30
30
30
30
Security Vulnerability in a Voting System
A four-year-old vulnerability letting anyone recover ballot casting order was demonstrated with AI coding agents against Georgia's May 2026 primary data.
A previously disclosed vulnerability in ballot scanners used across 21 US states, including Georgia, allows recovery of the order in which ballots were cast. Nearly four years after the original disclosure, a researcher pointed AI coding agents at the vulnerability paper and used only public data — county early-voting lists and cast-vote record (CVR) files — to analyze voter behavior in Georgia's May 2026 primary. The demonstration required no access to voting machines, networks, source code, or non-public records.
40
30
35
45
30
30
30
30
30
35
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
Elastic documents four persistent REVSTEALER-linked tools (ProManager, WinUpdate, SoftManager, LockAppHost); LockAppHost disables Windows Update and Defender to run a crypto miner.
Elastic Security Labs identified four previously unreported executables tied to REVSTEALER, a commercial Windows infostealer sold since at least February 2026: ProManager, WinUpdate, SoftManager, and LockAppHost. LockAppHost abuses CMSTP for elevation, adds Microsoft Defender exclusions, disables five Windows Update services and 13 scheduled tasks, then hides a miner in legitimate Windows processes; other modules steal wallets, clipboard-swap crypto addresses, and turn victims into reverse proxies. The components share REVSTEALER tradecraft including packer, runtime function resolution, and Polygon smart-contract backup configuration (EtherHiding). Elastic's detection rule matched about 4,700 VirusTotal samples over the past year; distribution uses hijacked YouTube channels promoting game cheats and a fake 'Claude Opus 5 Free Desktop' app.
45
OpenAI banned Russian ChatGPT accounts backing covert influence operation
OpenAI banned Russian-run ChatGPT accounts behind fake think tank IBI, which used AI-generated posts and a 'Sovereignty Index' to push pro-Russia narratives.
OpenAI banned a cluster of ChatGPT accounts, likely operated from Russia via VPNs, that generated English-language social media comments for X, Facebook, LinkedIn, Telegram and Substack promoting the International Burke Institute (IBI). The Israel-branded IBI website, registered in February 2025, claimed ties to figures like Francis Fukuyama, but 34 of 36 sampled articles were copied or misattributed. Its 'Sovereignty Index' consistently ranked Russia favorably while criticizing France, Germany, the EU and the US; OpenAI rated the campaign at the lower end of Brookings Breakout Scale Category Three.
45
30
30
30
35
30
30
45
45
30
35
30
30
30
30
30
30
30
30
30
30
35
45
30
45