Security This Week

Should you Trust your Router?

X/Twitter message revealing token router shenanigans

Radix Malorum

OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI

Chinese Food Again?

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

Hack the Spacecraft!

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

The Untouchables?

US government will let private companies hack criminal gangs

Rogue AI: Irregular?

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

Caught Passing Notes in Class

OpenAI finds AI agent leaving escape notes for its future versions

OpenAI Goes Rogue!

OpenAI Models Autonomously Hack Hugging Face

The Hives that Bind

New Windows LegacyHive zero-day gives hackers admin privileges

AWS Hacked!

AI-Powered Attack Compromises AWS Cloud in 72 Hours

Claude Unmuted

Trump administration lifts restrictions on Anthropic's Claude models after cybersecurity alarm

Don't Wear Your Face!

Hackers leak facial recognition records tied to millions of Madison Square Garden visitors

What's up with Fortinet?

FortiBleed campaign exposes 75,000 Fortinet firewalls worldwide

Aesop is Rolling in his Grave

Anthropic rolls out Claude Fable 5, but it's available for a limited time

Book: The Cat's Revenge by Claude Balls.

Claude Code’s GitHub Actions Vulnerability Lets Attackers Compromise Any Repository

Beware of the Landshark!

FBI warns of in-person data theft attacks from extortion gang

Et Tu, M5??

First public macOS kernel memory corruption exploit on Apple M5

Ding Dong! Linux Again!

New Linux 'Dirty Frag' zero-day gives root on all major distros

Every Linux System at Risk!

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution.

Mythos: the Good and the Bad

Anthropic investigates unauthorized Mythos access by Discord group