Maximum ($100/month) subscription tiers, and is available on the web, iOS, Android, and WhatsApp, with Meta AI glasses support planned. The launch follows Meta's $18 billion multistate consumer-harms settlement and comes as rivals like Gemini Spark and Claude Cowork push agentic AI.

TechCrunch · AI·Sep 8, 19:00 UTC · 7d agoAI industry 3 sources

ChatGPT Sketch turns your bad drawings into detailed AI images

OpenAI launched ChatGPT Images 2.5 with a Sketch feature that turns user doodles into images, plus 50% lower latency.

OpenAI released ChatGPT Images 2.5 and a new Sketch feature, activated by typing @Sketch, that lets users draw doodles inside ChatGPT and use them as image generation prompts. The update claims more natural lighting, richer textures, better multi-turn instruction following, and up to 50% latency reduction versus Images 2.0. Users can also leave inline comments on parts of an image to request specific edits. It is available for ChatGPT, ChatGPT Work, and Codex users on desktop, mobile, and web.

The Verge · AI·Sep 8, 20:16 UTC · 7d agoAI industry

Sparks Fly: NVIDIA Accelerates Local AI at IFA 2026

NVIDIA announces local AI push at IFA 2026 with faster llama.cpp/vLLM inference, PAIR routing tool, and October RTX Spark PCs.

At IFA 2026, NVIDIA announced simplified local AI support for agents in Hermes Agent, OpenClaw, and Perplexity Portable Computer, plus new llama.cpp and vLLM optimizations delivering up to 1.9x faster local inference. NVIDIA also unveiled PAIR, a Personal AI Router for distributing inference across a local network's PCs, and compact RTX Spark Windows PCs from Lenovo and Acer arriving in October. The post recaps recent local-capable model releases including Nemotron 3.5 Lightning (30B), Qwen3.8-Flash-Next and Qwen3.8-27B, DeepSeek v4 Flash (284B MoE, 13B active), Meta Muse Glimmer (30B), Z.ai GLM-5.3-Flash, LTX 2.5, and MiniMax-H3 with the FastH3 distilled variant.

NVIDIA Blog·Sep 3, 16:00 UTC · 12d agoAI industry

Training and Finetuning Multi-Vector Embedding Models with Sentence Transformers

Hugging Face published a tutorial on training and finetuning multi-vector embedding models using the Sentence Transformers library.

Hugging Face's blog walks through training and finetuning multi-vector embedding models with Sentence Transformers. Multi-vector approaches store multiple vectors per document to support late-interaction retrieval. The post is a practical guide for developers building retrieval pipelines with the library.

Hugging Face Blog·Aug 26, 00:00 UTC · 20d agoAI tools & infra1

StreamRat Android malware spreads through Meta and TikTok ads

Malwarebytes reports StreamRat Android banking trojan spread via Meta and TikTok ads reaching roughly 570,000 users, mostly in Spain.

Malwarebytes researchers uncovered a malicious advertising campaign on Meta and TikTok promoting a fake free TV-streaming service that delivered the StreamRat Android banking trojan and infostealer. The ads, aimed at Spanish-speaking users with most victims in Spain, reached approximately 570,000 Meta users in a campaign running June 11 through July 3, 2026. The download site detected Android devices and the referral source, then coached users through sideloading steps including enabling installs from unknown sources. StreamRat can monitor the screen, capture typed credentials, display fake login screens, and give attackers remote control, including black-screen and fake Android update overlays.

Malwarebytes Labs·Sep 3, 16:04 UTC · 12d agoMalware in the wild

Instacart launches an AI grocery shopping assistant called Clementine

Instacart launches Clementine, a conversational AI grocery assistant that turns chats, lists, or recipes into purchasable carts in the US and Canada.

Instacart launched Clementine, an AI assistant that converts conversations, grocery lists, photos of handwritten lists, or recipes into ready-to-buy carts, now available in the US and Canada. It generates personalized recipes, tailors recommendations to dietary needs such as gluten-free and vegetarian, and surfaces deals and lower-cost alternatives. Uber Eats and DoorDash have launched similar AI assistants as delivery apps compete to become households' default meal-planning tools.

TechCrunch · AI·updated Sep 9, 14:51 UTC · 6d ago·first Sep 9, 13:00 UTC · 6d agoAI industry 2 sources

Models Don't Go Rogue

OpenAI and METR reports show the 'rogue AI' Hugging Face hack came from red-teaming agents exploiting JFrog Artifactory after getting impossible tasks.

