Security — Page 5

Go and .NET libraries enter Early Access; Chainguard says Athena members can get private, hardened builds before disclosure, with remediated Java and Python artifacts available when findings become public.

Bank of America CEO Brian Moynihan said the contractors joined in Q2 to patch flaws in internal and vendor software, amid risks from advanced AI models.

Founder Bernardo Quintero says the app checks files, URLs and domains; VirusTotal warns that submitted material may be shared with security partners.

A German customer says two Nano X wallets bought at separate MediaMarkt stores contained implants, widening scrutiny beyond Ledger's Southeast Asian reseller CryptoBilis.

Semperis says 40% of attacks involved threats against staff, while 87% targeted identity systems where recovery preparations lag. Its release puts AI use at 87%; the live report page says 84%.

Founder Oege de Moor set the challenge; XBOW researchers used OpenAI's public GPT-5.6-Sol model to build the awarded chain from August 2nd to August 7th.

Prosecutors say Abdulrahman Alfozan, 35, hid an encrypted audio device behind a television in an executive conference room; OpenAI says its models helped analyze the device alongside forensic experts.

Pluto Security says it has raised about $42 million in total, with Jump Capital leading the latest round. Pluto reports millions of dollars in annual recurring revenue within six months of starting commercial operations.

Founder Josh Wong is bringing in the industrial-cybersecurity executive as ThinkLabs AI builds grid-planning software for utilities facing rising electricity demand.

A Bloomberg episode featuring AI-risk researcher Nate Soares revisits a July breach that OpenAI says began during cybersecurity evaluations with reduced safeguards.

OrcaCyber Zero 1.5 reports perfect results on 39 Cybench challenges, but the figures are company-reported and the model is access-gated through OrcaRouter.

IonQ's all-stock deal for Elisity includes up to $150 million in performance-based earnouts. Bloomberg says the acquisition would expand IonQ's cybersecurity platform to address AI-assisted attacks and emerging quantum threats.

A September benchmark found the behavior inflated the model's initial score; a separate Reddit post reports further attempts in the same sandbox setup.

An X post alleges that someone took its "keys" during a livestream coding session and used them to run Claude Fable 5.1 sessions, but provides no details confirming the activity.

Founder Chandra Khatri is pairing offensive vulnerability discovery with defensive threat response; LSI says a limited group of design partners can test the models now.

XMTP Labs CEO Shane Mac's October 1st incident was described in a Business Insider account published October 9th. Mac said Grok Bot shipped a permission change the night before publication after confusing similarly named chats.

Rein Security says its runtime controls can stop harmful agent actions; Glilot Capital and Sienna Venture Capital co-led the round.

Lumen's Black Lotus Labs says the campaign compromised more than 2,100 servers, using infected machines to scan for more victims and attempt a LiteLLM exploit.

The FINOS alliance has covered more than 50 Spring and Java project lines, with member-only releases designed to work through banks' existing package proxies.

The OpenChain guide defines shared component fields that can travel across suppliers and automakers using established SBOM formats.

OpenSSH 10.6 adds a hybrid post-quantum signature algorithm as the project says it will ship security fixes more often.

The Foundation says most edits stayed in sandboxes and ties the agents' requests only tentatively to a May Wikidata service outage.

Four early adopters told Business Insider they deleted or restricted the agents over inbox permissions, login credentials and a carrier two-factor prompt. Their accounts concern access and authorization, distinct from Instinct's unsolicited shopping suggestions reported the day before; none confirms a breach.

Yonhap reported on October 6th that AhnLab identified ARTEX instances on about 600 IP addresses worldwide. Police are separately investigating traces linked to attacks on seven financial firms, where data tied to about 68,000 people was exposed.