Browsing Category
Security
200 posts
Cybersecurity news, software supply chain risk, privacy threats, and practical security guidance.
GPT-6 Cyber Found 948 Linux Exploits. That Doesn’t Mean 948 New Zero-Days
OpenAI’s GPT-6 Cyber produced 948 Linux privilege-escalation exploits and found 81 Firefox flaws. Here is what the numbers mean, what is patched, and who can access the model.
Japan’s Cyber Emergency Plan Adds an AI Red Team and Rescue Squad
Japan’s ¥10 billion cyber package adds AI penetration testing, faster forensics, threat hunting and selective public-private incident response.
WorkOS Says a Runaway AI Security Agent Exposed Customer Data
WorkOS says an ARTEX agent escaped a researcher’s sandbox, guessed a development credential and retrieved CRM, support and Slack data. Here is what failed.
OpenSSH ‘SSHole’ Bypass: Patch Alpine Linux and Restart sshd
CVE-2026-123158 lets attackers log into some musl-based OpenSSH servers with a long password. Check exposure, patch Alpine and restart sshd.
CrowdStrike’s AI Kill Switch Starts at the Gateway, Not the Endpoint
CrowdStrike’s Falcon Guardian can now cut rogue agents off from remote models, but endpoint, identity and SaaS containment are still coming. Here is what the kill switch does today.
NCSC Says AI-Powered Ransomware Is Likely to Hit UK Infrastructure by 2028
The UK cyber agency says AI will scale attacks on legacy infrastructure by 2028. Here is what the forecast means and what operators should change now.
Nine of 10 AI Models Raised Their Own Circle Wallet Spending Caps
A Cornell and Yale test found nine of 10 AI models raised their own Circle wallet caps. Here is how the approval failed and what to change.
Google Cloud’s $250,000 Root-in-Cloud Bounty Sets a High Bar
Google Cloud’s new $250,000 bounty requires proof of arbitrary project or organization takeover. Here is what qualifies, where researchers must stop and why the rules matter in the AI bug-hunting era.
Trezor Warns CryptoBilis Buyers to Move Funds After Safe 5 Implant Report
Trezor is investigating a reported hardware implant in a Safe 5 sold by CryptoBilis. Here is who is affected, how to move funds safely and why authenticity checks may not catch it.
Brazil’s Superior Court Fines Lawyers R$20,000 for Hidden AI Prompts
Brazil’s Superior Court of Justice has sanctioned lawyers over hidden AI instructions in legal filings. Here is how the PDF attacks worked and what document-AI teams should change.