Anthropic’s AI used fake identities, malware in rogue attack on GitHub project
Anthropic and OpenAI models’ unprompted actions forced halt to UK cyber tests.
找到 479 篇相关文章
Anthropic and OpenAI models’ unprompted actions forced halt to UK cyber tests.
Security researcher James Kettle tried to push the limit of AI’s hacking abilities—and discovered how effective it can be when combined with human expertise.
Google's AI brain drain continues.
Chinese researchers have shown that AI models have the capacity to act like aggressive and adaptive computer viruses.
Jeff Dean and other high-profile Google executives have founded Discovery Loop, a startup that will seek AI-powered breakthroughs in everything from drug discovery to chip design.
Nobody likes getting a swab shoved up their nose. A startup in Japan has developed a much less intrusive system.
Wispr Flow, a popular dictation tool, has released a live notetaker that transcribes and summarizes meetings. It joins a growing wave of AI notetakers for the workplace.
Some creators fear the EU AI Act’s regulatory chaos will upend their lucrative businesses. Others are owning it by incorporating AI transparency into their creative process.
Rogue AI agents from OpenAI and Anthropic have again been caught trying to disrupt servers and software—and leaving instructions for future bad behavior.
The Trump administration shared the details of its plan with OpenAI, Anthropic, and other AI labs on Tuesday. For now, the public remains in the dark.
Platform engineering maturity is emerging as an important factor in determining whether organizations can turn AI adoption into sustainable operational value, according to Perforce Software's 2026 Platform Engineering Report. By Craig Risi
ESPN unveiled an “AI tells detection” tool during broadcasts of the 2026 World Series of Poker. Is it a neat computer-powered party trick, or a real threat to poker’s future?
Ati Robotics assembles its robots in India and uses just a few Chinese parts—a strategy that could pay off as the Trump administration cracks down on Chinese humanoids.
Open-weight AI models are having a moment in the wake of recent turmoil at US tech giants. For French AI lab Mistral, that’s the the best thing that could have happened.
VPS.org One-Click Template: Public PostgreSQL Fixed Password and Zulip Session Forgery 1. Basic Information Article Title : JVNVU#91736352 Multiple Vulnerabilities in VPS.org One-Click Deployment Templates Published By : JVN Publication Date : August 3, 2026 (CERT/CC primary info on July 31, 2026) Severity : High Original Source : https://jvn.jp/vu/JVNVU91736352/index.html Primary Source : https://kb.cert.org/vuls/id/243636 Related Entities : VPS.org, Supabase template, Zulip template, PostgreSQL, CVE-2026-16503, CVE-2026-16504 Patch Status : No vendor contact was established, and no patches are available as of publication. 2. Executive Summary One-click templates fail to generate deployment-specific secrets. They expose the Supabase database at 0.0.0.0:5432/postgres:postgres , and deploy Zulip with secret_key: changeme , a DB password of zulip , and plain HTTP. This allows remote takeover immediately after deployment. 3. Attack Flow Supabase/PostgreSQL A user deploys the VPS.org Supabase template using one-click deployment. PostgreSQL binds to all interfaces ( 0.0.0.0:5432 ) and uses the hardcoded superuser password postgres . Docker-specific iptables rules may bypass the host UFW settings and expose the service to the Internet. An attacker scans port 5432 and authenticates using postgres/postgres . The attacker performs data reading/exfiltration, modification/deletion, schema/role changes, establishes DB object persistence, or causes a Denial of Service (DoS) via a drop command. Zulip The template is deployed with secret_key: changeme , a DB password of zulip , and DISABLE_HTTPS=True . An attacker forges and validates signed session material using the known secret, achieving authentication bypass and account/instance takeover. The attacker connects to the database using the default password or intercepts credentials and sessions via plain HTTP paths. 4. Attacker Position and Execution Location Remote connection from the Internet to port 5432 or Zulip HTTP on the p
Fenix Flexin’s hit song “Rubberz” has hip-hop fans arguing over whether it was generated by AI. Some say they have proof it’s machine-made, but will anyone care?
This story originally appeared in The Algorithm, our weekly newsletter on AI. To get stories like this in your inbox first, sign up here. Humanoid robots usually elicit more cringe than awe: They stumble, kick children, and despite advances are still worse at using their hands than my toddler. It’s a nascent industry, and such robots…
Your next drive-thru order might be taken by a bot. And you might not even notice.
Steve Elmers, also known as the “Guardrail Guy,” is done calling out license plate readers after two that appeared in his videos were vandalized.
MIT Technology Review Explains: Let our writers untangle the complex, messy world of technology to help you understand what’s coming next. You can read more from the series here. When two OpenAI models hacked into the website Hugging Face in July, they weren’t trying to make money or commit sabotage—they were just looking for answers…