AI & ML
Artificial intelligence and machine learning news
OpenAI built an AI pipeline to find, exploit and patch Linux flaws
OpenAI has developed an autonomous AI pipeline that can identify software vulnerabilities, develop working exploits to v...
OpenAI’s GPT-6 Cyber ups the ante on vulnerability discovery
OpenAI is introducing GPT-6 Cyber, a restricted access model that the company calls its most capable and aligned cyberse...
Debian, Ubuntu patch APT flaw that could hand attackers root
Linux administrators’ trust in package managers is being tested by a newly disclosed vulnerability in APT, the package m...
Zyxel patches a zero-day hiding behind an old fix
Zyxel has patched a zero-day vulnerability that attackers exploited to compromise 996 GS1900 network switches across 48...
Building incident playbooks for machine identity breaches
Pull up your SOC’s compromised account playbook and read through the first 15 minutes. Most SOCs begin their response by...
The Sandbox Fights Back: Joe Security Launches Adaptive Detonation
AI agents help Joe Sandbox uncover malicious behavior concealed by evasion techniques and unmet execution conditions. Jo...
Attackers turned OpsShield’s trusted update channel into a supply-chain attack
The kinks in the software supply chain are once again being exposed, with attackers now targeting OpsShield’s update pro...
Fake software installers are turning your PCs into profit centers for hackers
Users looking for cracked commercial software, free games, plugins, and unofficial utilities could be signing up for mor...
CrowdStrike launches AI kill switch to shut down rogue agents
With a notable rise in autonomous AI agents veering off-script inside corporate networks, CrowdStrike has launched an en...
CrowdStrike to acquire Fiddler, Dreadnode to extend AI security across agent lifecycle
CrowdStrike plans to acquire AI security companies Fiddler AI and Dreadnode in separate deals that will extend its Falco...
Why identity governance demands executive attention
The identity landscape you’re responsible for looks nothing like it did just a few years ago. Employees and contractors...
Anthropic AI model finds Linux kernel bug that leads to remote root access
Linux servers running Multipath TCP (MPTCP) could be vulnerable to remote code execution through a flaw in the kernel’s...
Mistral open-sources AI model despite warning it could aid cyberattacks
A trillion-parameter AI model that its developer says could help attackers carry out real cyberattacks is now free to do...
Everyday channels are available in an incident, but you may not want them
The first hours after a serious cyber incident are filled with activity. Security starts investigating, IT works to cont...
We are not ready for what AI has done to red teaming
Something shifted in offensive security over the last eighteen months that most organizations haven’t fully absorbed yet...
A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure
In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime group, Lumen’s Black Lotus La...
New Cisco firewall zero-day being actively exploited
A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and...
“Is Web Development Still Worth Learning in 2026?” Reddit Had Opinions
AI did not kill web development—it just killed the easy version where knowing a few lines of code was enough. A Reddit t...
Fake Anthropic AI previews lure in overeager employees
Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. New research from cyberse...
Anthropic and OpenAI diverge on who should pull the plug on risky AI
OpenAI and Anthropic agree that frontier AI systems need stronger oversight, but they are proposing sharply different ap...