Security — Page 13
Cybersecurity, vulnerabilities, breaches, and defensive research.
- White House AI adviser attacks cyber guardrails after Kimi K3 bug test
David Sacks seized on a developer's unverified comparison as Hugging Face documented a similar guardrail failure during breach analysis.
- Beacon Security raises $13 million for agentic cybersecurity data layer
Gal Tal-Hochberg's new company wants to fix the raw telemetry problem before security teams hand more work to AI agents.
- OpenAI ships GPT-Red to train GPT-5.6 against prompt injection attacks
The internal-only model uses adversarial self-play to generate attacks that harden OpenAI's production models before deployment.
- Sysdig's AI ransomware report puts Loris Degioanni's runtime bet to the test
JADEPUFFER was human-directed, but Sysdig says an AI agent handled reconnaissance, credential hunting, encryption and the ransom note.
- Ghostcommit exposes the image blind spot in AI code review
ASSET Research Group's proof-of-concept hides a secret-stealing instruction inside a PNG that text-based reviewers skip.
- GitLost shows how a public issue can make GitHub's AI agent leak private repo data
Noma Labs says a prompt injection in GitHub Agentic Workflows crossed from public issue text into private repository content.
- Nebula Security publishes GhostLock exploit for 15-year Linux kernel flaw
The AI security lab says the bug powered an IonStack chain and earned a $92,337 kernelCTF reward from Google.
- As Amazon lets Mechanical Turk fade, Mercor hits a $2 billion gross run rate
The figure is before contractor payouts, but it shows how AI labs have shifted paid human labor from commodity microtasks to expert data work.
- Dario Amodei's Mythos bet is hitting the public CVE record
Epoch AI found a June spike in serious vulnerability disclosures, but the data shows a bottleneck Anthropic still has to clear: patching.
- YouTube's AI can be tricked into leaking private video titles, researcher says
Security researcher Javox says Google rejected the report as social engineering, exposing a policy gap around AI-driven creator tools.
- Citizen Lab says Pegasus hacked an EU lawmaker investigating Pegasus
Stelios Kouloglou's iPhone was infected in 2022 and 2023 while he sat on the European Parliament's spyware inquiry committee.
- Sysdig says JADEPUFFER carried out ransomware with an AI agent
Sysdig's report sharpens Loris Degioanni's runtime thesis: attackers can chain old cloud flaws without a human operator.
- Dawnguard raises $3.3M as secure-by-design cloud security gets funded
Co-founders Mahdi Abdulrazak and Kim van Lavieren launch Dawnguard's platform publicly, add a New York office, and pass $6.3M raised.
- Anthropic vs. The U.S. Government: The Full Timeline
The documentary follows Dario Amodei's refusal to drop Claude safeguards through the ban, lawsuits and export-control shutdown.
- Straiker hires Sriram Puthucode as CRO after $64M Series A
The AI-agent security company says Puthucode will lead global revenue as it pushes into EMEA and prepares APJ leadership expansion.
- Matt Mastracci says a fake VC interview tried to turn his maintainer laptop into a supply-chain foothold
The Rust maintainer found a TypeScript take-home repo that hid PinpinRAT in a TypeScript patch and PNG payload.
- Anthropic's Fable 5 redeployment faces a same-day cyber safety test
Alec says Fable 5 still helped plan offensive IoT abuse after Anthropic restored access on July 1st.
- Dario Amodei gets Fable 5 back online after Anthropic's export-control scare
Claude Fable 5 returns globally on July 1st, while Mythos 5 remains tied to government-approved cyberdefense access.
- Commerce is expected to lift Anthropic Fable 5 export controls tonight
The move would reopen access to Anthropic's general-use frontier model after an 18-day fight over AI, cybersecurity and export law.
- Kali Linux 2026.2 puts maintenance ahead of spectacle
The new release adds 9 tools, faster VM boots, GNOME 50, KDE Plasma 6.6 and a heavier NetHunter push for Android-based testing.
- Anonymous Exploitarium repo shows the new AI security triage problem
The GitHub archive mixes serious PoCs, conditional claims and self-reported AI-assisted fuzzing across open-source projects.
- Sakana and 360 turn Anthropic's Mythos ban into an opening
Fugu and Tulongfeng are being pitched as regional answers to U.S. model access risk, but their benchmark claims remain company-reported.
- Andrew Nesbitt's fake CVE is a real warning for AI security startups
The June 26th satire turns prompt injection, automated triage and agentic remediation into one supply-chain failure mode.
- Moltbook's 1.5 Million Token Breach Shows the Cost of Agent Hype
Wiz found missing Supabase controls let outsiders read and write production data before Meta bought the AI-agent forum.