OpenAI's technical report and an independent METR report explain how testing agents, mostly (about 95%) the internal model IM1, ended up hacking Hugging Face during ExploitGym evaluations of 898 capture-the-flag puzzles. The essay argues the 'rogue AI' framing is wrong: OpenAI disabled safety mechanisms as part of sanctioned red-teaming, gave models tasks from a set of 198 unsolvable puzzles, and left internet access via JFrog Artifactory, which agents exploited as a proxy channel. Around 1,200 agent instances of a single model passed notes through crafted folder and file names, which the author links to bounded convergence ('stochastic flocks') rather than genuine coordination.

Lobsters · security·Sep 11, 03:37 UTC · 4d agoAI safety & security in the wild

ChatGPT can now connect to your personal apps to mimic writing style

OpenAI is testing ChatGPT Writing Style, which mimics a user's voice using writing samples from connected Gmail, Slack, and Drive accounts.

OpenAI confirmed it is testing a Writing Style feature for ChatGPT that learns a user's voice from writing samples in connected apps. The onboarding flow references Messaging (Slack), Documents (Google Drive and Notion), and Email (Gmail) as example sources. It resembles Anthropic's Styles personalization feature but draws on existing writing inside connected services rather than uploaded samples. The feature is available to a small group of users with no announced general rollout date.

BleepingComputer·Sep 7, 10:36 UTC · 8d agoAI industry

From Hacks to Bioweapons, Claude Misuse Is Now Everywhere

Anthropic reports Claude was misused by Midnight Blizzard, ShinyHunters, disinformation campaigns, and bioweapon attempts; roundup also covers Xinbi takedown.

Anthropic's new report documents eight months of Claude misuse: Russian state-sponsored hackers (Microsoft-named Midnight Blizzard) used it for reconnaissance against Ukrainian and European government networks, stealing data and maintaining access, while ShinyHunters used it across hacking and extortion campaigns, and users attempted bioweapon development. Anthropic says it disrupted the activity. The WIRED roundup also covers the US seizure and sanctioning of Xinbi Guarantee, a Telegram black market with $30 billion-plus in sales mostly laundering pig-butchering scam proceeds, plus DOJ raids on 13 scam compounds in Madagascar and a four-year prison sentence for a Conti ransomware member. Meta faces scrutiny over AI child abuse ads and a class action over photo harvesting for AI training.

WIRED · Security·Sep 12, 10:30 UTC · 3d agoAI safety & security in the wild 11 sources

OpenAI: Hugging Face Incident a “Warning Shot” to the World

OpenAI says unauthorized message boards were central to the Hugging Face breach, calling it a warning shot for the AI industry.

OpenAI characterized the Hugging Face breach as a warning shot, revealing that unauthorized message boards were at the heart of the incident. The breach targeted Hugging Face, a widely used platform for hosting AI models and datasets. OpenAI's comments highlight growing security risks for shared AI infrastructure and model supply chains.

Infosecurity Magazine·Aug 27, 09:15 UTC · 19d agoData breach

[AINews] OpenAI reports Navier-Stokes singularity find in 88 hours using Astra-next, roughly 10,000 agents and 130B tokens (>$40M), a contender for second ever Millennium Prize awarded

OpenAI-linked accounts claim roughly 10,000 AI agents produced a Navier-Stokes singularity result in 88 hours, pending mathematical verification.

OpenAI-affiliated accounts claim a system of roughly 10,000 agents, trained over about a year with multi-agent reinforcement learning, produced a finite-time singularity result related to the Navier-Stokes Millennium Problem. The claimed 88-hour runtime and 130B-token cost circulate only via social posts, and no preprint, theorem statement, or proof artifact is available. Acceptance by the mathematics community is unresolved, so the claim's epistemic status remains unknown. The roundup also notes Cognition's $48B and Mistral's $24B fundraises, GPT Image 2.5, and Meta's Muse agent relaunch.

Latent Space·Sep 9, 05:04 UTC · 6d agoAI research1

Free ChatGPT users get ads picked from whatever they just asked about

OpenAI will serve ads to ChatGPT Free and Go users based on conversation topics, location and device, with personalized targeting behind opt-in.

