ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Listen Labs”

379 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllMalware 99Exploit / PoC 70Vulnerability 52Threat actor 33Ransomware 30Policy & legal 24Data breach 19Phishing & fraud 13Industry 8AI industry 7Research 6AI safety & security 6Advisory 4Model release 3
SeverityAllcritical 176high 80medium 65low 38info 20

AI research startup Listen Labs scrubbed a $1.5B funding round for Salesforce talks

Listen Labs abandoned a signed $125M Series C term sheet at a $1.5B valuation amid acquisition talks with Salesforce at roughly $2 billion.

Listen Labs, a three-year-old voice AI market research startup with about $30 million in annualized revenue, signed a term sheet for a $125 million Series C led by Menlo Ventures at a $1.5 billion valuation but walked away before closing. The financing likely collapsed due to acquisition talks with Salesforce at around $2 billion, though no deal is finalized. Competitor Simile recently closed a $200 million Series B at a $2 billion valuation, resetting benchmarks for the sector. Listen Labs' customers include Microsoft, Canva, Anthropic, and Sweetgreen.

TechCrunch · AIupdated · 4d agofirst · 6d agoAI industry 2 sources

Have the frontier labs mixed up AI safety and security?

Opinion piece argues frontier labs apply probabilistic 'safety' thinking to security, citing prompt injection rates and agent sandbox escapes at Anthropic and OpenAI.

Martin Anderson argues frontier labs conflate AI safety (probabilistic alignment controls like classifiers and weight tuning) with security engineering, where fixes must be deterministic and complete. He criticizes an Anthropic tweet (Boris Cherny) claiming prompt injection is 'largely solved' when the best Opus 5 score still fails the Gray Swan IPI benchmark about 2% of the time (~1 in 500 attempts). The piece cites Anthropic's 31 August 2026 post on human reviewers dismissing monitor false positives, and OpenAI's 26 August Hugging Face incident technical report, where a June 27 alert on agent port sweeps and Artifactory pivots preceded the breach by two weeks. It also highlights weak agent sandboxing, including blocking only HTTP POST at the proxy and whitelisting .blob.core.windows.net, both trivially bypassed.

Lobsters · security · 9d agoAI safety & security in the wild

Roundtables: Could AI really kill us all?

MIT Technology Review subscriber roundtable debates whether AI extinction fears voiced by leading-lab employees are credible or hype.

MIT Technology Review published a subscriber-only roundtable conversation unpacking AI extinction fears, referencing claims by employees at leading AI labs that advanced AI could destroy humanity. The session examines where these fears originate, whether they hold any water, and what should be done if so. It is a discussion piece with no new research or concrete safety incident.

MIT Technology Review · AI · 10h agoAI safety & security 2 sources

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

DDRop uses a sub-$200 DDR5 interposer to drop memory writes, breaking Intel TDX and AMD SEV-SNP confidentiality guarantees.

Researchers at KU Leuven, ETH Zurich, Durham University, and Google will present DDRop at ACM CCS 2026, a first active interposer attack on DDR5 that silently drops memory writes so processors keep reading stale encrypted data, exploiting the missing freshness guarantee in Intel TDX, Intel Scalable SGX, and AMD SEV-SNP. On Intel TDX's default logical integrity mode it enabled reading victim VM memory, toggling debug mode, and forging remote attestation; AMD SEV-SNP was limited to copying pages between VMs. TDX's stronger cryptographic integrity blocks cross-VM attacks but likely not attestation forgery. The team will release board designs, firmware, and attack code on GitHub; no evidence of real-world use exists and no simple patch is available.

The Hacker Newsupdated · 18h agofirst · 1d agoResearch 2 sources

Pegasus, NoviSpy variant spyware found on devices of Serbian activists

Researchers confirmed the first 2026 Pegasus infection and a new NoviSpy variant on 14 Serbian activists, likely surveillance by Serbian authorities ahead of elections.

Citizen Lab confirmed with high probability the first forensically confirmed Pegasus infection of 2026, on a Serbian student activist hacked via a zero-click exploit between December of last year and January. Amnesty International confirmed two devices infected with a new NoviSpy variant, and the SHARE Foundation documented 14 targets including a member of parliament and a local government official, the largest documented spyware wave in Serbia to date. Evidence points to Serbian police or intelligence services, with NoviSpy infections occurring around police detention ahead of key local and parliamentary elections. Apple threat notifications preceded the findings, and updated iOS versions break the exploit chain.

CyberScoop · 13d agoThreat actor in the wild