78 stories across editions, newest first.
Not seeing anything posted about this anywhere, received on Monday, 26th of Oct 2026: Subject: Notice of Security Incident This notice is being sent on behalf of Scribd, Inc., the parent company of Scribd, Slideshare, Everand, and Fable, by Epiq, Scribd Inc.’s notification partner.
Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link — A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it …
A tampered copy of the Claude Code extension was published on Cursor's marketplace. Anthropic says a malicious actor used access to that marketplace and that its own systems and employee laptops were not compromised.
Hackers have stolen about $6.3 billion worth of digital assets from Binance, a major cryptocurrency exchange operator. The heist is more than four times bigger than the previous largest crypto theft.
Binance “temporarily suspended” all deposits and withdrawals as it investigates security issues and works with law enforcement; Binance.US says it's unaffected — Tether and Circle freeze billions of dollars' worth of their coins as world's largest crypto exchange investigates security issue
Solink, which began in Ottawa in 2009 selling cloud video surveillance, uses AI to pull business information from retailers' security cameras.
Mintive's platform helps IT teams control enterprise AI agents.
Google is rolling it out to selected cybersecurity defenders through Fairwind at $2 per million input and $10 per million output tokens, rising to $4 and $20 later.
Cloud security startup Upwind raised a Series C at a $3.8B valuation instead of selling itself to Datadog for the same price.
We help your company stop unauthorized people, bots, and AI agents before they move money, export data, or change permissions.
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched.
What CISOs told us about AI, budgets, and the priorities shaping 2027.
Infisical keeps companies' private credentials away from AI agents; customers include Airbus and Volkswagen. Elad Gil led the round at a $600M valuation.
Cohere says an Alibaba Qwen model said it would not use tools, then tried to send a file to a server in Beijing; researchers say it is probably a training quirk.
The RealReal, a secondhand luxury fashion consignment retailer, said it's updating its bot defense system, effectively making it harder for AI agents to shop on its site.
Made this because I'm curious if anyone out there has figured out how to actually use this PHP RCE we spent the last few days panicking over. Have fun!
Safety nonprofits METR and Redwood Research found that OpenAI's agents could have hidden hundreds of their own actions from its monitoring system.
On the other hand, it did not trigger when asked about "reversing" a videogame.
(0:00) Bestie intros! (0:11) Ken Griffin's AI bubble warning (8:19) Palo Alto Networks CEO Nikesh Arora joins (14:24) AI Cyber panic: PHP exploits and the tumultuous year ahead (44:17) France on the brink: Riots, immigration referendum, debt crisis (1:31:49) Trump's second half strategy, Press…
The round was led by Red Dot Capital Partners and brings Mave's total funding to $34M.
Anthropic disclosed that Mythos 5 tried to submit malicious code to a GitHub project in July during an evaluation of its cybersecurity capabilities.
A look at OpenAI's Project Daybreak, which lets vetted partners use its top hacking models to find and fix vulnerabilities and helped uncover PHP2Shell RCE bugs — This voice experience is generated by AI. Learn more. — Using the latest GPT model, cyber researchers …
You’ve probably all heard about the Railway hack a few days ago. Context from the official report: 1. How they got in The hackers had access to enormous computing resources and were using abliterated models.
The Next Web reports OpenAI and Anthropic will add up to £200m between them to the UK government's £100m lab.
Five Drastic Changes Every Company Leader Should Consider Now
OpenAI has cut live web access from training of its most advanced models; they now browse and search a cached copy of the web instead, The Next Web reports.
In a UK AI Security Institute evaluation, Mythos 5 submitted malicious code to a GitHub project and created fake accounts to pressure the maintainer; Anthropic says newer models rarely do so.
Attackers began exploiting the PHP2Shell vulnerabilities four days before patches; SiliconANGLE reports exploit attempts seen by Cloudflare have climbed into the millions.
The new feature allows agents to log into a customer's personal accounts while still protecting the private credentials that secure those accounts.
Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
Wiz and OpenAI disclosed critical PHP flaws found with AI; patches shipped the same day, and AWS analysts say one actor exploited the bugs four days before disclosure.
Armorer Labs (YC Fall 2026) continuously verifies the security of AI agents used in regulated industries.
OpenAI on coordinating global responses as AI agents uncover vulnerabilities, with a site at patchtheplanet.org.
Microsoft says China-linked hackers used AI penetration testing tool ARTEX to compromise ConnectWise as part of a campaign targeting hundreds of organizations — A Chinese state-aligned hacking group used an AI-driven penetration testing tool to compromise IT services firm ConnectWise as part …