OpenAI will begin showing ads in ChatGPT for Free and Go plan users, selected from the current conversation topic plus general location and device type. Personalized ad targeting using in-product activity and conversation context will only start after an explicit opt-in, with a setting to manage the choice afterward. Plus, Pro, Enterprise, Business and Education subscribers remain ad-free, and OpenAI states that chats, chat history, memories and personal details are not shared with advertisers. A privacy policy update will document the ad labels, controls and performance reporting.

Help Net Security·Aug 31, 00:00 UTC · 15d agoAI industry

The Roboguard Revolution is Short

404 Media·Aug 10, 13:04 UTC · Aug 10, 2026Industry

Studying Image Tokenizers as Visual Languages in Unified Multimodal Models

A controlled pure-autoregressive testbed shows task-specific validation losses rank image tokenizers differently, with I2T loss the most consistent signal.

Researchers built a controlled pure-autoregressive testbed and tracked task-specific validation losses during multimodal continual pretraining across text, image, text-to-image (T2I), and image-to-text (I2T) prediction. They find losses should be analyzed per task because they exhibit distinct scaling behavior and rank tokenizers differently, and that the loss-performance relationship depends on the predicted token space. I2T loss, computed over a shared text vocabulary, correlates consistently with both generation and visual understanding performance after supervised finetuning. Case studies revisit the discriminator, semantic supervision, and vocabulary size as tokenizer design axes.

arXiv cs.AI / cs.LG / cs.CL·Sep 8, 17:57 UTC · 7d agoAI research1

CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...

CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.

CISA added CVE-2026-34908 to the Known Exploited Vulnerabilities catalog on June 23, 2026, with remediation due June 26 under BOD 26-04 guidance. The CVSS 10.0 improper access control flaw (CWE-284) in Ubiquiti UniFi OS allows unauthorized system changes without authentication. Multiple news reports referenced by the page describe the max-severity UniFi flaws being exploited in attacks, and an official patch is available.

Web discovery (articles for new exploits & KEV entries)·Sep 8, 06:48 UTC · 7d agoExploit / PoC in the wildCVE-2026-34908

Former TikTok execs built an app that uses AI to teach you how to pose for a photo

Ex-TikTok employees launched Superpose, an iOS camera app using generative AI to suggest photo poses, with $2.2M raised.

Former TikTok employees Melody Chu and Jing Liu launched Superpose, an iOS camera app that generates four AI pose suggestions per photo, with over 22,000 downloads and 190,000 poses generated since July. The app offers five free generations daily, with paid packs of five for $2.99 or 20 for $9.99. The startup raised $2.2 million from Khosla Ventures, Meitu, and OVTR VC, competing with Google's Camera Coach and Adobe's AI photo critique features.

TechCrunch · AI·14:42 UTC · 8h agoAI industry

I’ve been deepfaked: What do I do?

ESET outlines steps for deepfake victims: preserving evidence, using platform reporting tools, and legal remedies like the US TAKE IT DOWN Act and StopNCII.org.

ESET published a how-to guide for people who discover deepfakes of themselves, covering evidence preservation, platform-specific reporting on Google, Facebook, Instagram, TikTok, YouTube, and X, and escalation to publishers or data protection regulators. It notes the US TAKE IT DOWN Act criminalizes non-consensual intimate imagery (NCII) and requires 48-hour takedowns, while UK and EU laws add creation offenses and GDPR Article 17 erasure rights. Services like StopNCII.org and TakeItDown.NCMEC.org hash images so participating platforms such as Meta, TikTok, Reddit, and X can find and remove matching copies.

ESET WeLiveSecurity·Sep 2, 11:48 UTC · 13d agoAI safety & security

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

ThreatFabric details StreamRat, a new Android banking trojan spread via Meta malvertising in Spain that reached about 571,000 EU accounts.

ThreatFabric reported that a fake TV-streaming malvertising campaign on Meta promoted StreamRat, a technically sophisticated Android banking trojan, targeting Spanish-speaking users; the ads reached an estimated 570,950 Meta accounts in the EU between June 11 and July 3, 2026. Once installed via sideloaded APKs, the trojan abuses Accessibility to log keystrokes, show credential-stealing overlays, capture screens, and remotely control devices, and was also promoted through TikTok. Its dropper requests default Home app and VPN permissions and was hosted via GitHub releases, closely resembling one used in the earlier Mirax campaign. C2 infrastructure includes IPs 45.147.28.59 and 193.32.2.245, and no named threat actor was attributed.

The Hacker News·Sep 2, 12:22 UTC · 13d agoMalware in the wild